Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa
File:                     3138392e35342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          CEHXd0Z+pdXnRIlTCXOV3JoNdR1Jtm0zEc6gtlfN0og=
Subject key identifier:   01:31:AA:9D:E1:ED:6D:C8:AB:1D:7E:84:28:5E:4C:A5:36:C0:29:07
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       02346C3FF2EE0AA323C1DA6F895E82B8549EA74A
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     28573
IP address blocks:        189.54.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:34:6c:3f:f2:ee:0a:a3:23:c1:da:6f:89:5e:82:b8:54:9e:a7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject: CN=3082010A0282010100D2C44005DBA4FB5CBE842B506B3ED83DA530E40EC736ABB07CE9B4C54468101BA009FBF0F3707D289419A1FF23B547847A674EB46D4137C14691A87CCB370E0E557EDB7536221E864F61D2C1EF881F71A9730C1C3EE79F326A2E7EEA243A63EC6F1C09940537C6D5DE1904C6880A8602395BE9EF259EC4E3A9A21A3E9C741CCA6C3B382FED5A58E26C28E0D171B9813A4BD0ECA6FA504FA4A30A7988C84A8DEF12A5A0BE4CA38771E24FF6634268BE94ABCB469391D626B8797AAD764EDD818D344A8F700CC2CA0C0C2DAACE9605EE36FCA22BF71D855BA263A6554E7E56AD6E54330BCEB1A452C10E264354275F28BBEB5CDC1B328365013AEC2D5ED222FF730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:40:05:db:a4:fb:5c:be:84:2b:50:6b:3e:
                    d8:3d:a5:30:e4:0e:c7:36:ab:b0:7c:e9:b4:c5:44:
                    68:10:1b:a0:09:fb:f0:f3:70:7d:28:94:19:a1:ff:
                    23:b5:47:84:7a:67:4e:b4:6d:41:37:c1:46:91:a8:
                    7c:cb:37:0e:0e:55:7e:db:75:36:22:1e:86:4f:61:
                    d2:c1:ef:88:1f:71:a9:73:0c:1c:3e:e7:9f:32:6a:
                    2e:7e:ea:24:3a:63:ec:6f:1c:09:94:05:37:c6:d5:
                    de:19:04:c6:88:0a:86:02:39:5b:e9:ef:25:9e:c4:
                    e3:a9:a2:1a:3e:9c:74:1c:ca:6c:3b:38:2f:ed:5a:
                    58:e2:6c:28:e0:d1:71:b9:81:3a:4b:d0:ec:a6:fa:
                    50:4f:a4:a3:0a:79:88:c8:4a:8d:ef:12:a5:a0:be:
                    4c:a3:87:71:e2:4f:f6:63:42:68:be:94:ab:cb:46:
                    93:91:d6:26:b8:79:7a:ad:76:4e:dd:81:8d:34:4a:
                    8f:70:0c:c2:ca:0c:0c:2d:aa:ce:96:05:ee:36:fc:
                    a2:2b:f7:1d:85:5b:a2:63:a6:55:4e:7e:56:ad:6e:
                    54:33:0b:ce:b1:a4:52:c1:0e:26:43:54:27:5f:28:
                    bb:eb:5c:dc:1b:32:83:65:01:3a:ec:2d:5e:d2:22:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:31:AA:9D:E1:ED:6D:C8:AB:1D:7E:84:28:5E:4C:A5:36:C0:29:07
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         55:1d:6b:bd:98:3b:0c:5d:9f:50:dc:70:21:7a:af:04:5e:74:
         b1:b6:c5:4f:d0:74:f0:a2:ab:c5:3d:4d:5d:79:52:91:0b:70:
         1f:28:98:23:ae:d6:04:d3:0e:e8:a7:b6:c3:52:81:f6:98:a9:
         71:18:d7:08:dd:06:7f:51:94:22:25:ef:5c:19:33:30:b8:d2:
         e7:8b:a7:66:55:9b:20:76:d2:4e:b0:a7:01:9e:c6:a4:43:f0:
         f9:4b:c7:e8:90:f6:44:aa:4b:50:e4:9e:24:0b:61:3a:fd:95:
         c6:a5:86:77:f8:8e:5e:36:9c:ce:07:1b:79:32:a0:6e:02:d2:
         a3:96:99:a6:7a:2f:6e:27:99:70:9e:4a:8d:2f:50:93:b5:d3:
         2d:0e:b0:2f:e8:07:a6:63:1a:fb:99:26:0a:ef:66:2e:73:fa:
         eb:63:6d:a4:a5:ff:82:fe:ae:b6:84:f4:9a:ff:9c:54:c5:9e:
         7b:a7:5a:bd:ce:07:d7:54:37:eb:b5:87:57:37:b6:5c:6d:e6:
         2d:33:7a:82:42:4c:f7:8d:c3:1d:99:50:cc:bc:89:af:e6:33:
         89:3b:37:a7:0d:c8:0b:5c:39:31:2e:93:3e:b6:53:b9:4c:78:
         be:cb:c7:28:7c:bb:ef:4d:17:b9:37:ee:23:5d:67:ec:8a:43:
         72:69:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:53 2026 by rpki-client