Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3139312e3137362e302e302f31322d3234203d3e203238353733.roa
File:                     3139312e3137362e302e302f31322d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ImuRyroE/KYzf0D6f5iy2wHLyVPq7sYvV2GunPyUWPQ=
Subject key identifier:   F6:46:3B:7B:5A:AE:72:80:71:99:6C:01:4E:3F:54:BD:19:60:53:E8
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7013BF7F899CC6391E42D1281121400CC1D63035
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3139312e3137362e302e302f31322d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:13 +0000
ROA not before:           Wed 04 Feb 2026 19:55:13 +0000
ROA not after:            Wed 03 Feb 2027 20:00:13 +0000
asID:                     28573
IP address blocks:        191.176.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:13:bf:7f:89:9c:c6:39:1e:42:d1:28:11:21:40:0c:c1:d6:30:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:13 2026 GMT
            Not After : Feb  3 20:00:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:d3:ad:f3:c7:06:cf:ed:01:c3:40:c6:40:
                    ee:63:fe:60:79:c1:d2:f1:0c:ea:6a:b1:08:7c:83:
                    33:a1:86:ca:ba:0b:0a:9c:77:d9:83:fe:6d:57:a5:
                    a9:6e:2b:71:d3:c8:60:50:cc:3d:3d:c0:e0:6a:a4:
                    d2:0b:0d:9e:6e:ff:e8:4c:ae:d0:fd:a0:0d:19:07:
                    5a:87:72:5a:d4:6e:5e:aa:e6:54:33:8a:d1:88:a6:
                    36:ea:1a:6b:b8:4c:19:12:8f:47:76:75:33:92:bb:
                    3e:08:b3:fc:18:fa:43:2d:86:a3:8a:79:0d:4c:06:
                    b5:c6:bb:7c:57:86:b9:bf:83:1c:7b:30:17:c8:17:
                    2c:99:19:15:f6:a1:a4:a9:a6:7d:55:bd:4d:b9:ec:
                    0f:5f:1d:2e:f5:05:b6:1f:f8:a9:75:9c:b6:dd:d1:
                    c2:0d:47:98:f2:ff:72:b1:02:7e:54:ad:e3:34:3a:
                    36:48:7e:5e:77:bd:4f:a8:d0:56:91:4d:d9:28:c9:
                    eb:11:50:dc:b3:80:11:9c:0a:5f:97:9b:1d:62:cb:
                    c5:48:e7:5c:7b:3a:06:ba:94:0f:cd:73:a2:3e:91:
                    84:93:5a:04:5a:e8:85:b7:88:f7:13:c2:58:c3:29:
                    b0:f1:08:64:97:ec:5f:4f:bd:68:15:4f:92:ee:77:
                    24:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:46:3B:7B:5A:AE:72:80:71:99:6C:01:4E:3F:54:BD:19:60:53:E8
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3139312e3137362e302e302f31322d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.176.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         54:57:70:2b:44:63:74:f0:2e:d2:ac:10:28:1a:dc:03:17:de:
         73:b8:8a:12:a4:b6:f8:57:a5:1d:ac:5e:f6:ff:b1:27:b6:6f:
         83:a0:93:79:58:0c:c5:fc:4a:2e:5e:00:d2:5d:d9:e1:bf:50:
         c7:4a:5d:8d:77:1a:6a:91:4e:91:44:df:cf:9d:fd:cb:00:b7:
         12:33:73:eb:4d:0d:c8:8c:38:32:bd:b7:34:7b:e9:8b:07:39:
         6f:9f:47:7a:b2:3b:d9:94:a5:bb:e2:7a:6b:47:a8:21:7a:68:
         b6:e4:a3:d1:22:fb:4f:7f:2c:64:dd:a1:53:f2:54:59:17:c6:
         e9:ce:3b:ad:e3:1d:f8:0e:17:a5:db:93:24:89:6b:e3:a4:b2:
         5f:34:54:8c:8e:99:13:50:3d:f2:43:f3:a9:71:3f:f3:b1:bc:
         e2:29:00:f5:c8:db:9b:5e:3f:8e:27:47:7f:f1:f3:a7:ab:bf:
         de:eb:29:3c:93:8e:1b:53:7e:c7:9a:a9:b0:bb:28:9f:64:fa:
         9f:3d:8b:a4:8d:87:41:25:63:3a:a6:e8:91:92:fd:c3:66:54:
         cf:84:df:01:cc:2f:a4:95:a1:ce:f7:44:5f:94:9e:73:fb:88:
         82:d9:b9:a5:2e:78:ce:f0:10:02:bf:a8:b2:cc:93:34:ee:52:
         d3:83:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:06 2026 by rpki-client