Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3136302e39362e302f32302d3234203d3e203238353733.roa
File:                     3230302e3136302e39362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          mK5v9Kvd0rOWNnyTze5+F57x5T1YoF++WEoCvGVdCDY=
Subject key identifier:   4D:9C:FB:1D:C0:AC:E2:A0:62:CD:95:7B:16:05:FA:0E:D9:04:97:22
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       3FDC1197F958882A370CBEBEA526D522DF998B87
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3136302e39362e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     28573
IP address blocks:        200.160.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dc:11:97:f9:58:88:2a:37:0c:be:be:a5:26:d5:22:df:99:8b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2d:9c:71:8e:bf:ab:46:21:f8:ec:df:b3:53:
                    dd:ef:6b:5d:22:d7:4b:d4:ed:6d:62:fd:cc:d5:e7:
                    90:4a:53:54:a3:3c:1d:fe:5e:be:6c:d0:db:a7:72:
                    a1:8a:c4:9a:60:3a:da:f5:89:6c:70:9c:35:51:a4:
                    3f:ff:4d:0f:91:eb:4a:8e:73:3e:e4:71:7e:94:3d:
                    74:92:1f:48:e1:9f:b8:b8:a1:3b:c9:cb:cb:df:9a:
                    d0:db:e4:36:ab:4a:65:e9:b7:4e:41:09:50:55:8f:
                    90:ea:8d:ca:e0:15:48:58:ac:b1:49:31:f1:d0:98:
                    16:29:82:f0:eb:c5:67:8b:2c:d6:46:fc:e2:47:1d:
                    b1:b7:0d:47:e0:32:3e:c9:2a:21:b5:21:2c:6b:d5:
                    13:58:c1:37:1c:06:7a:c1:ee:a9:e1:c8:91:80:ad:
                    84:b9:87:5f:b1:57:cf:2e:2b:1c:30:fe:32:fc:65:
                    3d:45:52:43:f8:b9:56:aa:d3:e6:d5:9b:e6:2e:c1:
                    b3:08:be:64:1f:a6:e3:9f:fb:fb:31:14:c8:68:e0:
                    52:6c:35:89:47:0e:ed:d6:77:c5:4d:91:17:2b:ef:
                    c7:fd:3b:5e:7a:5c:eb:01:a4:e0:8b:21:4e:d2:01:
                    2b:1f:59:fa:0d:29:4d:23:b8:7a:21:18:3d:e5:85:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9C:FB:1D:C0:AC:E2:A0:62:CD:95:7B:16:05:FA:0E:D9:04:97:22
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3136302e39362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:f5:8d:c9:18:f8:de:8b:7f:07:af:ee:a7:29:de:81:cf:5d:
         83:8f:99:08:86:fd:cf:a3:ac:0c:d0:11:17:8c:62:c1:3e:3d:
         19:61:37:f0:a0:56:29:94:20:2d:f6:8f:c8:8a:3f:8d:ea:d8:
         27:6c:ce:67:07:1e:6f:b8:c2:82:5f:43:3e:1a:40:72:5e:6e:
         5c:96:60:59:ed:44:02:7d:6c:d9:bc:87:00:f3:c1:82:0e:b6:
         3c:88:24:36:9b:db:3a:c1:82:fe:a8:6b:97:96:33:45:df:8c:
         e6:cc:e1:02:c8:5f:ef:da:78:3d:92:14:eb:f7:f3:8e:10:84:
         3f:19:f4:56:1f:a1:57:94:fe:a6:39:a6:3f:62:9c:10:ee:2b:
         22:a6:e3:31:c7:36:2c:ec:78:19:eb:92:d6:51:fb:ef:18:4c:
         5c:73:3a:ec:87:d5:d5:da:c2:71:d4:7b:0d:86:4f:d2:a2:e0:
         44:62:f5:48:0c:2c:dc:df:fc:cf:45:32:66:4d:88:1f:5e:49:
         54:8c:31:89:03:64:70:b0:ee:99:db:b9:f4:c9:a7:9f:35:6e:
         3d:a2:d6:93:c5:3c:47:77:09:a2:0b:52:28:df:c2:08:05:99:
         8c:9b:9e:f1:ed:68:59:11:9a:b6:03:8e:d0:d4:45:11:bd:2a:
         48:fb:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:51 2026 by rpki-client