Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
File:                     3230302e3138392e38302e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          n7agu09Q0IaK/+f5M8DPVCp3PhdBN0J2iPrRKIGOWlo=
Subject key identifier:   30:ED:63:8B:01:1C:20:3F:B1:5E:1B:62:B8:C1:56:A1:A9:3F:4B:7D
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0A333973900D3267AFBC63BE68EAA0D6FF0DE012
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     28573
IP address blocks:        200.189.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:33:39:73:90:0d:32:67:af:bc:63:be:68:ea:a0:d6:ff:0d:e0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:ec:58:24:19:e9:06:e8:15:d6:b4:58:97:
                    0e:91:f4:17:27:04:aa:a7:74:0f:d8:c8:e8:8d:f4:
                    4c:d2:ab:42:47:8d:27:57:2f:18:33:43:fe:09:7c:
                    53:1d:2f:6f:93:64:f3:a3:3e:c2:05:54:c0:61:fc:
                    58:72:2c:d6:a0:19:b4:cc:3f:07:47:b8:36:f5:f3:
                    4a:f1:fb:a0:49:6e:6e:12:14:e1:a1:1e:23:db:3f:
                    45:0f:51:99:64:3e:50:6e:56:69:58:98:5e:f8:ec:
                    70:3e:05:c0:82:af:6d:99:f4:cb:e0:a7:73:88:da:
                    a8:1c:d9:38:48:5e:f4:22:b1:9f:1b:44:83:06:20:
                    5d:eb:21:0c:2b:b1:f3:cc:fb:14:4c:78:de:51:4f:
                    32:73:9b:12:0d:ef:1b:b3:20:67:15:d9:23:6d:f9:
                    a8:47:d9:90:7a:df:20:95:14:c9:5a:2b:e0:f3:b6:
                    30:c7:01:5c:05:66:ad:bd:da:8b:52:db:07:d8:d5:
                    5a:91:a0:2b:a0:2a:47:42:6d:57:92:c2:fa:3c:9a:
                    54:b0:a9:9c:cb:69:bb:c6:e8:57:01:e1:c8:36:ca:
                    d0:09:c8:8f:b6:d1:3c:aa:01:84:46:ab:a4:5e:46:
                    01:82:50:2e:da:40:72:7d:68:35:a0:c2:4f:03:d2:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:ED:63:8B:01:1C:20:3F:B1:5E:1B:62:B8:C1:56:A1:A9:3F:4B:7D
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:e0:3b:59:fa:a9:00:09:f9:e5:e1:cb:96:1a:32:12:58:85:
         29:74:7b:e9:e6:f0:3c:17:a4:f8:f1:fb:d4:ae:19:5c:1e:4e:
         3a:48:15:ef:0b:f0:b5:9a:83:39:77:dd:5f:d8:5e:cf:04:61:
         9e:d2:0d:8c:50:13:f4:8c:ed:22:bc:80:ea:98:22:57:a8:ab:
         af:5c:c1:27:27:5d:81:e2:df:c2:b1:32:e4:00:29:ec:5c:02:
         49:6a:35:c9:6b:03:83:ad:2f:e8:dc:be:66:b4:9f:27:66:63:
         bb:75:14:36:75:99:6a:13:87:a4:f4:0b:95:9a:8c:02:db:df:
         f1:60:0b:27:58:71:0c:3d:35:bd:be:f8:45:a1:57:b0:d7:5a:
         74:e7:1f:a2:7f:b7:26:8a:36:89:f8:b6:60:b4:f6:f5:04:44:
         c3:8e:45:62:79:76:c6:90:60:df:e6:4c:01:f2:7a:a5:6b:7b:
         2e:ff:f9:bd:44:cb:56:86:e0:56:96:a7:5e:01:5e:b0:a7:81:
         3f:b7:e4:19:87:92:b5:af:76:11:45:74:71:2e:2a:01:60:b7:
         c8:f7:d6:03:97:63:cd:91:20:23:6e:de:0e:95:c6:bf:29:35:
         7c:ea:1d:f0:1f:2a:d7:66:18:10:b8:d9:a8:af:64:59:68:ac:
         71:ca:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:07 2026 by rpki-client