Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3231382e33322e302f31392d3234203d3e203238353733.roa
File:                     3230302e3231382e33322e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          UzXu1llZURRNOB3+7YJERAuxFVdqETcyUvqGaHIBn8c=
Subject key identifier:   55:00:AA:AB:D8:60:88:A3:0B:20:6C:F7:C1:D2:82:4B:E2:C3:58:9D
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       107A75F198926B2720C153153C2D4CCBDB226F10
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3231382e33322e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:12 +0000
ROA not before:           Wed 04 Feb 2026 19:55:12 +0000
ROA not after:            Wed 03 Feb 2027 20:00:12 +0000
asID:                     28573
IP address blocks:        200.218.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7a:75:f1:98:92:6b:27:20:c1:53:15:3c:2d:4c:cb:db:22:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:12 2026 GMT
            Not After : Feb  3 20:00:12 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:9f:e0:ac:7b:b7:6e:6d:2c:c1:23:97:38:
                    96:55:03:63:c3:e5:12:39:12:13:3c:9d:fb:52:2b:
                    e2:95:23:31:19:35:fa:6e:98:0f:cf:2c:0c:ae:9a:
                    6b:fd:32:96:f7:f9:ae:a6:70:ae:40:55:44:bd:3a:
                    01:40:69:29:51:25:8a:6b:94:b6:fb:a6:7d:13:c4:
                    ae:8b:be:79:c3:15:8e:d0:13:db:98:09:69:bf:07:
                    e1:43:ca:6c:6d:12:0c:00:d3:6b:fb:00:98:48:25:
                    34:46:d2:77:dc:b7:df:dc:06:60:ab:ac:6c:d4:6c:
                    90:89:54:f8:6d:07:d8:b0:4f:8b:66:93:fb:5f:c4:
                    18:ba:77:63:49:b1:3f:6c:90:10:68:f4:fd:40:71:
                    35:89:34:c1:91:c4:d0:2b:4f:08:24:aa:f0:c5:de:
                    6b:23:af:94:25:bd:57:a6:56:fa:13:80:5a:18:1e:
                    b1:a8:b4:05:b0:01:d4:18:17:0c:42:8a:68:9e:1d:
                    b1:d2:ee:92:25:c0:a0:73:71:97:22:31:f7:5a:77:
                    d1:52:f3:09:4e:b2:93:1e:b2:b5:bf:e1:36:2f:0c:
                    b4:8e:23:75:66:ce:37:b3:e6:6d:96:cc:a7:a8:04:
                    5b:41:88:6e:c9:65:6b:ec:f2:b2:6d:ba:57:b5:68:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:AA:AB:D8:60:88:A3:0B:20:6C:F7:C1:D2:82:4B:E2:C3:58:9D
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3231382e33322e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:34:ee:62:60:2a:0e:b2:d7:da:ef:64:78:bd:fe:44:cc:
         59:22:a4:13:b3:2b:25:e2:1a:5a:37:0c:45:70:2e:88:40:2d:
         20:b1:62:d3:51:8a:a6:86:64:df:9a:eb:31:a2:d8:e2:d1:f7:
         dc:9c:17:61:a6:c9:4b:98:a6:85:53:9b:16:dd:0c:3c:46:b5:
         d9:5f:e1:66:3e:b9:ba:bb:c2:08:83:85:89:ee:64:66:db:76:
         9e:1b:ed:6c:68:7d:03:28:4d:e1:fc:1d:a0:e7:a7:75:30:6b:
         18:ee:59:2f:5b:1b:08:9d:57:40:77:d5:02:7f:ce:14:31:78:
         a5:cf:d7:0f:fe:ce:e2:67:8b:84:89:71:b1:03:34:a0:f5:40:
         5c:95:74:0e:1e:44:fa:52:2f:d1:32:f1:62:ba:df:8e:df:51:
         dc:f7:a7:8d:89:40:ba:cb:a1:1d:45:e0:7b:21:75:59:6c:4e:
         be:c2:e6:cc:43:eb:a8:01:17:4a:87:21:26:c1:09:8c:8d:94:
         07:f5:10:0d:1d:4d:2f:29:89:7e:db:e9:a0:d2:54:19:89:76:
         5a:66:29:01:ef:81:0e:fa:3b:b8:7b:61:47:9b:45:45:ed:c0:
         7e:98:cd:b5:d3:df:9a:99:a6:d6:99:d6:b0:3d:89:c4:71:b3:
         d1:ba:e0:22
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUEHp18ZiSaycgwVMVPC1My9sibxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTJaFw0yNzAyMDMyMDAwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ3QjlGRTBBQzdCQjc2RTZE
MkNDMTIzOTczODk2NTUwMzYzQzNFNTEyMzkxMjEzM0M5REZCNTIyQkUyOTUyMzMx
MTkzNUZBNkU5ODBGQ0YyQzBDQUU5QTZCRkQzMjk2RjdGOUFFQTY3MEFFNDA1NTQ0
QkQzQTAxNDA2OTI5NTEyNThBNkI5NEI2RkJBNjdEMTNDNEFFOEJCRTc5QzMxNThF
RDAxM0RCOTgwOTY5QkYwN0UxNDNDQTZDNkQxMjBDMDBEMzZCRkIwMDk4NDgyNTM0
NDZEMjc3RENCN0RGREMwNjYwQUJBQzZDRDQ2QzkwODk1NEY4NkQwN0Q4QjA0RjhC
NjY5M0ZCNUZDNDE4QkE3NzYzNDlCMTNGNkM5MDEwNjhGNEZENDA3MTM1ODkzNEMx
OTFDNEQwMkI0RjA4MjRBQUYwQzVERTZCMjNBRjk0MjVCRDU3QTY1NkZBMTM4MDVB
MTgxRUIxQThCNDA1QjAwMUQ0MTgxNzBDNDI4QTY4OUUxREIxRDJFRTkyMjVDMEEw
NzM3MTk3MjIzMUY3NUE3N0QxNTJGMzA5NEVCMjkzMUVCMkI1QkZFMTM2MkYwQ0I0
OEUyMzc1NjZDRTM3QjNFNjZEOTZDQ0E3QTgwNDVCNDE4ODZFQzk2NTZCRUNGMkIy
NkRCQTU3QjU2OEQ4NzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArXuf4Kx7t25tLMEjlziWVQNjw+USORITPJ37UivilSMxGTX6bpgP
zywMrppr/TKW9/mupnCuQFVEvToBQGkpUSWKa5S2+6Z9E8Sui755wxWO0BPbmAlp
vwfhQ8psbRIMANNr+wCYSCU0RtJ33Lff3AZgq6xs1GyQiVT4bQfYsE+LZpP7X8QY
undjSbE/bJAQaPT9QHE1iTTBkcTQK08IJKrwxd5rI6+UJb1Xplb6E4BaGB6xqLQF
sAHUGBcMQoponh2x0u6SJcCgc3GXIjH3WnfRUvMJTrKTHrK1v+E2Lwy0jiN1Zs43
s+ZtlsynqARbQYhuyWVr7PKybbpXtWjYcwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFUAqqvYYIijCyBs98HSgkviw1idMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMDJlMzIzMTM4MmUzMzMy
MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcja
IDANBgkqhkiG9w0BAQsFAAOCAQEAbPo07mJgKg6y19rvZHi9/kTMWSKkE7MrJeIa
WjcMRXAuiEAtILFi01GKpoZk35rrMaLY4tH33JwXYabJS5imhVObFt0MPEa12V/h
Zj65urvCCIOFie5kZtt2nhvtbGh9AyhN4fwdoOendTBrGO5ZL1sbCJ1XQHfVAn/O
FDF4pc/XD/7O4meLhIlxsQM0oPVAXJV0Dh5E+lIv0TLxYrrfjt9R3PenjYlAusuh
HUXgeyF1WWxOvsLmzEPrqAEXSochJsEJjI2UB/UQDR1NLymJftvpoNJUGYl2WmYp
Ae+BDvo7uHthR5tFRe3AfpjNtdPfmpmm1pnWsD2JxHGz0brgIg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:04 2026 by rpki-client