Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e32312e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e32312e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          fA85Su2AeKd/yGk3RGUbflyx5vijP2Asnf7F8OHjpnI=
Subject key identifier:   E8:86:C3:DA:A6:7E:CD:68:C5:5E:71:18:F0:48:EA:47:85:22:B0:AF
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5561FD11BFF994138E3576FCF2DD215579F82DBA
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e32312e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:13 +0000
ROA not before:           Wed 04 Feb 2026 19:55:13 +0000
ROA not after:            Wed 03 Feb 2027 20:00:13 +0000
asID:                     28573
IP address blocks:        201.21.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:61:fd:11:bf:f9:94:13:8e:35:76:fc:f2:dd:21:55:79:f8:2d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:13 2026 GMT
            Not After : Feb  3 20:00:13 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:8e:fa:70:3d:f7:99:9f:37:e5:8e:0c:10:
                    ce:0c:26:b4:b7:78:dc:c4:49:2d:5d:06:65:61:84:
                    a8:fd:5b:1c:14:e4:0a:c0:52:33:9c:2e:3e:4c:fa:
                    34:f6:64:84:0f:31:50:a7:38:ff:91:3e:a8:44:dd:
                    7a:d0:c2:43:3c:da:b8:f8:5f:bb:95:25:b1:95:ef:
                    df:3b:0d:df:78:c2:30:54:35:91:6b:3f:6d:d1:40:
                    a8:8a:da:e8:db:35:d7:ac:c1:9c:28:9d:39:34:c0:
                    2e:33:a5:d9:2c:d2:60:23:52:03:ea:80:9c:ec:06:
                    ba:f3:7f:78:fc:96:70:be:9d:22:33:e3:a8:1b:57:
                    5c:b8:b9:d2:e4:f5:dc:86:af:8f:a1:e2:53:74:72:
                    e6:9f:04:c7:42:7a:96:58:ca:f8:86:c0:7d:2d:d2:
                    9c:09:98:bf:31:78:a6:ad:e7:2a:ec:43:ce:c8:60:
                    02:9a:54:70:d9:75:cc:ad:e1:d2:fc:c4:28:f7:80:
                    22:9e:0a:c3:39:2f:13:97:7d:7a:7f:60:97:b8:d7:
                    2e:a7:77:87:a3:62:4b:ae:b7:e0:bb:76:63:73:7c:
                    1b:a8:69:b1:93:e9:da:16:c8:12:ef:3a:f7:96:7c:
                    d8:91:a5:37:c7:24:a0:99:e3:70:e0:2d:46:4f:16:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:C3:DA:A6:7E:CD:68:C5:5E:71:18:F0:48:EA:47:85:22:B0:AF
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e32312e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:05:84:f1:48:1c:89:83:0d:a6:c3:77:d9:b1:64:19:d5:5a:
         7c:0c:51:1c:3e:59:05:36:01:01:72:2e:13:ec:0a:eb:47:52:
         0b:53:95:76:70:a4:8f:04:02:79:01:3d:aa:8b:82:aa:f1:02:
         cc:5e:61:8b:a7:0c:97:f1:37:1d:d0:b1:1f:f5:e6:77:75:30:
         6b:9e:59:6e:0b:17:0b:ef:03:66:c5:45:73:dd:96:4f:e7:6b:
         e3:78:5b:bb:49:e4:5d:80:12:48:41:25:5c:9c:dd:c5:c9:fc:
         fd:27:36:f7:6b:38:50:6d:0f:d0:01:a9:73:b1:8d:c5:f5:86:
         b8:eb:6a:c6:80:fb:5d:8e:46:a6:b1:9e:f5:9f:7d:a8:c9:fc:
         1e:a6:73:cc:68:a4:c7:d2:6a:1f:69:70:f5:9d:ac:ff:60:6b:
         bf:72:a2:92:69:38:35:5e:12:ff:03:7d:cd:72:33:42:bf:b5:
         e3:00:93:56:d1:57:06:4a:6c:71:b7:46:ff:29:b9:61:5f:fe:
         f0:bb:53:00:b5:0f:d4:dc:9d:f7:07:c4:a7:d1:11:85:41:81:
         c9:3c:89:42:b6:c0:85:c7:6f:48:56:f6:a9:31:dc:bf:37:47:
         99:ca:fb:60:fa:73:63:b5:35:27:05:7e:67:da:74:43:b3:14:
         54:3f:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:07 2026 by rpki-client