Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e33372e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e33372e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          0uNSsi21Hnjz0lFwv6/zGjXK734IJLeiPEzN2EWY1YE=
Subject key identifier:   52:82:66:86:B0:8E:0F:1C:E8:8D:46:FF:1E:DA:E0:7E:45:5F:82:6C
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       1A67D37FD4F50E8D7FE5AE4166E39DFC5F0BBAB2
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e33372e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:11 +0000
ROA not before:           Wed 04 Feb 2026 19:55:11 +0000
ROA not after:            Wed 03 Feb 2027 20:00:11 +0000
asID:                     28573
IP address blocks:        201.37.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:67:d3:7f:d4:f5:0e:8d:7f:e5:ae:41:66:e3:9d:fc:5f:0b:ba:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:11 2026 GMT
            Not After : Feb  3 20:00:11 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8d:42:14:a4:e9:74:ec:be:05:75:41:1d:97:
                    d5:88:6f:90:62:4e:7d:be:85:31:ff:de:3a:5e:52:
                    14:30:76:96:fd:78:83:cc:6c:13:46:bd:ec:b0:82:
                    7f:89:30:c2:dc:10:6e:f7:18:4e:15:5c:d6:3d:75:
                    1a:79:08:a4:28:92:87:a2:ff:49:4a:e7:c7:45:0a:
                    d2:3f:6f:04:ac:87:aa:5b:b9:39:23:f8:bd:03:7e:
                    0d:82:e3:26:de:8e:10:78:d0:f0:d3:ed:99:3f:b7:
                    da:9a:a4:17:a4:fd:3e:b0:10:03:4a:b0:ba:82:d2:
                    b2:38:d6:32:6f:3d:ef:bd:49:4b:b3:18:92:f5:a0:
                    62:0e:03:94:e6:f2:76:63:b9:05:b0:50:ab:3b:17:
                    e8:fa:63:fd:7c:58:d8:50:73:d9:68:f5:72:4b:cf:
                    b9:c3:e6:cc:7d:1a:4f:72:36:ca:29:6e:07:4c:69:
                    eb:f6:6d:6a:a2:26:b7:f8:eb:7e:59:9b:e0:f8:b1:
                    19:b6:dd:c6:b8:bb:72:bc:f8:a7:95:48:0b:66:1a:
                    94:35:df:8a:4e:7c:8a:b8:c9:5c:c2:b7:9d:af:e1:
                    c5:50:fe:0c:ba:87:e4:3a:d3:1c:55:3f:6e:0d:b1:
                    75:59:16:2c:20:bb:47:41:95:4e:df:13:0d:91:68:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:66:86:B0:8E:0F:1C:E8:8D:46:FF:1E:DA:E0:7E:45:5F:82:6C
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e33372e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:71:35:dc:7f:ed:e5:76:98:f6:6e:c9:41:ac:a6:e3:56:
         f9:00:51:e5:66:c4:b0:8f:de:56:d6:94:a6:ba:08:1e:39:de:
         b7:c4:58:a4:e0:92:70:d1:7a:5c:a7:a6:f4:61:82:3c:19:20:
         44:7d:4d:22:ef:04:ad:29:2b:c7:6d:23:34:a9:3b:63:e4:d8:
         ff:0e:5f:dc:4b:90:a1:c3:4b:e6:8d:0d:13:c1:2b:6d:83:40:
         85:23:c7:58:0b:e2:7e:3a:40:00:ab:12:31:eb:5a:13:5d:4a:
         82:47:33:b7:7b:95:0d:d6:ca:4a:5b:ad:69:59:62:1c:c2:fc:
         82:e5:af:bb:dc:81:41:c5:8b:32:13:7e:88:69:ab:b0:25:d8:
         e1:b2:a5:9a:81:fd:d8:1c:94:18:63:a7:b8:04:8e:af:ed:01:
         24:b6:c9:1f:19:43:5d:a2:fc:0e:a3:fe:a9:c8:8e:da:dd:25:
         30:5d:d3:a2:cb:7b:f8:af:6c:ae:b9:4a:4e:2c:c3:5f:60:b2:
         3f:90:a4:0f:a1:d0:53:d1:26:48:16:5d:1e:00:93:32:f5:7a:
         92:f6:1b:c6:53:4e:ac:89:48:96:05:96:59:5a:7a:10:30:28:
         f3:de:db:aa:6e:a5:5b:16:6f:48:83:53:5e:90:6c:98:94:b7:
         e7:3a:59:6b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUGmfTf9T1Do1/5a5BZuOd/F8LurIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTFaFw0yNzAyMDMyMDAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUM4RDQyMTRBNEU5NzRFQ0JF
MDU3NTQxMUQ5N0Q1ODg2RjkwNjI0RTdEQkU4NTMxRkZERTNBNUU1MjE0MzA3Njk2
RkQ3ODgzQ0M2QzEzNDZCREVDQjA4MjdGODkzMEMyREMxMDZFRjcxODRFMTU1Q0Q2
M0Q3NTFBNzkwOEE0Mjg5Mjg3QTJGRjQ5NEFFN0M3NDUwQUQyM0Y2RjA0QUM4N0FB
NUJCOTM5MjNGOEJEMDM3RTBEODJFMzI2REU4RTEwNzhEMEYwRDNFRDk5M0ZCN0RB
OUFBNDE3QTRGRDNFQjAxMDAzNEFCMEJBODJEMkIyMzhENjMyNkYzREVGQkQ0OTRC
QjMxODkyRjVBMDYyMEUwMzk0RTZGMjc2NjNCOTA1QjA1MEFCM0IxN0U4RkE2M0ZE
N0M1OEQ4NTA3M0Q5NjhGNTcyNEJDRkI5QzNFNkNDN0QxQTRGNzIzNkNBMjk2RTA3
NEM2OUVCRjY2RDZBQTIyNkI3RjhFQjdFNTk5QkUwRjhCMTE5QjZEREM2QjhCQjcy
QkNGOEE3OTU0ODBCNjYxQTk0MzVERjhBNEU3QzhBQjhDOTVDQzJCNzlEQUZFMUM1
NTBGRTBDQkE4N0U0M0FEMzFDNTUzRjZFMERCMTc1NTkxNjJDMjBCQjQ3NDE5NTRF
REYxMzBEOTE2ODIzMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7I1CFKTpdOy+BXVBHZfViG+QYk59voUx/946XlIUMHaW/XiDzGwT
Rr3ssIJ/iTDC3BBu9xhOFVzWPXUaeQikKJKHov9JSufHRQrSP28ErIeqW7k5I/i9
A34NguMm3o4QeNDw0+2ZP7famqQXpP0+sBADSrC6gtKyONYybz3vvUlLsxiS9aBi
DgOU5vJ2Y7kFsFCrOxfo+mP9fFjYUHPZaPVyS8+5w+bMfRpPcjbKKW4HTGnr9m1q
oia3+Ot+WZvg+LEZtt3GuLtyvPinlUgLZhqUNd+KTnyKuMlcwredr+HFUP4Muofk
OtMcVT9uDbF1WRYsILtHQZVO3xMNkWgjHwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FFKCZoawjg8c6I1G/x7a4H5FX4JsMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMTJlMzMzNzJlMzAyZTMw
MmYzMTM2MmQzMjM0MjAzZDNlMjAzMjM4MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAySUwDQYJ
KoZIhvcNAQELBQADggEBAJDScTXcf+3ldpj2bslBrKbjVvkAUeVmxLCP3lbWlKa6
CB453rfEWKTgknDRelynpvRhgjwZIER9TSLvBK0pK8dtIzSpO2Pk2P8OX9xLkKHD
S+aNDRPBK22DQIUjx1gL4n46QACrEjHrWhNdSoJHM7d7lQ3WykpbrWlZYhzC/ILl
r7vcgUHFizITfohpq7Al2OGypZqB/dgclBhjp7gEjq/tASS2yR8ZQ12i/A6j/qnI
jtrdJTBd06LLe/ivbK65Sk4sw19gsj+QpA+h0FPRJkgWXR4AkzL1epL2G8ZTTqyJ
SJYFlllaehAwKPPe26pupVsWb0iDU16QbJiUt+c6WWs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:52 2026 by rpki-client