Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e34362e3234302e302f32302d3234203d3e203238353733.roa
File:                     3230312e34362e3234302e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          cRDYyH32SFDVs0NbXXpNg52lhZsc4tVT+O5TDHtMnsk=
Subject key identifier:   7C:00:A3:96:7B:ED:1E:9C:DE:2A:F1:CB:55:D5:1C:E9:7C:65:28:EB
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0659059509DB94DCDE9131B3C7A76AA79C7E9B3B
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e34362e3234302e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     28573
IP address blocks:        201.46.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:59:05:95:09:db:94:dc:de:91:31:b3:c7:a7:6a:a7:9c:7e:9b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:d1:14:1d:5c:aa:b3:4b:c3:8f:70:ca:69:
                    ff:41:a1:ca:aa:26:c9:a1:f8:c3:8c:da:83:92:e0:
                    c3:5f:6a:a5:16:eb:c9:27:f3:0d:65:87:95:d4:66:
                    58:3f:58:e1:bf:56:e4:58:e6:3a:ca:fe:3e:c1:3a:
                    b0:ae:d2:b4:bb:8a:8a:d3:c4:db:d2:3d:46:b8:50:
                    b5:e4:02:5a:87:bd:ca:c7:5c:0d:11:f8:1a:d7:9f:
                    29:e3:6f:de:75:29:b6:2b:1a:33:33:41:5a:47:47:
                    69:41:2a:46:5b:e9:e2:e1:ce:35:05:56:27:db:fa:
                    12:06:64:a4:e2:a4:fd:32:4c:7b:b1:e5:7e:e3:4d:
                    e5:5d:03:f1:5e:10:a6:7b:13:80:cb:3b:13:b8:43:
                    df:94:1a:e1:3f:b1:24:52:d0:c8:5d:be:cc:03:06:
                    b5:22:19:3e:92:bf:dc:1c:e0:7e:e1:00:ed:04:d0:
                    56:fd:d3:87:9d:69:9d:bf:72:04:0c:0c:4d:c9:ab:
                    0f:76:5b:6a:17:37:2e:70:15:c4:7a:e9:ff:ba:70:
                    40:f1:5c:d6:88:16:2e:76:96:35:5f:8f:62:10:1e:
                    10:19:9f:65:c1:33:16:47:10:32:7a:43:55:0c:4b:
                    48:30:fd:8b:35:ab:14:0b:9d:19:fd:53:f6:65:f9:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:00:A3:96:7B:ED:1E:9C:DE:2A:F1:CB:55:D5:1C:E9:7C:65:28:EB
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e34362e3234302e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:e1:01:ca:dd:25:5a:b6:59:71:a1:dd:66:cc:0c:d1:c7:
         2d:b6:27:c0:e6:3c:24:7f:11:18:34:f3:ab:f3:28:d9:8c:af:
         1d:01:0f:e6:08:c8:5a:53:9f:4a:33:d1:fb:a2:94:a5:30:f4:
         08:65:a3:e6:a4:c0:ae:47:6d:1a:e7:d7:44:c0:1e:d5:86:70:
         41:ae:13:58:f3:9c:80:f1:e1:05:3f:02:c9:f1:cf:ac:78:56:
         be:ab:71:11:62:fe:df:45:27:56:4d:6b:04:c8:7a:61:59:f0:
         d7:13:04:53:c6:73:ef:73:bd:45:22:55:e7:47:ad:fe:d7:76:
         92:da:db:32:4b:20:75:c0:70:1c:e6:bc:9d:b1:a2:92:e7:84:
         14:b5:f7:43:02:0d:92:db:5e:de:ba:ea:49:98:fd:bb:62:95:
         1c:1b:da:47:93:81:a8:6c:2a:65:ee:e2:e4:b6:9b:84:50:d4:
         e7:e1:dd:81:3f:6d:bd:0e:1c:ca:20:d5:8a:f4:13:34:76:66:
         2c:98:e8:2b:19:13:e9:2e:28:25:8f:e1:ac:47:f2:bd:fa:cd:
         5f:e0:dd:de:0b:e7:d8:04:28:57:fb:aa:89:49:52:30:b5:82:
         1c:a4:1a:83:63:5e:6d:1f:67:66:4f:4d:5c:26:3d:49:7e:2b:
         21:a7:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:00 2026 by rpki-client