Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa
File:                     3230312e35322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          iHuPaQRBbVfGKt9pNcRASnHiKouQPp95QezqB4iyeGA=
Subject key identifier:   C0:37:DC:96:92:B8:E3:EA:26:78:4A:E5:69:29:AF:78:1E:BE:49:65
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6D1A0846FE447B49190CD52E302256F2731576E0
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     28573
IP address blocks:        201.52.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1a:08:46:fe:44:7b:49:19:0c:d5:2e:30:22:56:f2:73:15:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject: CN=3082010A0282010100F89F8BDE298A5FD98FFD4FD3A245071430BDB60372513C45ED653D263949B9E41B5EC0B7C610BFD15202F1371A6CAFAFA838863F29E93DF2EA946162DA49CCA9299F050B6E4639FED21ECA622515CFC9AD6F3EA0EDC21B917B36E7E3FE7A10B86F47F526B406D21903AC396C3C2F8FC98312EACEECE849A12F75737C5A7D449600F2AA6EE4EA38F3A7E7196315E51325F2C7D2B6C8375D667283CEE79C7D35091DE7AB75B5C2E1DB20A4BE3541E3056A0FC9C2C8E8BD4A7C77D19CDA0EF3242D74C3B6C894DA35681B4ABB0001A42C8EE880690427679F6B64F736450DA95C261E478C5B9622D6B0B538539C857FF2E081DF89ECC015DB2A7C95ECBB01BE5BB10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9f:8b:de:29:8a:5f:d9:8f:fd:4f:d3:a2:45:
                    07:14:30:bd:b6:03:72:51:3c:45:ed:65:3d:26:39:
                    49:b9:e4:1b:5e:c0:b7:c6:10:bf:d1:52:02:f1:37:
                    1a:6c:af:af:a8:38:86:3f:29:e9:3d:f2:ea:94:61:
                    62:da:49:cc:a9:29:9f:05:0b:6e:46:39:fe:d2:1e:
                    ca:62:25:15:cf:c9:ad:6f:3e:a0:ed:c2:1b:91:7b:
                    36:e7:e3:fe:7a:10:b8:6f:47:f5:26:b4:06:d2:19:
                    03:ac:39:6c:3c:2f:8f:c9:83:12:ea:ce:ec:e8:49:
                    a1:2f:75:73:7c:5a:7d:44:96:00:f2:aa:6e:e4:ea:
                    38:f3:a7:e7:19:63:15:e5:13:25:f2:c7:d2:b6:c8:
                    37:5d:66:72:83:ce:e7:9c:7d:35:09:1d:e7:ab:75:
                    b5:c2:e1:db:20:a4:be:35:41:e3:05:6a:0f:c9:c2:
                    c8:e8:bd:4a:7c:77:d1:9c:da:0e:f3:24:2d:74:c3:
                    b6:c8:94:da:35:68:1b:4a:bb:00:01:a4:2c:8e:e8:
                    80:69:04:27:67:9f:6b:64:f7:36:45:0d:a9:5c:26:
                    1e:47:8c:5b:96:22:d6:b0:b5:38:53:9c:85:7f:f2:
                    e0:81:df:89:ec:c0:15:db:2a:7c:95:ec:bb:01:be:
                    5b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:DC:96:92:B8:E3:EA:26:78:4A:E5:69:29:AF:78:1E:BE:49:65
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.52.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1a:8b:81:cb:95:2a:1a:6c:61:97:48:f7:20:a4:34:b9:0b:49:
         54:a2:a1:c0:ea:ce:2c:02:58:61:04:21:04:b8:c1:8b:ff:b7:
         8a:0f:fd:c8:0e:8e:4f:f3:0f:1e:2c:73:b4:13:dc:37:27:0d:
         6b:f5:20:92:3c:51:9f:96:ad:7e:8d:f3:81:2c:a2:33:39:ba:
         66:d8:68:8f:f9:2b:68:c6:05:fe:9a:ae:a6:31:35:e3:50:95:
         cf:3f:df:18:6a:3a:1a:db:41:03:c0:09:a1:7f:8a:16:a9:c5:
         15:87:5f:77:04:5e:fa:95:ff:9c:cf:5a:53:bb:14:56:45:79:
         34:4f:e7:af:f5:72:64:db:f3:a4:b0:09:8f:14:62:de:5e:38:
         29:fe:c9:b0:60:0a:c8:71:12:67:de:13:2e:85:7a:87:c1:de:
         20:25:44:74:19:43:72:35:86:ff:cc:0a:70:3c:76:dc:5d:cc:
         46:84:f2:32:fb:17:f7:61:37:d7:e1:77:45:bc:b3:ce:26:38:
         e0:41:b0:17:76:a5:0b:45:8e:c8:db:64:5c:01:6d:35:e9:a0:
         ff:99:ed:28:ea:e1:81:3f:35:26:ff:53:bb:de:d9:7e:7c:37:
         47:bc:7c:4d:f9:e9:2b:47:aa:a5:de:e0:05:2f:77:37:80:e1:
         85:32:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:05 2026 by rpki-client