Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
File:                     3230312e36322e39362e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          SM7IKRVsPND0oNN2/npl8o2Ba1rnrI4OOo0lOOlVeiw=
Subject key identifier:   B3:6D:BE:73:D9:30:28:D1:A4:0F:1D:B1:CA:82:3A:9B:10:4B:61:7D
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       387B2253BA4C4DACBE507980C17DB56CFBA22484
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     28573
IP address blocks:        201.62.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:22:53:ba:4c:4d:ac:be:50:79:80:c1:7d:b5:6c:fb:a2:24:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:c5:6e:56:8f:73:55:90:d0:7a:ce:61:2a:
                    01:1e:8e:1e:24:3a:3f:56:a4:e0:2b:b3:ea:d8:34:
                    08:32:4f:22:12:57:7f:84:cd:a4:92:73:0a:1f:de:
                    36:e5:e5:16:c1:f0:d0:53:30:b9:b3:34:6a:77:7a:
                    28:f3:04:c6:06:ba:23:4b:2f:ca:30:51:ad:ad:3f:
                    f7:f5:3f:e6:5b:a1:11:aa:5d:fb:b2:08:77:b4:51:
                    06:2e:0d:2b:de:99:64:45:4d:f4:b3:93:2d:55:a2:
                    5e:c9:14:d9:7f:61:58:12:2d:50:2b:68:09:b9:2e:
                    3d:5c:9a:7e:5e:cc:52:6b:ca:69:fa:de:96:da:de:
                    5d:fc:b4:46:44:49:fb:11:87:6e:0e:53:29:73:8a:
                    91:40:92:12:9f:48:91:91:f2:11:4e:6c:9e:e9:b0:
                    75:87:14:b3:20:e8:e5:b8:56:b2:c5:f6:26:09:86:
                    dd:49:91:e9:dc:90:81:ad:ba:d3:94:64:6f:17:0f:
                    a9:4d:96:d8:05:2c:6d:d9:d6:7d:60:0e:01:ed:36:
                    fb:fd:5f:61:9c:8a:54:73:5c:d9:db:55:bf:63:08:
                    73:a0:d9:fd:93:ab:f8:95:88:0a:5d:9e:58:11:ad:
                    ef:7b:87:ca:71:26:64:38:d0:81:da:50:11:b2:be:
                    83:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6D:BE:73:D9:30:28:D1:A4:0F:1D:B1:CA:82:3A:9B:10:4B:61:7D
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:e3:89:0d:57:6f:fd:84:dd:51:be:a7:62:39:bd:df:6e:
         a9:98:29:69:34:b9:40:b8:d0:6c:4d:72:2c:73:70:12:db:39:
         32:1a:a4:d2:ee:82:2b:38:bb:a9:0b:51:e8:6a:bd:1a:5b:46:
         f8:14:4e:99:4d:82:54:67:76:0e:89:4d:5d:d0:8d:66:92:22:
         57:40:fa:88:d7:29:a5:37:dd:c2:8c:9e:ab:7c:73:b6:17:15:
         63:1b:d6:f3:17:97:b2:d4:50:68:9f:81:07:df:2b:1d:60:f2:
         6d:81:61:15:b9:2c:3b:b6:fe:bd:c8:7f:1a:a7:c7:19:9a:44:
         1d:97:d7:68:9f:ab:9d:f0:03:0f:47:6b:d6:21:88:03:56:82:
         4a:d2:a7:aa:f9:60:66:fd:fd:e2:aa:58:8b:4d:8b:80:a1:c6:
         b8:03:63:50:26:e7:df:73:63:e6:3a:bc:e3:73:5a:74:5c:79:
         de:03:4f:d9:41:0a:65:f1:44:c9:07:4f:b6:3e:61:f7:97:bd:
         42:f2:4b:75:f1:2f:e5:7d:bf:94:b5:e0:75:b2:bc:ec:6d:21:
         84:28:e8:ee:eb:99:43:af:1e:48:6c:77:67:e9:72:78:dd:41:
         55:62:4d:db:3d:66:34:a4:fe:f9:23:7f:2f:b2:81:e8:f7:6a:
         b0:2b:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:02 2026 by rpki-client