Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
File:                     3230312e37362e31362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          5IYfFNQXyjQEQtbnN3bsoeJrKzDX1KaHTZuQO1gbRWU=
Subject key identifier:   0B:D9:79:00:70:C9:C2:83:DA:41:67:62:0F:C8:7E:25:D4:FC:4F:D8
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       185A2FC6698A8D91095B9728BB1667776F9AAAEA
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:09 +0000
ROA not before:           Wed 04 Feb 2026 19:55:09 +0000
ROA not after:            Wed 03 Feb 2027 20:00:09 +0000
asID:                     28573
IP address blocks:        201.76.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:2f:c6:69:8a:8d:91:09:5b:97:28:bb:16:67:77:6f:9a:aa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:09 2026 GMT
            Not After : Feb  3 20:00:09 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:06:20:5c:0c:39:ad:dd:8d:17:1c:79:bd:
                    4d:e9:bc:4d:9a:1c:22:74:14:b6:8c:5a:1d:81:f3:
                    d9:f6:79:90:72:75:5b:cc:0b:19:e3:01:ba:eb:48:
                    4e:fd:30:97:0a:6f:fc:2f:b7:0e:e3:c5:b4:e4:80:
                    4a:26:ec:7e:6e:af:84:86:66:a2:97:26:20:66:5a:
                    41:46:d2:6d:3e:b6:1d:92:fb:2c:af:e0:fe:b9:12:
                    a4:d1:57:d6:3e:4c:e2:81:61:6c:23:4e:f1:ac:a6:
                    1f:f3:9e:32:32:6b:40:cb:0a:b6:c4:9c:e5:df:d7:
                    e9:01:1e:f5:35:06:f2:f5:52:8d:5a:3f:5a:5a:b4:
                    79:7c:ea:90:1c:6a:96:94:82:db:5f:38:e7:47:a4:
                    62:c5:37:21:43:1e:a5:cc:cd:be:e0:a2:f5:e7:17:
                    e9:ca:80:04:70:d4:18:0b:32:b2:c1:9a:f0:09:c4:
                    c5:04:79:f9:ed:8b:d4:07:81:47:eb:fb:ee:d4:60:
                    43:67:76:e2:ca:bf:84:52:83:f9:4b:3a:ed:e8:bf:
                    6f:1e:6a:fb:02:40:0d:41:3b:14:ed:d9:53:96:30:
                    92:aa:a8:95:69:a5:3b:5e:3e:85:e7:e1:20:ee:a7:
                    87:ff:a6:e1:c7:4f:dc:be:f6:be:5d:93:ec:e5:82:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D9:79:00:70:C9:C2:83:DA:41:67:62:0F:C8:7E:25:D4:FC:4F:D8
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:e1:bf:7c:36:24:42:a9:9a:81:f7:4a:cd:96:04:29:57:40:
         6c:a7:29:c3:2f:15:ce:ed:fd:65:ba:39:a0:08:3e:e9:11:7c:
         ff:d6:36:5d:27:86:6d:13:5a:c1:6d:6b:ac:3a:95:a8:a3:f8:
         cd:4c:32:76:ae:1d:c0:b7:95:55:f9:35:70:ed:a8:b7:54:73:
         64:08:b7:18:08:e3:e2:ff:27:19:d7:7b:82:47:94:74:80:78:
         7f:37:8c:25:dc:6c:75:c2:06:dc:2b:31:dd:5d:2b:ad:e6:50:
         76:10:1d:1b:a0:a1:1b:0d:2b:ad:a8:ad:29:de:09:96:e1:ff:
         a4:b9:d5:84:ee:39:c7:aa:d8:91:9f:98:45:b2:1f:79:e9:22:
         0f:af:9c:84:85:d0:9a:91:3b:de:15:42:9d:26:2d:5c:b5:85:
         91:e9:75:7d:c8:d4:48:0e:34:fb:3a:48:45:2d:da:c3:73:e3:
         63:f7:bb:e8:fd:84:85:1b:e4:12:90:df:8c:aa:51:04:83:72:
         a2:09:32:c6:0d:3b:b6:f9:1c:83:0f:d7:c2:17:9f:f9:23:b4:
         99:39:f8:92:57:6e:74:5b:27:df:e9:33:40:55:bd:01:00:c6:
         d6:48:3a:d5:e4:14:32:93:e8:19:8e:16:08:88:b5:0e:f7:2a:
         a1:8c:a8:da
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUGFovxmmKjZEJW5couxZnd2+aquowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MDlaFw0yNzAyMDMyMDAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTU3MDA2MjA1QzBDMzlBRERE
OEQxNzFDNzlCRDRERTlCQzREOUExQzIyNzQxNEI2OEM1QTFEODFGM0Q5RjY3OTkw
NzI3NTVCQ0MwQjE5RTMwMUJBRUI0ODRFRkQzMDk3MEE2RkZDMkZCNzBFRTNDNUI0
RTQ4MDRBMjZFQzdFNkVBRjg0ODY2NkEyOTcyNjIwNjY1QTQxNDZEMjZEM0VCNjFE
OTJGQjJDQUZFMEZFQjkxMkE0RDE1N0Q2M0U0Q0UyODE2MTZDMjM0RUYxQUNBNjFG
RjM5RTMyMzI2QjQwQ0IwQUI2QzQ5Q0U1REZEN0U5MDExRUY1MzUwNkYyRjU1MjhE
NUEzRjVBNUFCNDc5N0NFQTkwMUM2QTk2OTQ4MkRCNUYzOEU3NDdBNDYyQzUzNzIx
NDMxRUE1Q0NDREJFRTBBMkY1RTcxN0U5Q0E4MDA0NzBENDE4MEIzMkIyQzE5QUYw
MDlDNEM1MDQ3OUY5RUQ4QkQ0MDc4MTQ3RUJGQkVFRDQ2MDQzNjc3NkUyQ0FCRjg0
NTI4M0Y5NEIzQUVERThCRjZGMUU2QUZCMDI0MDBENDEzQjE0RUREOTUzOTYzMDky
QUFBODk1NjlBNTNCNUUzRTg1RTdFMTIwRUVBNzg3RkZBNkUxQzc0RkRDQkVGNkJF
NUQ5M0VDRTU4MjAwNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApXAGIFwMOa3djRcceb1N6bxNmhwidBS2jFodgfPZ9nmQcnVbzAsZ
4wG660hO/TCXCm/8L7cO48W05IBKJux+bq+EhmailyYgZlpBRtJtPrYdkvssr+D+
uRKk0VfWPkzigWFsI07xrKYf854yMmtAywq2xJzl39fpAR71NQby9VKNWj9aWrR5
fOqQHGqWlILbXzjnR6RixTchQx6lzM2+4KL15xfpyoAEcNQYCzKywZrwCcTFBHn5
7YvUB4FH6/vu1GBDZ3biyr+EUoP5Szrt6L9vHmr7AkANQTsU7dlTljCSqqiVaaU7
Xj6F5+Eg7qeH/6bhx0/cvva+XZPs5YIASQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FAvZeQBwycKD2kFnYg/IfiXU/E/YMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMTJlMzczNjJlMzEzNjJl
MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATJTBAw
DQYJKoZIhvcNAQELBQADggEBAA3hv3w2JEKpmoH3Ss2WBClXQGynKcMvFc7t/WW6
OaAIPukRfP/WNl0nhm0TWsFta6w6laij+M1MMnauHcC3lVX5NXDtqLdUc2QItxgI
4+L/JxnXe4JHlHSAeH83jCXcbHXCBtwrMd1dK63mUHYQHRugoRsNK62orSneCZbh
/6S51YTuOceq2JGfmEWyH3npIg+vnISF0JqRO94VQp0mLVy1hZHpdX3I1EgONPs6
SEUt2sNz42P3u+j9hIUb5BKQ34yqUQSDcqIJMsYNO7b5HIMP18IXn/kjtJk5+JJX
bnRbJ9/pM0BVvQEAxtZIOtXkFDKT6BmOFgiItQ73KqGMqNo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:56:07 2026 by rpki-client