Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa
File:                     3230312e37372e36342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          IVZBK9dzc9Xko0595SLLRFDCQopPGSIZ9h2g4uUtWaE=
Subject key identifier:   D3:B3:8F:84:57:C8:53:12:44:BC:E2:AD:AA:2B:6E:D6:5F:24:3D:91
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       2651B3DC047BD00CAF9E7E89496D3BA53A9759F2
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:15 +0000
ROA not before:           Wed 04 Feb 2026 19:55:15 +0000
ROA not after:            Wed 03 Feb 2027 20:00:15 +0000
asID:                     28573
IP address blocks:        201.77.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:51:b3:dc:04:7b:d0:0c:af:9e:7e:89:49:6d:3b:a5:3a:97:59:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:15 2026 GMT
            Not After : Feb  3 20:00:15 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:62:9e:f1:8f:e4:50:56:18:43:9e:7f:db:
                    d8:25:8d:08:e9:9a:0e:e8:c8:78:29:f6:dc:da:41:
                    f1:65:0b:1d:bb:55:09:9b:c6:ff:e9:e8:4f:f8:ad:
                    2b:21:fa:bc:a4:5a:de:c9:ea:dd:66:cb:a2:81:69:
                    79:83:4e:8e:2f:30:35:04:81:67:c7:7e:d3:62:a9:
                    7d:ff:1c:69:8c:05:26:50:20:3d:5a:40:29:a9:44:
                    22:6f:fd:4f:32:31:f3:23:41:0f:4c:75:ee:85:b5:
                    81:9b:cf:b9:6c:20:c2:02:28:ed:06:77:89:e7:3a:
                    d7:6c:65:e0:d8:a3:c9:62:ff:6f:de:24:5f:df:54:
                    91:4c:fe:cf:c9:5e:b2:63:48:7d:a7:45:74:45:ad:
                    8c:d2:a2:5c:6b:0d:8a:51:3d:0a:a4:df:4e:69:70:
                    51:69:62:1e:d1:88:e6:63:6f:8e:bc:53:58:90:b8:
                    58:ad:7c:84:1f:d5:11:a9:67:fc:9d:da:50:dc:f0:
                    f0:32:7b:2d:8a:e2:94:ab:c5:e6:78:0b:fb:f3:99:
                    a1:e1:2c:15:bf:dd:f4:f0:f8:29:11:d8:61:d4:79:
                    c2:2d:e9:fd:2b:3a:52:37:46:0b:3e:25:01:07:e6:
                    e6:7b:9a:60:88:58:53:b2:92:e4:05:57:03:e5:f0:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:8F:84:57:C8:53:12:44:BC:E2:AD:AA:2B:6E:D6:5F:24:3D:91
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:e0:f6:26:f7:9b:46:ef:81:81:52:ae:66:06:81:ec:40:
         c5:d5:e1:8f:37:13:3f:01:21:b2:cc:53:d5:ec:20:21:6c:2d:
         9a:49:dd:1c:5f:13:87:a1:ab:3e:75:90:19:22:dd:f2:52:d9:
         25:92:3c:d1:a7:6b:b7:26:1a:70:67:45:01:6e:9a:82:45:8d:
         b1:8a:1c:f8:4a:00:31:51:5d:2a:52:59:d2:2a:e9:26:df:b7:
         8b:6b:4d:cc:5a:c1:95:5a:da:fb:0e:93:ae:38:2d:da:01:41:
         e4:69:fd:e9:c5:40:cf:9e:5a:72:48:07:a2:cf:6d:2b:77:e6:
         71:b3:4f:11:06:04:c9:1c:4e:fa:1c:a3:e6:c3:91:4d:43:4d:
         67:79:88:28:02:a1:aa:2b:2e:f7:84:29:76:ae:1f:13:56:bc:
         de:48:ce:9b:6d:bb:bb:92:a4:ec:76:f2:e7:ab:32:0d:1c:fc:
         e0:14:d1:67:3b:dc:62:11:20:28:a8:9c:0d:75:dc:d8:73:ec:
         a3:66:80:08:bf:1c:09:4c:b6:61:3a:d5:9e:56:f9:1f:5f:51:
         f3:fb:f2:9f:08:7d:c4:01:f9:c8:a1:83:96:45:41:41:a2:0d:
         b1:b0:ef:0e:b5:a1:ad:02:68:04:e8:c2:7a:f5:21:25:e4:9e:
         ed:ff:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:54 2026 by rpki-client