Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
File:                     3230312e39342e3136302e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          AfX7t4gXVb7Pf6oqBy2Dth5J0YhkCg20QdG5t+sAXCk=
Subject key identifier:   52:57:6F:D9:E2:BB:F9:BA:C8:62:EC:A3:DB:65:74:3E:D7:AD:09:1D
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       26149CCE931106FA4F80BF55711308093010EC3F
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:16 +0000
ROA not before:           Wed 04 Feb 2026 19:55:16 +0000
ROA not after:            Wed 03 Feb 2027 20:00:16 +0000
asID:                     28573
IP address blocks:        201.94.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:14:9c:ce:93:11:06:fa:4f:80:bf:55:71:13:08:09:30:10:ec:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:16 2026 GMT
            Not After : Feb  3 20:00:16 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:b6:a0:d6:d2:77:de:fa:cf:64:6f:bd:f3:
                    4d:e4:e5:5f:f9:25:19:ee:55:04:19:80:e4:87:09:
                    5f:ec:b1:9b:d1:37:1e:ed:85:32:bf:86:14:33:1d:
                    5e:12:f7:ba:26:7a:19:64:33:c0:d9:9c:ed:64:c9:
                    d3:df:67:77:1d:d5:de:3d:88:91:5b:b9:2b:e3:83:
                    ee:2e:f2:65:a4:2f:9c:b6:b7:70:a7:41:c6:11:34:
                    e6:ef:25:e1:bf:9b:4e:80:91:89:6f:dc:17:c3:c7:
                    6b:92:a7:9c:b8:53:cc:17:b2:b7:1d:bf:d5:e1:af:
                    e2:7c:46:dd:3e:cc:43:d3:1c:47:b0:f3:72:e7:eb:
                    a1:45:01:5f:84:11:9d:b0:65:c9:2f:42:f4:89:98:
                    17:fa:e0:45:87:27:02:a1:21:68:c4:8a:ca:b0:07:
                    f7:07:5c:a2:5c:b7:96:91:33:81:31:4a:02:2a:74:
                    49:99:d3:b1:2c:60:fc:e4:ca:27:07:6e:39:9e:12:
                    66:10:49:34:2c:dd:7c:4d:b9:cd:e6:65:85:50:1b:
                    31:ae:e6:1f:f6:b7:e9:67:c8:a4:53:3b:73:60:b5:
                    0d:24:f7:4f:52:5e:f8:db:ab:40:04:05:62:d5:68:
                    92:ec:89:76:b9:05:c1:f5:ef:f8:41:ff:38:c7:bf:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:57:6F:D9:E2:BB:F9:BA:C8:62:EC:A3:DB:65:74:3E:D7:AD:09:1D
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:84:5f:3b:22:42:65:4d:96:12:9c:2c:44:73:87:e9:40:a5:
         1a:6e:4e:ef:92:1e:7a:66:73:12:9c:34:7e:44:aa:25:3e:80:
         e1:4e:6b:c2:de:e6:15:66:b5:2f:80:1a:6e:58:c8:72:23:53:
         a7:36:46:79:fe:5f:36:72:11:a5:01:7f:21:a2:4a:4a:f1:8c:
         4d:d5:fb:9e:a5:d0:96:53:4c:0b:9e:d6:09:7d:5e:69:cc:cf:
         f1:ff:c3:93:44:12:84:f2:41:32:ce:55:24:9a:60:a3:2e:c7:
         b4:c7:ca:ca:b7:6c:25:9e:b7:f6:2a:9e:42:69:d0:c4:da:0c:
         1d:e2:f0:57:0a:92:a7:bf:cf:58:0b:90:31:35:d2:6d:4f:f5:
         d6:d3:96:e8:86:d1:35:4a:6b:10:90:b0:f4:42:c5:f9:48:ff:
         b9:eb:e2:69:aa:cb:ab:e4:d9:e3:02:13:68:75:a0:89:3b:c5:
         ac:1e:ef:22:d8:8b:fa:25:40:c0:10:d7:83:a1:b6:1a:ba:48:
         52:ed:f7:d4:7d:93:b5:f6:b5:5d:10:3d:54:4c:df:4b:7d:b1:
         bd:84:77:15:76:4c:69:62:f0:12:94:d6:26:06:c6:1f:88:e2:
         73:33:c5:41:c9:4c:1c:06:5c:63:98:70:3c:01:45:a8:78:48:
         19:e5:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:08 2026 by rpki-client