Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
File:                     323830343a3134633a3a2f33312d3634203d3e203238353733.roa (raw, json)
Hash identifier:          VYXm1KyHrYQo4Hc8jApFxmxplfZQg0v2kIO5jeYuPBE=
Subject key identifier:   D9:2A:82:B7:16:5D:AC:1A:73:04:EE:AB:01:A4:5F:ED:9A:A0:4C:DD
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       12E390096E6472ECC30C581555FE0B1EF8DD4992
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     28573
IP address blocks:        2804:14c::/31 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e3:90:09:6e:64:72:ec:c3:0c:58:15:55:fe:0b:1e:f8:dd:49:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:3a:59:06:41:86:26:a5:ef:3b:3e:6e:4a:
                    41:8d:fd:5a:82:d9:31:ea:ee:0e:22:55:61:18:32:
                    c0:4b:67:be:e4:b4:f1:d0:e3:cf:bc:6a:97:89:30:
                    31:92:46:1b:4f:d2:ef:d0:08:cb:d9:0d:56:13:59:
                    94:b5:55:3d:45:ce:f6:a7:61:81:ec:75:ee:15:81:
                    e9:5b:e4:0b:74:be:c3:5d:f6:a8:69:e3:83:8f:7c:
                    30:e1:97:4a:a2:9d:4b:d4:1c:bf:f4:e8:7a:d2:f0:
                    0b:1b:4a:b9:f0:2c:2d:dc:62:74:37:03:ae:83:b0:
                    d7:fb:f0:47:6c:77:ab:22:c7:0a:62:72:48:56:81:
                    9c:fd:51:7b:09:84:75:67:55:6b:46:ef:1e:69:ee:
                    da:3b:10:ba:30:55:52:2b:76:55:43:2a:28:90:a2:
                    76:f1:83:12:9d:ff:24:b2:d5:bd:01:57:12:85:80:
                    94:ab:db:6d:24:97:bc:80:6a:3e:4d:d4:9c:30:99:
                    68:6d:ef:14:63:36:58:b1:a2:e9:c8:98:4f:6b:19:
                    74:3c:9a:1a:63:90:11:5b:99:66:b3:58:76:2f:49:
                    66:f2:78:e4:11:8b:cb:8a:41:36:71:75:52:cc:41:
                    57:53:a6:05:54:b9:22:9d:61:9b:34:7c:c0:48:4c:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:82:B7:16:5D:AC:1A:73:04:EE:AB:01:A4:5F:ED:9A:A0:4C:DD
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c::/31

    Signature Algorithm: sha256WithRSAEncryption
         a3:1e:f3:3c:a0:e1:99:20:85:08:c8:17:ae:e2:9d:8c:06:32:
         07:a5:3a:a7:22:d4:08:df:51:ac:27:03:82:d9:19:47:1b:74:
         0d:bb:2b:c0:bc:d8:e5:c7:04:f8:27:ff:a0:ae:2d:40:e8:54:
         3e:75:78:c2:c7:c1:03:a8:e8:18:82:a0:b8:f6:a5:28:5c:c5:
         38:83:e2:96:cb:25:88:b5:83:31:1f:8d:48:13:7e:8e:0e:62:
         ab:f8:45:f2:82:fe:34:ba:83:d5:55:fa:69:d1:d2:34:7a:c4:
         2a:c9:5f:07:37:ea:46:9d:1a:18:95:04:51:0d:98:f5:d2:ad:
         19:f9:06:a4:9e:36:0e:0a:dd:9c:66:45:1a:b1:ff:55:9f:62:
         2c:78:93:67:f3:44:07:bf:bb:0d:8e:38:04:6b:f5:74:69:13:
         45:56:fd:f5:8f:f1:ee:05:10:36:c0:b3:5c:21:90:e8:8d:fe:
         d7:29:48:9f:12:f5:be:61:0a:c4:67:35:5f:3d:68:3c:37:99:
         1d:55:f7:2b:09:32:f4:d6:79:72:1d:13:d8:7f:45:ec:7a:bf:
         3b:ba:f3:51:3d:f7:6b:d4:3b:3d:3a:55:a4:fd:2c:21:0a:f6:
         95:f2:c4:d9:fa:ae:36:b6:39:24:34:17:d5:e5:f7:87:30:1a:
         98:a2:b3:7b
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUEuOQCW5kcuzDDFgVVf4LHvjdSZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNjAyMDQxOTU1MTBaFw0yNzAyMDMyMDAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgzMjNBNTkwNjQxODYyNkE1
RUYzQjNFNkU0QTQxOERGRDVBODJEOTMxRUFFRTBFMjI1NTYxMTgzMkMwNEI2N0JF
RTRCNEYxRDBFM0NGQkM2QTk3ODkzMDMxOTI0NjFCNEZEMkVGRDAwOENCRDkwRDU2
MTM1OTk0QjU1NTNENDVDRUY2QTc2MTgxRUM3NUVFMTU4MUU5NUJFNDBCNzRCRUMz
NURGNkE4NjlFMzgzOEY3QzMwRTE5NzRBQTI5RDRCRDQxQ0JGRjRFODdBRDJGMDBC
MUI0QUI5RjAyQzJEREM2Mjc0MzcwM0FFODNCMEQ3RkJGMDQ3NkM3N0FCMjJDNzBB
NjI3MjQ4NTY4MTlDRkQ1MTdCMDk4NDc1Njc1NTZCNDZFRjFFNjlFRURBM0IxMEJB
MzA1NTUyMkI3NjU1NDMyQTI4OTBBMjc2RjE4MzEyOURGRjI0QjJENUJEMDE1NzEy
ODU4MDk0QUJEQjZEMjQ5N0JDODA2QTNFNERENDlDMzA5OTY4NkRFRjE0NjMzNjU4
QjFBMkU5Qzg5ODRGNkIxOTc0M0M5QTFBNjM5MDExNUI5OTY2QjM1ODc2MkY0OTY2
RjI3OEU0MTE4QkNCOEE0MTM2NzE3NTUyQ0M0MTU3NTNBNjA1NTRCOTIyOUQ2MTlC
MzQ3Q0MwNDg0QzNFNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuDI6WQZBhial7zs+bkpBjf1agtkx6u4OIlVhGDLAS2e+5LTx0OPP
vGqXiTAxkkYbT9Lv0AjL2Q1WE1mUtVU9Rc72p2GB7HXuFYHpW+QLdL7DXfaoaeOD
j3ww4ZdKop1L1By/9Oh60vALG0q58Cwt3GJ0NwOug7DX+/BHbHerIscKYnJIVoGc
/VF7CYR1Z1VrRu8eae7aOxC6MFVSK3ZVQyookKJ28YMSnf8kstW9AVcShYCUq9tt
JJe8gGo+TdScMJlobe8UYzZYsaLpyJhPaxl0PJoaY5ARW5lms1h2L0lm8njkEYvL
ikE2cXVSzEFXU6YFVLkinWGbNHzASEw+SQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FNkqgrcWXawacwTuqwGkX+2aoEzdMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzgzMDM0M2EzMTM0NjMzYTNh
MmYzMzMxMmQzNjM0MjAzZDNlMjAzMjM4MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKAQBTDAN
BgkqhkiG9w0BAQsFAAOCAQEAox7zPKDhmSCFCMgXruKdjAYyB6U6pyLUCN9RrCcD
gtkZRxt0DbsrwLzY5ccE+Cf/oK4tQOhUPnV4wsfBA6joGIKguPalKFzFOIPilssl
iLWDMR+NSBN+jg5iq/hF8oL+NLqD1VX6adHSNHrEKslfBzfqRp0aGJUEUQ2Y9dKt
GfkGpJ42DgrdnGZFGrH/VZ9iLHiTZ/NEB7+7DY44BGv1dGkTRVb99Y/x7gUQNsCz
XCGQ6I3+1ylInxL1vmEKxGc1Xz1oPDeZHVX3Kwky9NZ5ch0T2H9F7Hq/O7rzUT33
a9Q7PTpVpP0sIQr2lfLE2fquNrY5JDQX1eX3hzAamKKzew==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:08 2026 by rpki-client