Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/3139302e352e3230382e302f32322d3234203d3e20323731313835.roa
File:                     3139302e352e3230382e302f32322d3234203d3e20323731313835.roa (raw, json)
Hash identifier:          Jx8F998J8Wo7vfqNuSdhyM19ohWkXplQDb0V6bx/4gA=
Subject key identifier:   AB:20:8A:6B:8B:C2:BC:D1:5B:85:18:27:AA:E4:22:98:EB:F4:CA:97
Certificate issuer:       /CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
Certificate serial:       03019C0C5F6F08CB3762B94965C17969F9B2E2A3
Authority key identifier: FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/3139302e352e3230382e302f32322d3234203d3e20323731313835.roa
Signing time:             Tue 24 Feb 2026 18:00:00 +0000
ROA not before:           Tue 24 Feb 2026 17:55:00 +0000
ROA not after:            Tue 23 Feb 2027 18:00:00 +0000
asID:                     271185
IP address blocks:        190.5.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl
                          rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:01:9c:0c:5f:6f:08:cb:37:62:b9:49:65:c1:79:69:f9:b2:e2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071
        Validity
            Not Before: Feb 24 17:55:00 2026 GMT
            Not After : Feb 23 18:00:00 2027 GMT
        Subject: CN=3082010A0282010100E57F6FD1CBED69A899AA3530E17ACA5CFF1CA259A76A900D90E3D467C706F8830637AF9AD503A561D0712F472C79752CF416F25003C4982C2E4242877E02AF46B10B364F3466CB8D363770C78BF4FDBAEAD285B3F6DA9C59AFF075AEA003CD82E47D8F9320E3FF4BECBFEDF19510723F924B2E5037615A2A7DB7EA116C13A7693410D1AB85A287A5F430E6C2D03E98172CBBD20BE83CA8AC2A6F243A2CBBBF99ECE65E39B26B1175474F27306A08934CBB186F3C1EDE0107A127C20C43522E9E718941681E08D001A0B080B1C8D59FDFDFD0C54A3EEAFEBC3477A3E3EB365E01CB03DAFB88122D66367BF9461DB6F4E8F6FFE129798305D9596E498F0B7762AD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:6f:d1:cb:ed:69:a8:99:aa:35:30:e1:7a:
                    ca:5c:ff:1c:a2:59:a7:6a:90:0d:90:e3:d4:67:c7:
                    06:f8:83:06:37:af:9a:d5:03:a5:61:d0:71:2f:47:
                    2c:79:75:2c:f4:16:f2:50:03:c4:98:2c:2e:42:42:
                    87:7e:02:af:46:b1:0b:36:4f:34:66:cb:8d:36:37:
                    70:c7:8b:f4:fd:ba:ea:d2:85:b3:f6:da:9c:59:af:
                    f0:75:ae:a0:03:cd:82:e4:7d:8f:93:20:e3:ff:4b:
                    ec:bf:ed:f1:95:10:72:3f:92:4b:2e:50:37:61:5a:
                    2a:7d:b7:ea:11:6c:13:a7:69:34:10:d1:ab:85:a2:
                    87:a5:f4:30:e6:c2:d0:3e:98:17:2c:bb:d2:0b:e8:
                    3c:a8:ac:2a:6f:24:3a:2c:bb:bf:99:ec:e6:5e:39:
                    b2:6b:11:75:47:4f:27:30:6a:08:93:4c:bb:18:6f:
                    3c:1e:de:01:07:a1:27:c2:0c:43:52:2e:9e:71:89:
                    41:68:1e:08:d0:01:a0:b0:80:b1:c8:d5:9f:df:df:
                    d0:c5:4a:3e:ea:fe:bc:34:77:a3:e3:eb:36:5e:01:
                    cb:03:da:fb:88:12:2d:66:36:7b:f9:46:1d:b6:f4:
                    e8:f6:ff:e1:29:79:83:05:d9:59:6e:49:8f:0b:77:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:20:8A:6B:8B:C2:BC:D1:5B:85:18:27:AA:E4:22:98:EB:F4:CA:97
            X509v3 Authority Key Identifier:
                keyid:FF:9A:6A:49:4A:C8:BD:42:AC:BA:6F:13:A8:42:AB:B2:E5:B5:C0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9A6A494AC8BD42ACBA6F13A842ABB2E5B5C071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYFP2GpfcACTKrnKic8AAtn6nqs5JrCPKNZdHRy9GqK1/0/3139302e352e3230382e302f32322d3234203d3e20323731313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:14:95:e1:8b:41:94:c1:06:a7:b8:f2:51:48:19:04:1b:57:
         3b:17:69:08:28:cb:60:f8:21:5f:8e:5d:92:0c:05:35:71:5e:
         35:fa:62:a8:2e:3a:75:46:63:ee:76:26:3f:06:1b:7a:1d:ec:
         c8:69:fa:92:21:63:13:34:8b:01:9d:04:98:66:39:28:b5:c6:
         d9:5b:4b:5a:fc:2a:3c:08:a5:0d:f2:a6:9e:f4:e6:d9:62:2e:
         ac:81:d8:7c:e1:dd:5c:a7:88:2d:10:bf:ce:56:9e:71:8b:14:
         04:19:24:9a:c3:49:38:88:48:06:3d:a9:53:5a:d3:a6:a1:f7:
         91:d1:bc:b5:c0:1f:1f:7b:5f:73:80:4d:61:d2:a8:1c:46:96:
         11:61:f3:23:a0:76:80:76:63:fb:df:66:0a:f2:ce:62:13:16:
         71:a4:51:dd:34:2b:c8:1c:c9:ff:09:e5:8b:4c:39:25:8e:64:
         c3:06:70:a1:b7:e1:46:31:23:3d:da:cc:55:96:df:31:a6:d9:
         fb:16:24:37:4f:c5:ae:fe:7e:dc:6a:9b:76:d4:b2:fe:35:5a:
         92:c4:85:4f:c4:79:a2:c1:4d:4a:0a:0b:3f:ee:54:f8:6e:f0:
         27:b1:77:a6:7a:80:e7:ee:7f:8f:4d:fd:2b:7e:38:84:be:02:
         5e:09:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:59:14 2026 by rpki-client