Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e33302e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e33302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Z9SHYYelnzLDpKASMRE0oqvX+XvsVn4stVOkMXvbIeE=
Subject key identifier:   4C:8D:BD:FE:50:F7:2F:44:B5:7B:5A:77:75:BD:B8:12:2B:D1:A4:7D
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       7E82AE98CCB34F34BE1E64BB4207D182BA0E9EBD
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e33302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     4230
IP address blocks:        187.30.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:ae:98:cc:b3:4f:34:be:1e:64:bb:42:07:d1:82:ba:0e:9e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:2d:c3:90:c9:eb:6b:80:ca:53:83:76:58:
                    28:1d:8f:e3:1b:f9:af:40:78:e7:b6:50:fb:87:ce:
                    b6:11:df:09:28:29:54:65:b4:21:ff:f9:46:64:ae:
                    e3:56:5f:67:60:fa:c4:bc:c1:95:84:2d:12:ed:99:
                    95:72:6b:c0:6a:cb:67:0a:3b:26:4d:34:bf:32:65:
                    aa:41:ee:9c:75:43:18:75:12:5b:22:02:b1:7c:ee:
                    e6:c7:d4:e8:a5:9c:18:96:f8:9e:27:74:e5:1b:18:
                    9d:be:8d:b2:ac:3f:56:92:2c:ca:7c:2a:ee:f2:da:
                    42:6a:b7:13:9b:bc:23:12:e2:2b:7c:ff:e3:70:67:
                    82:7b:2e:a1:9b:0f:c7:7a:39:96:90:17:39:ef:51:
                    98:7b:fb:99:76:fd:d1:cc:26:06:1f:e9:56:98:89:
                    ea:2a:95:e4:e5:f7:9e:1f:47:1f:0d:7b:83:f1:3f:
                    88:a4:2c:e0:68:98:53:40:ba:99:21:34:18:50:1a:
                    eb:4d:14:af:e1:88:44:43:ed:fa:62:fa:c3:43:0a:
                    f7:f1:ad:0b:cc:d9:ec:e6:03:43:8a:24:c7:0b:bb:
                    bf:54:53:8f:d3:63:ed:0f:d1:30:3e:87:c6:01:63:
                    6a:6f:bd:85:4f:56:d4:5c:85:8a:26:f8:10:52:ec:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8D:BD:FE:50:F7:2F:44:B5:7B:5A:77:75:BD:B8:12:2B:D1:A4:7D
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e33302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:36:8f:62:ae:4d:55:34:d7:68:e8:d4:2f:dd:72:47:c8:
         65:a3:fc:0c:25:df:26:97:bc:a4:99:de:a4:ca:94:74:74:01:
         0e:9b:d8:21:88:71:22:2f:ed:3c:4f:64:2c:58:08:8d:9b:b0:
         02:d8:ec:1a:cc:1f:fe:02:ee:b8:fb:18:0a:00:9d:15:d0:5a:
         c0:77:4f:0b:58:ad:b3:e2:28:75:d3:45:0b:fd:54:43:3d:0e:
         72:6e:32:f3:ab:aa:69:04:ae:9d:f3:83:3e:a4:2e:5f:8c:53:
         6b:85:0f:5c:20:4f:97:14:bd:aa:37:71:36:1f:25:a1:88:36:
         c4:af:76:ee:31:05:03:1c:22:d9:cb:4d:d9:a6:f8:87:05:0b:
         6d:7f:42:ff:1b:47:06:82:74:a8:ad:40:97:79:f9:2f:c8:ac:
         54:d7:56:c3:f8:a2:ae:47:05:08:e2:51:ec:a8:f7:88:81:9e:
         60:04:84:00:7b:b9:06:75:b0:e7:aa:f2:0b:ac:c7:52:b8:0e:
         7a:56:e6:f2:89:81:df:04:ec:29:63:0d:de:e5:b0:7b:0b:71:
         a8:64:fa:67:87:83:fb:0d:f3:65:f4:a3:e6:b3:77:ee:82:89:
         a6:c8:31:4d:46:26:b7:ae:90:f4:a8:b1:96:f6:d0:43:f0:2d:
         a3:02:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:50 2026 by rpki-client