Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e31362e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e31362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          6cYCy2YrrDVaUpxwOSIh9CgjF+qlsj3mBofg9+PoATw=
Subject key identifier:   01:55:11:53:BD:5C:E4:FB:09:39:ED:1B:71:4B:F8:D8:06:2A:3B:87
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       09F76CCA3551F9BC1D44610577245C1C0576DFD8
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e31362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     4230
IP address blocks:        189.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f7:6c:ca:35:51:f9:bc:1d:44:61:05:77:24:5c:1c:05:76:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:b0:81:12:f2:db:45:c1:5f:de:62:3f:2c:
                    dd:57:f9:a1:e9:96:9a:22:fc:c1:ff:e3:39:5f:01:
                    0c:5d:4c:33:08:e3:e6:a6:ef:a4:63:20:6b:a5:90:
                    27:47:00:7b:f2:02:aa:39:c3:ba:74:4e:e7:59:88:
                    eb:3b:d2:91:7d:3d:db:3f:e2:72:cd:ec:79:5f:45:
                    0a:28:b7:ee:95:b2:84:06:74:d8:65:c9:67:2f:9c:
                    75:75:21:a2:51:bb:71:a1:c5:10:0c:8e:50:03:c3:
                    a4:ca:3e:c9:7d:b3:ad:9b:92:fe:56:49:e9:92:32:
                    bd:c0:92:b2:6a:f2:58:f6:ad:6c:03:ff:b4:4d:4c:
                    18:e2:4b:bc:75:41:79:c8:a2:43:d2:38:da:18:65:
                    ab:99:9a:18:fc:f3:f0:2c:d5:e9:48:81:91:bc:71:
                    6f:44:80:25:46:cb:d1:34:fe:a9:0f:f3:d4:71:ed:
                    13:94:03:18:5e:9b:91:c7:61:f8:d9:70:bf:20:b4:
                    7b:06:36:e2:31:70:1f:b7:28:56:94:23:0d:07:aa:
                    5c:12:ae:fa:a6:e0:66:a1:68:f4:20:19:97:b8:57:
                    32:a0:a2:a9:40:c4:11:13:54:ad:e1:c2:5f:79:0b:
                    b4:a9:3e:44:b6:df:44:1c:ad:45:44:49:a4:94:ea:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:55:11:53:BD:5C:E4:FB:09:39:ED:1B:71:4B:F8:D8:06:2A:3B:87
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e31362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:75:9e:c1:bb:42:4a:16:b5:28:e8:da:ca:b8:df:cd:56:
         be:de:82:86:07:0e:47:51:52:ce:31:4c:18:44:87:b2:14:1a:
         02:04:98:ee:86:14:d3:f9:9a:33:cf:54:fd:1f:93:58:83:f5:
         1a:0a:e2:9c:22:72:2f:41:60:af:1f:ff:f7:60:46:cc:72:eb:
         f7:01:39:1e:10:de:a0:1f:1c:85:2c:f1:ea:a7:26:3c:13:14:
         8f:f2:d0:0c:40:5c:3a:f1:c5:1f:40:3c:63:22:7d:07:08:65:
         13:bb:bd:08:1d:b5:9f:44:9a:49:64:8c:43:7a:59:21:77:f6:
         f9:c0:89:00:57:aa:96:aa:22:7d:a5:43:55:1d:1d:e5:ce:47:
         5c:23:72:be:c3:29:3c:01:a1:d7:14:41:bf:76:e0:63:50:cd:
         a0:e8:6e:97:0b:dd:8c:3f:4c:a2:85:90:62:7b:1f:62:fc:4f:
         65:56:77:d8:9e:31:8b:9c:f0:85:e6:fe:c0:68:30:ef:1d:f3:
         29:7d:77:33:43:f9:99:f6:9f:2f:66:8c:55:cf:ca:bf:22:20:
         e7:2e:3e:0d:a3:14:4a:eb:a7:8f:b5:a3:63:31:24:b2:f4:b1:
         d5:e6:71:58:ee:4b:23:5e:3a:96:67:60:b0:bd:81:bc:60:9e:
         fe:0f:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:28 2026 by rpki-client