Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          lbYuMWXSICbAgqQb16kZ9lppvch1MX7Fcg7NzJrwpLM=
Subject key identifier:   23:4A:D0:E3:D9:9D:1F:B3:31:B3:23:66:79:2F:66:D1:1D:8E:2A:D1
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       682C46C473D24400A37496CAAF6A455E7598B973
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     4230
IP address blocks:        189.2.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2c:46:c4:73:d2:44:00:a3:74:96:ca:af:6a:45:5e:75:98:b9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:88:3e:c6:bf:f5:02:9e:9f:9e:07:c9:fa:
                    33:4a:47:9a:0d:5b:fb:81:c2:28:f7:6f:cf:ae:a4:
                    9e:96:f1:d1:9d:35:d5:25:25:1f:bf:a9:03:b0:d7:
                    e9:19:72:73:5f:f5:ea:dd:7d:55:fa:ee:7e:2e:3d:
                    22:c6:2c:94:51:25:5a:cf:61:c3:c7:1b:1f:b9:b1:
                    9e:e5:a1:87:0b:31:ff:d9:3e:8c:0e:ec:d7:b7:67:
                    d5:54:03:4c:7c:d0:4c:25:69:6b:78:64:6f:73:42:
                    4d:46:55:0a:c0:9a:91:6b:81:a9:ce:87:a4:6a:2c:
                    d5:9a:dc:37:4d:fb:5e:06:81:e1:15:ff:e4:65:43:
                    a3:3e:7e:2c:b6:79:d9:e9:da:e5:6c:b0:0e:d2:69:
                    42:b7:16:c0:da:4a:72:2a:90:ba:bf:d0:ed:75:23:
                    3f:8c:60:fa:16:f9:80:30:2c:7a:22:22:c9:fa:51:
                    84:8e:bf:d1:51:d8:57:eb:2f:f8:1c:bc:b7:92:19:
                    4f:b4:41:f8:54:f1:6a:de:4f:ad:26:0d:d1:17:f6:
                    a4:30:61:3b:d6:46:f3:1d:8e:ca:37:24:33:5a:24:
                    36:9e:a6:72:e5:b7:b7:7d:f1:bf:1e:84:8f:9f:bd:
                    9c:c2:38:6f:32:27:14:a2:e1:7e:f1:c5:5f:9e:0a:
                    24:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:D0:E3:D9:9D:1F:B3:31:B3:23:66:79:2F:66:D1:1D:8E:2A:D1
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.2.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:08:35:48:4c:3f:e8:56:7c:a3:3a:6c:ee:14:3d:f8:72:3e:
         5f:42:8f:ef:e1:73:c1:65:4c:dc:20:1d:ef:fc:0d:27:6a:5f:
         b5:fd:ff:b7:2c:0e:80:c9:c8:da:af:38:db:1a:e3:90:e3:ae:
         94:ba:3d:94:95:ff:04:61:1e:12:ad:a5:44:c8:cf:e9:f6:b4:
         ba:85:93:2d:b8:7f:21:00:72:f4:ca:3c:69:ed:54:71:b2:8a:
         e4:4e:2f:cb:5d:8d:ff:fa:2e:c8:48:90:69:d1:fb:65:98:5c:
         b7:ae:e0:8b:fe:cf:8c:65:8a:c3:c0:80:0a:d8:59:c9:79:a3:
         9f:a8:77:c7:e5:51:16:8a:eb:cb:6e:af:ad:94:f9:cd:24:dd:
         1e:ef:c4:fa:97:d7:7e:0e:24:db:f7:23:a7:4d:d0:5d:04:86:
         0d:9f:b1:c5:17:52:70:2f:90:08:d5:cc:cd:7a:98:57:6a:39:
         c8:54:ef:45:af:72:d8:9b:c4:4e:0b:c5:76:3a:7f:9c:f0:a8:
         58:61:19:23:58:6e:b8:c2:66:27:71:ad:c4:1f:ca:77:c5:91:
         d0:04:4a:fe:00:bc:5f:ab:1a:ca:ca:0c:b7:4a:bb:91:40:fb:
         a0:b8:da:74:e4:68:87:42:87:20:96:47:6a:d3:58:41:4f:37:
         ef:06:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:28 2026 by rpki-client