Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e32332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e32332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          pi4UY0ViHtVwxfFVeH8s/CThth6sCsXRkjfpefrki7s=
Subject key identifier:   72:27:9A:73:DD:92:80:15:66:88:9E:1F:C7:A5:90:7A:56:A6:0B:C5
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2155E5CDCF53DC003F5EDB17574F0118CA1A24A2
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e32332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     4230
IP address blocks:        189.23.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:55:e5:cd:cf:53:dc:00:3f:5e:db:17:57:4f:01:18:ca:1a:24:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:31:df:b9:ea:6f:cd:f4:a9:2a:de:72:cd:
                    3e:d7:83:ff:ab:ed:27:3c:2a:97:21:d7:12:99:18:
                    5c:59:6b:d0:cc:79:e0:d9:00:4a:49:69:78:34:88:
                    07:89:16:00:36:4a:16:4e:4e:95:c4:9a:ff:0f:47:
                    17:9f:f9:9d:27:f5:ed:f5:41:45:11:1a:28:36:a6:
                    fd:ad:42:d7:10:a3:0e:87:e6:ba:c6:68:b7:b3:bb:
                    87:db:81:8c:a0:d5:f8:94:89:9b:b6:b2:ff:b8:aa:
                    0b:f6:fa:39:6e:ec:0e:e4:29:3e:c2:aa:ed:73:3d:
                    f8:4b:fd:68:bf:49:dd:be:56:4e:f6:61:5c:44:9b:
                    6a:59:a0:2b:17:ee:95:b7:16:70:bf:b1:f6:f9:f9:
                    16:c7:62:f3:a9:7a:96:e6:08:25:8e:05:34:35:5d:
                    ec:29:3d:09:f5:8a:7d:0a:62:a2:9c:ab:d2:6f:d8:
                    71:21:a0:65:73:14:d9:22:5b:4e:58:91:70:0f:07:
                    11:96:a6:9f:df:ec:b1:5e:db:04:cb:3d:b7:45:6a:
                    e4:dc:87:b2:aa:b5:e6:2e:77:23:54:c4:a0:a6:6f:
                    8f:3e:fe:96:5b:31:fa:4f:f9:94:93:8f:04:12:54:
                    4c:18:d5:8b:23:77:c4:88:ce:cc:6f:ba:e8:4a:79:
                    3c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:27:9A:73:DD:92:80:15:66:88:9E:1F:C7:A5:90:7A:56:A6:0B:C5
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e32332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:89:74:66:7c:b7:29:9e:de:69:14:0c:0f:fc:eb:b7:45:2c:
         cd:14:63:69:6f:5e:c5:35:76:67:c7:d8:85:03:ef:19:19:5f:
         f9:94:46:12:20:a8:49:3f:2e:b1:0b:b7:11:d5:04:cf:88:20:
         4f:b4:50:88:a4:9d:ca:79:05:8a:ce:74:6f:a5:57:66:29:70:
         b2:a6:44:ef:46:68:7f:62:d5:c6:69:d5:d8:49:41:e2:6e:ed:
         d7:36:b5:b5:22:6e:32:92:0a:f4:b7:f4:55:c3:a4:ae:44:50:
         71:eb:3e:0c:7d:f4:09:dd:84:9e:2b:9b:92:c2:9a:c1:eb:cc:
         cb:b3:92:b1:24:5d:d6:d9:c2:17:d0:2c:25:3d:a3:54:8a:04:
         83:55:02:6c:70:58:19:b8:cd:fb:5e:56:a3:a2:36:2c:5b:ef:
         cc:3a:74:3a:9b:bc:9b:42:f9:74:95:ec:a4:0a:4e:fb:f6:bd:
         63:d2:e9:3c:37:7f:73:db:29:83:fd:d4:2c:1a:17:a2:f8:cb:
         dc:bd:58:f0:b0:89:db:fb:2a:74:e1:75:d7:63:bd:74:1b:9b:
         14:4e:39:22:75:b8:0f:d2:5b:af:3b:c9:58:7e:cd:6f:e9:9d:
         9b:91:aa:c1:df:32:f1:53:0e:87:c7:63:dc:e9:6d:c2:70:5e:
         39:c5:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:15 2026 by rpki-client