Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e34322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e34322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          kYrsphIGcVyOZASzTYoupriuoU3UuKbc2IGdT6IQuds=
Subject key identifier:   06:A8:47:AB:A4:6C:8F:92:1A:E1:64:D9:88:65:2A:F9:E8:22:A8:50
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5067D7D24FD866798CDFDB03326793E6A124D104
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e34322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     4230
IP address blocks:        189.42.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:67:d7:d2:4f:d8:66:79:8c:df:db:03:32:67:93:e6:a1:24:d1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=3082010A0282010100DDF8D7D035561A9D54972C00C0FED92B6CBA3F6696BE009CFC6EF189475DE8A5CE456C69CB7D3E5730358A5ED2B80D4002E51193C6B94D31E14ED0B82CEBF702ED77DF61E30CD794D3C7DE494FB82D9F5186A2D0BB7D8B27A0F8EA46FA5E190B3188A45D666D78B539402550D68ABA23B91E8C60B77502E028CC94501497B4D7F8D9A0C36BF013CAA1F0432B68BA1A0B74F1EDD3686FCDF609039DFD5F0F2EDA2F746C9F2E398D60D03FF9CEB134C6F98F76E126404A83B2CB2730EC48C94AB9BFF20BE0AA4F2683A6BFF69F57D25E7AD624AEC407F64C8F0EC0DE09C8BA7DF3A393CCE30085AE2E9C4C9EA47360DCDA7CFA16F90AD82170590666ED755AB46F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:d7:d0:35:56:1a:9d:54:97:2c:00:c0:fe:
                    d9:2b:6c:ba:3f:66:96:be:00:9c:fc:6e:f1:89:47:
                    5d:e8:a5:ce:45:6c:69:cb:7d:3e:57:30:35:8a:5e:
                    d2:b8:0d:40:02:e5:11:93:c6:b9:4d:31:e1:4e:d0:
                    b8:2c:eb:f7:02:ed:77:df:61:e3:0c:d7:94:d3:c7:
                    de:49:4f:b8:2d:9f:51:86:a2:d0:bb:7d:8b:27:a0:
                    f8:ea:46:fa:5e:19:0b:31:88:a4:5d:66:6d:78:b5:
                    39:40:25:50:d6:8a:ba:23:b9:1e:8c:60:b7:75:02:
                    e0:28:cc:94:50:14:97:b4:d7:f8:d9:a0:c3:6b:f0:
                    13:ca:a1:f0:43:2b:68:ba:1a:0b:74:f1:ed:d3:68:
                    6f:cd:f6:09:03:9d:fd:5f:0f:2e:da:2f:74:6c:9f:
                    2e:39:8d:60:d0:3f:f9:ce:b1:34:c6:f9:8f:76:e1:
                    26:40:4a:83:b2:cb:27:30:ec:48:c9:4a:b9:bf:f2:
                    0b:e0:aa:4f:26:83:a6:bf:f6:9f:57:d2:5e:7a:d6:
                    24:ae:c4:07:f6:4c:8f:0e:c0:de:09:c8:ba:7d:f3:
                    a3:93:cc:e3:00:85:ae:2e:9c:4c:9e:a4:73:60:dc:
                    da:7c:fa:16:f9:0a:d8:21:70:59:06:66:ed:75:5a:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A8:47:AB:A4:6C:8F:92:1A:E1:64:D9:88:65:2A:F9:E8:22:A8:50
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e34322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.42.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:8d:93:ce:59:23:0c:f6:61:95:63:d4:f7:03:31:41:63:
         43:9d:86:1c:a9:54:fd:ea:b7:95:fc:55:11:6e:46:ea:7f:b6:
         72:f5:ed:08:db:84:25:b2:9b:fb:ee:7a:10:25:ae:de:75:1f:
         48:24:f9:e6:26:b2:23:2c:b6:23:77:b8:10:2e:2c:d4:34:fe:
         78:c5:44:54:51:b4:c9:b4:71:56:4c:a5:60:92:3a:56:08:ec:
         ba:f0:cf:c1:2c:76:01:db:dd:a9:22:03:bd:5c:fe:0d:88:23:
         25:ea:c9:8b:68:07:31:f8:26:64:81:38:ff:48:33:4a:91:68:
         eb:20:5c:81:f9:9c:87:29:fe:ad:67:67:b4:50:2e:18:89:42:
         c6:be:04:36:55:ae:b5:98:8c:1c:00:95:ab:2c:82:f0:9d:2d:
         2d:b7:5e:01:35:4d:92:44:4d:9a:0b:16:2f:c4:ad:da:23:29:
         22:1d:83:e7:dd:dd:d4:76:64:b9:d6:98:7b:eb:13:3a:10:e6:
         4f:25:b5:90:d6:56:93:85:20:1f:b5:e9:25:c2:14:83:26:12:
         bb:e0:59:f3:31:1e:43:b9:b2:90:34:b7:bf:df:ad:82:75:6a:
         92:34:cf:88:19:7e:1c:71:af:73:47:c0:39:68:13:65:5c:96:
         3a:30:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:04 2026 by rpki-client