Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e35322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          W28cBxp19FfQXXH+XDx9ZL8Q9bawpYEvo9xc84k//3o=
Subject key identifier:   82:10:B2:12:AA:A8:77:81:9F:26:E3:B8:8E:B0:84:96:4E:DC:5C:5C
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2B656A60B309DA9CEBDE0BFE9253E3D9B451E182
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     4230
IP address blocks:        189.52.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:65:6a:60:b3:09:da:9c:eb:de:0b:fe:92:53:e3:d9:b4:51:e1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:b2:53:a6:d6:10:19:db:d5:bd:58:96:98:
                    2c:b0:e6:25:c7:26:96:92:ba:9e:fa:33:eb:2e:ca:
                    8c:99:ff:fe:7c:a2:c8:15:ee:74:ce:10:5b:33:47:
                    6b:f8:b4:a8:38:44:89:45:e7:f3:07:eb:a4:03:58:
                    28:b6:20:37:53:df:67:55:4e:9b:f2:ff:29:ee:65:
                    a1:47:1e:d5:ff:ae:ed:35:f7:8a:c8:cb:a6:e8:4a:
                    cb:4d:bc:21:18:0d:c8:15:dd:07:6e:91:ef:67:74:
                    a9:71:a6:07:21:37:49:3e:3e:aa:1a:10:01:6d:a2:
                    d9:76:c5:cd:f6:4d:a3:62:37:da:a1:0e:7d:95:2a:
                    31:c1:e1:a2:c7:f9:28:10:8c:9f:dc:f9:7a:7c:c0:
                    e3:ce:c2:ed:b0:19:47:94:fe:69:c1:b0:11:cb:8a:
                    f5:99:f4:e2:30:a9:98:99:42:3d:97:40:39:f6:fe:
                    9d:bf:10:b8:6d:39:f4:f0:c0:ab:07:ff:88:4e:2a:
                    ea:93:8a:4c:12:fc:dd:51:54:cb:d1:d8:71:24:e2:
                    e2:f8:c4:67:c2:a1:14:49:09:d9:aa:3c:d9:05:fa:
                    c8:8a:03:db:69:92:af:70:35:22:4b:25:ef:86:17:
                    f6:89:c9:4a:00:f7:5d:2f:51:54:4e:7c:d2:49:7d:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:B2:12:AA:A8:77:81:9F:26:E3:B8:8E:B0:84:96:4E:DC:5C:5C
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:79:a6:a8:fa:80:7a:58:cc:8d:0d:08:11:eb:0d:c0:54:7b:
         10:55:6e:0d:32:f7:0e:d7:63:99:be:33:0e:d0:d3:1f:bd:22:
         97:64:a7:bf:35:84:7b:d7:77:b2:77:a3:51:11:4b:52:8f:73:
         f1:d5:c0:be:1e:51:12:2c:a9:b7:c4:c0:75:cf:85:b1:cf:d5:
         7d:3d:05:58:c1:12:09:13:84:ad:01:6b:83:c2:2c:54:41:b4:
         e7:2c:78:4c:a3:ea:7b:8f:12:75:44:14:1a:9c:40:e9:3e:57:
         a1:27:0f:83:58:9a:ec:54:a3:3f:54:77:36:91:9c:d7:6b:27:
         18:d5:4f:f2:29:51:67:93:bc:95:83:4a:6d:ed:a3:59:4f:b4:
         e1:4f:4c:b2:e3:dd:de:f6:25:1e:d8:a8:e2:55:f8:7e:ab:49:
         76:e0:5e:af:d0:01:38:36:79:a9:38:e0:33:aa:7b:c7:04:1b:
         93:93:10:95:bb:c6:92:be:63:12:cc:21:e1:3c:8e:81:2e:5e:
         04:c0:07:e9:56:5e:4f:4e:36:9c:14:93:ea:e8:88:5e:34:2f:
         61:72:28:1b:86:34:68:81:0a:57:06:e5:4d:0f:ca:e1:09:2d:
         f1:b8:4a:7c:d1:dd:fd:bf:e4:ef:e9:57:c2:7a:fa:2f:8a:75:
         fb:1d:0c:0d
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUK2VqYLMJ2pzr3gv+klPj2bRR4YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNjAyMDQxOTU1MDdaFw0yNzAyMDMyMDAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNFNUIyNTNBNkQ2MTAxOURC
RDVCRDU4OTY5ODJDQjBFNjI1QzcyNjk2OTJCQTlFRkEzM0VCMkVDQThDOTlGRkZF
N0NBMkM4MTVFRTc0Q0UxMDVCMzM0NzZCRjhCNEE4Mzg0NDg5NDVFN0YzMDdFQkE0
MDM1ODI4QjYyMDM3NTNERjY3NTU0RTlCRjJGRjI5RUU2NUExNDcxRUQ1RkZBRUVE
MzVGNzhBQzhDQkE2RTg0QUNCNERCQzIxMTgwREM4MTVERDA3NkU5MUVGNjc3NEE5
NzFBNjA3MjEzNzQ5M0UzRUFBMUExMDAxNkRBMkQ5NzZDNUNERjY0REEzNjIzN0RB
QTEwRTdEOTUyQTMxQzFFMUEyQzdGOTI4MTA4QzlGRENGOTdBN0NDMEUzQ0VDMkVE
QjAxOTQ3OTRGRTY5QzFCMDExQ0I4QUY1OTlGNEUyMzBBOTk4OTk0MjNEOTc0MDM5
RjZGRTlEQkYxMEI4NkQzOUY0RjBDMEFCMDdGRjg4NEUyQUVBOTM4QTRDMTJGQ0RE
NTE1NENCRDFEODcxMjRFMkUyRjhDNDY3QzJBMTE0NDkwOUQ5QUEzQ0Q5MDVGQUM4
OEEwM0RCNjk5MkFGNzAzNTIyNEIyNUVGODYxN0Y2ODlDOTRBMDBGNzVEMkY1MTU0
NEU3Q0QyNDk3RDkyMzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw+WyU6bWEBnb1b1YlpgssOYlxyaWkrqe+jPrLsqMmf/+fKLIFe50
zhBbM0dr+LSoOESJRefzB+ukA1gotiA3U99nVU6b8v8p7mWhRx7V/67tNfeKyMum
6ErLTbwhGA3IFd0HbpHvZ3SpcaYHITdJPj6qGhABbaLZdsXN9k2jYjfaoQ59lSox
weGix/koEIyf3Pl6fMDjzsLtsBlHlP5pwbARy4r1mfTiMKmYmUI9l0A59v6dvxC4
bTn08MCrB/+ITirqk4pMEvzdUVTL0dhxJOLi+MRnwqEUSQnZqjzZBfrIigPbaZKv
cDUiSyXvhhf2iclKAPddL1FUTnzSSX2SMwIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FIIQshKqqHeBnybjuI6whJZO3FxcMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzgzOTJlMzUzMjJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL00MA0GCSqG
SIb3DQEBCwUAA4IBAQAleaao+oB6WMyNDQgR6w3AVHsQVW4NMvcO12OZvjMO0NMf
vSKXZKe/NYR713eyd6NREUtSj3Px1cC+HlESLKm3xMB1z4Wxz9V9PQVYwRIJE4St
AWuDwixUQbTnLHhMo+p7jxJ1RBQanEDpPlehJw+DWJrsVKM/VHc2kZzXaycY1U/y
KVFnk7yVg0pt7aNZT7ThT0yy493e9iUe2KjiVfh+q0l24F6v0AE4NnmpOOAzqnvH
BBuTkxCVu8aSvmMSzCHhPI6BLl4EwAfpVl5PTjacFJPq6IheNC9hcigbhjRogQpX
BuVND8rhCS3xuEp80d39v+Tv6VfCevovinX7HQwN
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:40 2026 by rpki-client