Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e35332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          LdIRDFwnfBtBYpBbFs9tOuFREe5KRdMYVaYM28fCOd8=
Subject key identifier:   03:0B:C0:17:04:81:81:B9:F1:F1:C0:04:97:AD:BB:CC:8D:4A:2A:2C
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1AEE30C94EE05EC2074814834857A6A46502BBC9
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     4230
IP address blocks:        189.53.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ee:30:c9:4e:e0:5e:c2:07:48:14:83:48:57:a6:a4:65:02:bb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:6e:38:d1:cb:bf:8b:db:88:c6:5d:34:1f:
                    ad:c9:03:a2:21:ff:c9:53:5d:4d:df:38:e4:a3:4f:
                    69:19:e3:ef:47:c9:6e:48:ce:4a:3a:25:3a:7a:5f:
                    a7:52:23:f9:50:39:d1:b2:80:47:25:25:92:20:80:
                    a0:20:fb:81:49:cf:43:27:a8:b1:10:08:46:67:3c:
                    78:96:06:7f:7c:20:fb:60:ec:2e:a8:fe:a9:de:5c:
                    1b:b1:0d:d7:7e:1d:40:ef:15:ec:2e:5e:0d:d3:28:
                    d2:0e:1f:56:8a:22:d7:25:9b:88:f5:9b:79:ea:73:
                    2f:4a:61:34:51:fe:da:bf:07:73:35:c1:93:a6:9b:
                    38:ac:99:b6:9f:52:22:7c:0a:11:30:d9:b1:41:e8:
                    57:18:a5:57:62:dc:ba:69:b9:87:7f:01:bd:c4:3b:
                    22:72:bc:03:e2:29:5d:97:9f:a7:6e:c1:0e:c7:db:
                    75:b8:4a:2d:fa:81:5d:93:c4:c5:a8:03:06:db:97:
                    b9:17:3a:4d:c7:57:88:0d:da:f1:5a:18:5c:02:14:
                    ce:57:bb:2f:fa:40:90:17:80:68:c4:82:b4:f2:4b:
                    e0:3a:e3:bd:98:09:c0:a8:ce:b9:4a:89:d2:6f:ad:
                    fb:75:c7:04:6c:ea:e5:1a:7b:12:9b:5e:27:30:16:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:C0:17:04:81:81:B9:F1:F1:C0:04:97:AD:BB:CC:8D:4A:2A:2C
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:56:b3:ca:7d:ef:36:98:f7:d5:e3:3c:92:61:b7:98:bc:78:
         1a:81:3a:67:9a:e0:ed:28:a6:dc:81:0c:95:86:50:6e:d5:24:
         fb:bc:27:46:da:64:d4:68:8c:6b:6c:d7:b8:a7:9d:34:b9:1d:
         18:13:18:a4:4f:79:dd:15:a2:55:65:5c:a9:ea:15:e6:01:d3:
         ea:b5:23:5b:11:9d:31:99:cf:1c:6a:8f:70:6a:b9:2e:33:9c:
         42:e6:1a:c1:c6:f9:ea:13:cb:3b:4f:9b:43:25:26:57:ad:dd:
         f0:be:46:fb:1d:28:bf:be:fe:28:2f:9e:97:30:ba:27:83:1e:
         81:37:c0:9e:49:b0:bf:c7:62:21:ce:5b:c9:1b:6e:60:49:b2:
         bf:ca:f6:9a:cb:14:33:a0:2b:6e:a1:d8:c1:5e:ff:9b:29:86:
         e2:12:9b:06:64:aa:0a:63:57:f3:18:8f:df:95:bb:67:8b:1c:
         58:85:e9:8f:c1:97:e9:b3:05:c7:ab:d2:63:9b:d1:5b:f0:cf:
         01:6c:31:af:26:d8:e5:eb:e7:8c:90:cb:2c:da:21:ab:78:1d:
         38:b3:7e:09:c4:af:e9:77:e4:b6:3f:c5:e4:b8:a4:d9:a0:9d:
         d7:3e:93:e4:16:5f:55:f2:88:bc:2c:06:32:a6:35:82:7b:6f:
         ef:72:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:31 2026 by rpki-client