Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38362e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          OPa8zd5IPpfnSmQgqPrJb8sC693T+WisR7LCfkxonfw=
Subject key identifier:   2B:2F:4E:95:15:2F:E1:36:A7:C9:25:A3:82:C7:66:E5:E6:0E:17:4B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2E001C01092751428DFFF44B4AEEC26BCEEC3E95
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     4230
IP address blocks:        189.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:00:1c:01:09:27:51:42:8d:ff:f4:4b:4a:ee:c2:6b:ce:ec:3e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:25:37:0f:c2:11:40:1a:35:49:21:14:66:49:
                    86:7a:85:89:f0:08:7f:9e:c1:c7:76:be:b9:82:3e:
                    87:40:55:7d:57:b3:eb:6d:74:6b:4f:11:09:43:e8:
                    3c:3a:b9:57:9b:bc:01:7d:54:b3:f8:07:2c:64:ed:
                    f1:ea:39:e9:e7:41:74:09:b5:f8:87:c7:d5:6f:6e:
                    7e:8d:18:a1:76:f0:c6:1d:72:2b:5f:cc:e9:e3:6e:
                    35:93:21:d9:79:6f:0e:6c:07:19:e9:6c:6f:e6:81:
                    fc:e7:12:91:d7:e0:a1:c1:0f:ff:6e:cc:d0:ac:b6:
                    c0:22:05:e1:fa:53:ab:65:e4:5b:76:75:db:09:a2:
                    9a:c1:4d:0a:01:bc:d2:a7:e6:b0:93:6c:96:82:bf:
                    75:b1:34:6b:ed:b7:04:7c:e9:19:c3:43:1b:a4:74:
                    7c:20:58:b3:fe:2b:4d:e1:9d:f4:84:82:4d:a7:3b:
                    37:b2:ea:50:8b:07:07:b8:7d:f3:4e:08:4e:66:2c:
                    02:41:2c:9c:5a:53:ae:a8:98:b7:4b:f3:57:a3:aa:
                    46:ef:ec:ab:f1:97:c3:68:06:56:f5:5c:47:72:a7:
                    96:bd:8d:90:f1:90:bf:aa:71:7e:7a:49:53:d8:11:
                    42:b7:55:d6:24:bf:c7:3e:d5:27:13:40:c2:37:ce:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2F:4E:95:15:2F:E1:36:A7:C9:25:A3:82:C7:66:E5:E6:0E:17:4B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:72:00:e7:39:6c:71:d7:86:15:a3:99:d9:e7:60:85:25:
         3e:b8:ed:6f:c0:b5:b3:cc:54:cc:b2:ac:01:5f:0a:d9:39:e0:
         db:15:67:c2:59:d6:75:43:c9:06:e5:69:b0:7e:99:f0:d4:d9:
         e9:3f:42:5b:21:37:e0:1f:a3:14:98:1e:7a:bc:be:3c:36:81:
         60:b6:d7:78:3e:8d:73:0d:5d:83:b3:7c:38:fd:ae:d3:4b:a0:
         86:d2:b8:82:a7:b9:b2:17:e5:9b:17:0e:64:ad:b9:38:aa:a6:
         b1:36:5f:5a:e2:4e:9a:df:18:f8:7f:25:8e:2f:3a:f9:25:13:
         4b:72:cf:a5:65:1a:34:79:66:09:b8:d2:67:a6:65:ee:99:0a:
         45:37:e0:73:f1:6b:42:81:5e:30:9e:3f:72:b6:17:b5:a2:58:
         09:83:3c:61:ca:6b:2f:61:0e:66:69:f0:0e:4a:d3:e7:8c:cf:
         1b:61:0f:db:0b:aa:19:4e:b4:65:ff:02:aa:66:de:e5:e5:54:
         73:55:40:b5:75:0a:dd:58:15:e9:6c:16:f8:81:c4:af:37:d2:
         a8:6b:e5:0a:21:48:cd:f6:23:8e:89:53:45:82:80:21:3c:07:
         8f:6b:08:ee:07:9a:72:98:48:f7:ff:eb:8b:15:a5:65:35:52:
         56:f2:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:37 2026 by rpki-client