Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          P+7wlmEBc6+UMl6RL7YIpbit+EbprUe1YbVmxA6N3Zs=
Subject key identifier:   E6:E0:A2:6B:C9:E9:F5:9B:54:9E:48:09:EB:C6:0B:A9:B9:5F:3A:C3
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6ECEFADFC1AD912DA656F070DEF9DC85ADACEC9E
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     4230
IP address blocks:        189.88.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ce:fa:df:c1:ad:91:2d:a6:56:f0:70:de:f9:dc:85:ad:ac:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:70:fe:69:6e:fa:d1:bd:da:83:4e:c1:91:
                    62:79:07:09:cd:14:e9:5a:80:11:79:2e:bb:47:b5:
                    09:16:d6:e0:f3:57:d1:6a:2e:4a:3d:7d:fc:cc:43:
                    88:49:27:31:88:c8:4b:80:00:ec:4f:11:63:8b:93:
                    94:d5:ad:c2:c0:84:55:8d:38:5e:61:80:b0:ce:98:
                    61:dc:9a:39:9a:bf:a2:3d:db:53:3c:68:b0:c7:51:
                    f5:4c:e9:fc:61:4c:ce:f0:43:f7:39:58:52:7f:fa:
                    9c:58:d7:05:40:87:8e:ab:6a:2d:ac:72:06:31:fd:
                    4a:ec:67:87:a4:b4:11:7e:22:be:8d:15:e9:cc:20:
                    4e:ac:62:7f:41:cb:0f:37:01:5a:1b:29:59:8a:9c:
                    9a:65:03:0f:3c:74:d8:ca:1f:ae:be:6d:8a:8f:76:
                    10:42:db:8f:06:29:23:c6:82:d1:fe:8e:c7:27:26:
                    47:50:f3:89:dc:4c:03:f4:fa:2b:48:07:86:da:33:
                    de:33:c3:c8:0a:86:c9:aa:37:9e:74:70:a0:20:6b:
                    1e:f1:87:1d:ff:e6:bc:01:d9:79:7f:6e:39:09:83:
                    61:cc:65:35:a4:68:ba:76:67:c5:e4:b4:b4:64:6c:
                    1d:18:eb:63:82:8a:7e:3a:1a:48:a0:d5:39:2f:dd:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E0:A2:6B:C9:E9:F5:9B:54:9E:48:09:EB:C6:0B:A9:B9:5F:3A:C3
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:60:dd:ca:c6:b7:cb:ba:af:cc:39:ef:23:8d:b8:0b:4d:
         d3:ea:63:80:f9:9d:30:86:52:87:df:52:5d:f6:e4:bf:00:10:
         5e:d7:08:9a:fd:31:6b:0f:1a:bd:0a:0c:94:27:b6:27:b4:78:
         d9:39:e7:18:99:ce:80:d0:e7:9b:55:10:46:e1:7b:48:ed:38:
         2e:a9:3e:8f:74:9e:8e:5d:23:ad:aa:bc:db:07:da:0e:a0:30:
         00:86:36:f2:f5:09:06:66:68:d4:d8:1d:8f:51:82:70:52:73:
         11:97:36:98:4c:d2:f3:d5:3b:b0:66:cd:62:8e:50:88:64:75:
         db:49:74:80:41:43:28:34:df:cb:b8:0b:a6:1f:17:37:e7:dc:
         a0:fb:db:c0:dc:94:ac:a9:41:20:65:00:72:44:ba:09:47:ba:
         d8:6d:66:7f:cc:cc:d7:29:dd:6c:7d:3f:50:bd:5c:75:9f:c3:
         f1:91:01:c5:da:86:63:8f:e2:d2:82:ad:ee:d2:1f:45:18:ef:
         00:73:af:ac:e9:43:f6:02:5f:e1:0c:23:73:5d:a7:6b:6d:ca:
         7e:a8:f6:fe:9f:ab:87:60:e4:8a:1a:c2:af:0e:3d:b8:d0:bb:
         f8:26:16:c9:01:78:fb:86:d1:10:10:23:57:7d:22:a5:8e:2f:
         b6:47:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:48 2026 by rpki-client