Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa
File:                     3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa (raw, json)
Hash identifier:          BGwbrGju+TjucTQPZRzsd4OWIcchyqY7FPcs4SEadXU=
Subject key identifier:   1E:08:44:16:82:B7:C3:BB:3C:1E:9D:40:E8:82:E5:F5:4B:FF:74:B2
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2A9EC822553CFA3FBB350C5909CE9DC17CB8D93E
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     4230
IP address blocks:        200.139.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9e:c8:22:55:3c:fa:3f:bb:35:0c:59:09:ce:9d:c1:7c:b8:d9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:97:be:2b:cc:3f:93:28:0b:fe:b9:97:3e:
                    e3:1f:c2:95:e2:c6:b2:e3:cd:b9:d3:75:2b:97:cb:
                    43:db:65:99:fb:98:26:e5:fa:8f:10:62:ce:68:23:
                    c3:28:fd:9f:2b:a2:9d:30:51:e1:ce:1e:15:a5:54:
                    05:c0:10:1d:09:4e:62:47:5c:53:51:ec:d6:0a:68:
                    2d:77:6f:e8:30:57:db:3a:bc:22:14:05:0d:76:a0:
                    1f:ec:ca:70:fd:8b:3e:fe:29:2f:77:71:a0:4f:a6:
                    77:6a:53:d4:64:10:e7:03:d1:6a:c3:d0:30:78:ca:
                    61:30:8c:ec:bc:00:33:da:12:eb:15:4b:78:dd:83:
                    83:2e:bc:29:b8:27:7e:61:55:20:db:42:c1:7f:5c:
                    a4:49:cd:e9:0d:d6:b1:f2:92:01:5d:6f:be:23:e9:
                    53:76:f2:53:27:12:5f:9e:2b:5a:14:5c:2b:7c:33:
                    ea:c2:98:07:b2:10:2e:3c:03:0a:d4:46:d0:f0:da:
                    8f:d8:b7:3e:c2:9a:22:90:f6:21:72:e8:a1:d4:a0:
                    58:1a:f3:82:a0:d7:30:07:9c:bb:c1:40:94:f3:8d:
                    7b:61:7f:ae:4d:51:b3:26:9f:8f:46:90:53:66:04:
                    07:4d:de:8e:ee:39:bf:ff:ef:2e:5b:e2:45:8b:a8:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:08:44:16:82:B7:C3:BB:3C:1E:9D:40:E8:82:E5:F5:4B:FF:74:B2
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.139.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:4a:db:74:09:f4:af:91:0d:55:40:e3:05:05:67:3f:6a:
         94:61:09:75:df:b1:df:2a:06:a8:e0:a2:17:59:a8:c7:d0:c9:
         7f:d3:62:68:fd:a4:15:e9:93:9e:70:22:0d:2a:c2:1c:c0:c2:
         ae:f6:2b:18:03:09:e5:48:df:80:fa:80:73:da:39:d3:50:e7:
         18:24:86:7c:6d:19:83:40:76:7c:46:5d:c3:88:42:0f:c6:39:
         53:79:1f:ea:94:59:88:42:8b:a0:89:fd:9b:5e:97:c2:98:1a:
         07:92:e3:4a:70:8f:8b:48:13:e8:48:25:ad:dd:21:d9:1f:a6:
         71:36:d6:03:1e:ec:af:1d:68:f0:95:0a:b1:fd:1c:14:75:46:
         d8:71:34:86:42:a3:55:26:ca:5e:52:e6:d6:ce:b6:74:24:c7:
         27:48:fe:40:a8:12:92:a9:b9:a0:83:99:f9:ce:6e:12:d4:fa:
         99:1d:93:34:4e:c0:df:b7:71:72:de:8f:47:52:34:89:b1:3e:
         97:10:8a:a3:83:fe:dc:b0:4d:1c:61:fd:61:64:11:66:b4:9d:
         c9:b3:31:1b:15:38:d0:c7:42:ef:0e:c8:89:51:f7:d8:a7:0b:
         08:e7:8c:2f:ba:d0:7e:7a:96:f5:d8:8a:2a:d3:07:a3:a1:72:
         cf:7d:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:41 2026 by rpki-client