Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3136362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          nluYlK2jKJ387PC9BLwOv3IX3HGCnS+rJ9qcQocYnKE=
Subject key identifier:   C5:5D:F3:9F:35:DE:FA:AD:7F:44:D9:10:C0:99:70:CE:36:48:3E:9E
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       37FEC5C9799CC8AC36E76BA16AD5D4318C5D2561
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     4230
IP address blocks:        200.166.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fe:c5:c9:79:9c:c8:ac:36:e7:6b:a1:6a:d5:d4:31:8c:5d:25:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:db:f4:62:7f:81:67:b5:6e:8a:93:62:fd:
                    ec:51:72:61:09:f8:1c:0e:d5:dd:1e:d9:37:f7:ba:
                    82:5f:fc:cb:3d:c2:ad:d7:99:6c:bb:2e:04:14:2f:
                    ac:2c:95:e0:d0:f6:dc:e8:f0:a7:76:ad:fe:ef:85:
                    29:78:a7:a7:0b:d2:78:d2:ed:d9:b4:2a:e1:0f:d9:
                    f2:7b:9c:48:27:be:4a:b4:dc:2f:6b:82:b7:30:53:
                    95:71:9a:01:64:01:23:7e:7c:16:77:c6:97:5f:9e:
                    3c:4e:6a:9e:80:21:38:a2:97:36:e0:0b:62:97:71:
                    c6:da:4e:6a:2b:d0:ef:c6:5b:22:7f:1d:20:5f:d7:
                    c3:0c:63:f8:1e:e0:f8:48:7f:5f:9a:e3:1c:9b:6f:
                    05:37:e2:78:86:3d:da:1c:54:7d:cc:35:01:93:b2:
                    1e:b7:85:2b:fb:04:1b:f5:b8:7b:6c:bc:39:35:f2:
                    1c:ab:7c:15:33:a4:38:d2:f8:d1:57:45:fa:ec:ee:
                    14:58:ae:11:2c:33:85:13:73:cc:5d:98:2c:20:38:
                    a7:1c:39:94:58:84:87:43:57:b5:69:23:53:2b:12:
                    fa:de:8d:8e:a9:66:d5:01:03:54:90:47:9d:d3:e0:
                    a9:5a:4e:71:0d:7a:6b:99:4e:0c:cc:3c:a0:34:03:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:F3:9F:35:DE:FA:AD:7F:44:D9:10:C0:99:70:CE:36:48:3E:9E
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:d5:d8:3e:01:eb:c3:f0:87:97:3a:be:d3:78:2f:24:0b:
         c0:44:a2:7d:9a:ed:88:75:c5:06:c8:e2:69:b1:2c:2b:b0:7e:
         07:53:8e:4e:2a:ff:69:74:17:af:28:7f:e2:12:38:de:d8:9c:
         2a:b9:a0:d6:a3:93:25:7e:1c:b5:d5:f5:98:e4:da:55:5d:73:
         7a:af:8b:dd:83:14:1b:c2:ec:41:ee:83:ba:02:93:ee:3c:db:
         f8:42:b5:44:bb:f1:3f:93:e7:36:de:ad:6b:a1:96:42:da:f6:
         8c:e6:f8:da:e6:c6:bb:df:f9:d2:74:0b:7d:d8:d5:41:79:04:
         57:92:ef:7b:40:3b:ea:4b:56:23:fb:e6:34:90:33:7a:df:b5:
         19:89:44:cf:ce:5b:94:14:ac:cb:93:a3:3f:16:59:2a:de:3d:
         3a:28:ec:f7:af:6a:a0:8e:72:a9:c6:a4:68:fb:1a:06:c1:60:
         01:2d:c8:ff:77:a3:56:66:57:cd:f4:5f:7f:47:d0:e7:98:ef:
         30:9b:ee:b2:54:cc:b1:5c:3d:f8:97:43:14:e0:f9:4a:2d:da:
         68:1b:09:c9:db:3b:b7:9f:26:f6:18:9e:5d:d3:47:b7:ad:e2:
         60:ce:47:24:2d:40:c7:7f:d6:dc:b1:e8:23:b6:37:2a:e3:b9:
         b9:56:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:21 2026 by rpki-client