Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3136372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          0lKjD2lff0O4x+qyHsKzI6oQvhk+bQ6Mbmh+Q2dlHLg=
Subject key identifier:   B1:A4:B4:9B:25:B5:3D:00:69:90:79:95:91:4C:E2:8E:75:20:59:06
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       0E10B83D2C0AED5F958F4FF722FF17E0D274BD8A
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     4230
IP address blocks:        200.167.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:10:b8:3d:2c:0a:ed:5f:95:8f:4f:f7:22:ff:17:e0:d2:74:bd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=3082010A0282010100C0EA2B7D901A6967CF1E428BC750D420BD166B0EED1788037712390E161195B278E6A1521C8E39C3E6F0331E3596E99D1BCB4EDCF51FAF0D448F935B46562039C6C9375625C2B79F7033113830750B8D2BD3214F29C91A1B3F9A3D0B01A0E34C7C619F67BB8A190B92AEF629260599F0E694A68B95BB02120F16A5F265C1CBEABF866154D89EFF68831762307EB8ED8F7E6B2A4E5A3BF241F3AD43817AAF3DC5FBB14B639452F64A751F5DAAF1ABC3B905014B7165FD23F7AC9D63BE6D8A567C79CEC8792C4726319211565650836C178B21F8C9271DF71542404FFE444BF14896322F43F8B278F27D5F32AFE37193283127AE9FF8113059393DB3BA7DD629F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:2b:7d:90:1a:69:67:cf:1e:42:8b:c7:50:
                    d4:20:bd:16:6b:0e:ed:17:88:03:77:12:39:0e:16:
                    11:95:b2:78:e6:a1:52:1c:8e:39:c3:e6:f0:33:1e:
                    35:96:e9:9d:1b:cb:4e:dc:f5:1f:af:0d:44:8f:93:
                    5b:46:56:20:39:c6:c9:37:56:25:c2:b7:9f:70:33:
                    11:38:30:75:0b:8d:2b:d3:21:4f:29:c9:1a:1b:3f:
                    9a:3d:0b:01:a0:e3:4c:7c:61:9f:67:bb:8a:19:0b:
                    92:ae:f6:29:26:05:99:f0:e6:94:a6:8b:95:bb:02:
                    12:0f:16:a5:f2:65:c1:cb:ea:bf:86:61:54:d8:9e:
                    ff:68:83:17:62:30:7e:b8:ed:8f:7e:6b:2a:4e:5a:
                    3b:f2:41:f3:ad:43:81:7a:af:3d:c5:fb:b1:4b:63:
                    94:52:f6:4a:75:1f:5d:aa:f1:ab:c3:b9:05:01:4b:
                    71:65:fd:23:f7:ac:9d:63:be:6d:8a:56:7c:79:ce:
                    c8:79:2c:47:26:31:92:11:56:56:50:83:6c:17:8b:
                    21:f8:c9:27:1d:f7:15:42:40:4f:fe:44:4b:f1:48:
                    96:32:2f:43:f8:b2:78:f2:7d:5f:32:af:e3:71:93:
                    28:31:27:ae:9f:f8:11:30:59:39:3d:b3:ba:7d:d6:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A4:B4:9B:25:B5:3D:00:69:90:79:95:91:4C:E2:8E:75:20:59:06
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:93:c3:00:80:3c:cf:36:ae:9b:bb:e3:3b:e2:6a:80:0e:
         a3:2d:01:5c:e3:7f:c2:4f:81:59:c2:af:42:f8:22:83:22:ed:
         a4:d9:30:56:f1:a7:28:f5:29:6c:03:3f:75:95:60:b8:71:ec:
         40:94:94:7f:0a:20:1f:fe:08:69:86:02:a0:4e:c7:b9:7b:09:
         05:43:59:8c:9d:df:93:11:92:e4:dc:9b:28:22:0c:59:ac:09:
         dc:a0:01:c7:ad:c2:67:58:93:62:2f:11:08:5b:df:bf:20:9f:
         26:e1:0c:0e:a4:03:7b:2b:37:ed:35:97:40:88:5a:3c:a0:86:
         b0:91:8d:09:a7:81:1e:f0:6a:03:e3:90:55:54:e9:00:8b:c0:
         40:a2:b8:42:91:be:00:0c:51:ec:78:c8:5e:40:71:b0:9a:06:
         85:e4:6d:2a:60:cf:b1:ac:f7:c0:b1:dc:2e:9a:7b:31:b5:51:
         80:a2:95:7c:25:99:37:6d:7d:23:85:3e:9b:e6:9f:18:93:b6:
         12:5c:f8:f0:3b:85:0e:df:20:39:98:72:3c:25:59:ad:54:25:
         b7:fc:71:57:84:f8:ef:09:c2:94:d4:38:9f:1c:0d:05:88:95:
         f8:9c:47:70:26:07:1b:18:3e:88:49:a7:9a:e1:80:fb:aa:9f:
         7c:da:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:50 2026 by rpki-client