Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          eyQiQw2x/6+bpON2mDXE3KgFlGg6hFdMzOd62eXNQVE=
Subject key identifier:   4C:7A:8E:89:92:7D:48:25:14:AE:41:98:E9:00:27:99:35:86:0C:58
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       26B22367429DCB1EEDE56F3B4537FC55AD7AD8A6
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     4230
IP address blocks:        200.172.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b2:23:67:42:9d:cb:1e:ed:e5:6f:3b:45:37:fc:55:ad:7a:d8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=3082010A0282010100D424AA098F5D0D7E97456860B3A1315875995551A56AAAD01BD2F923C15DEFC623C23890F5D3AC2B44A92CF923DE013E1E0FCA2E901E85B9920C366ED03082F4386CA61318F9E3697953636211C24E967F91C6EC437CE0565579EFDF9BA52A6096D402FFB9EFFB653B738F3D9950BEFF8C58AE07AB0BF4B5E2B44574A739F6009F451EC338F3823026FD4353B58ED51DF3701F4F14C79E1F5AAF228408B72FA78D208310FAA851B106A81FF60FDC45F2744EA5D0C57C7772D7548A7EB0A2B77CF5C686901DAD891B6A293E9648E66712AE463451980DAED6553543BCBFE2F1F5A29BD8CA5074B6EFF16A1C0E0670CD60BECF3C4BD364979F083EAC82F33CD6AD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:aa:09:8f:5d:0d:7e:97:45:68:60:b3:a1:
                    31:58:75:99:55:51:a5:6a:aa:d0:1b:d2:f9:23:c1:
                    5d:ef:c6:23:c2:38:90:f5:d3:ac:2b:44:a9:2c:f9:
                    23:de:01:3e:1e:0f:ca:2e:90:1e:85:b9:92:0c:36:
                    6e:d0:30:82:f4:38:6c:a6:13:18:f9:e3:69:79:53:
                    63:62:11:c2:4e:96:7f:91:c6:ec:43:7c:e0:56:55:
                    79:ef:df:9b:a5:2a:60:96:d4:02:ff:b9:ef:fb:65:
                    3b:73:8f:3d:99:50:be:ff:8c:58:ae:07:ab:0b:f4:
                    b5:e2:b4:45:74:a7:39:f6:00:9f:45:1e:c3:38:f3:
                    82:30:26:fd:43:53:b5:8e:d5:1d:f3:70:1f:4f:14:
                    c7:9e:1f:5a:af:22:84:08:b7:2f:a7:8d:20:83:10:
                    fa:a8:51:b1:06:a8:1f:f6:0f:dc:45:f2:74:4e:a5:
                    d0:c5:7c:77:72:d7:54:8a:7e:b0:a2:b7:7c:f5:c6:
                    86:90:1d:ad:89:1b:6a:29:3e:96:48:e6:67:12:ae:
                    46:34:51:98:0d:ae:d6:55:35:43:bc:bf:e2:f1:f5:
                    a2:9b:d8:ca:50:74:b6:ef:f1:6a:1c:0e:06:70:cd:
                    60:be:cf:3c:4b:d3:64:97:9f:08:3e:ac:82:f3:3c:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:8E:89:92:7D:48:25:14:AE:41:98:E9:00:27:99:35:86:0C:58
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:77:45:7c:ac:7f:f9:8c:17:7a:24:6e:f5:c4:53:58:95:
         bd:fd:44:6d:47:cf:8a:04:76:ca:04:1f:55:3e:c9:99:8c:b1:
         79:13:ba:a7:5f:4d:de:55:f7:d6:05:5d:30:22:f4:13:80:76:
         41:07:2a:c6:14:34:66:d6:16:7e:a2:d0:d2:28:11:b9:e3:e1:
         1e:6c:28:37:4e:c7:7e:ce:a7:e0:36:94:46:b0:50:2b:bd:a8:
         f4:9e:41:c1:cc:3c:44:c4:6e:2e:b9:43:b0:12:01:d8:56:eb:
         0b:78:d3:e1:0d:c9:f4:ff:a6:30:24:c6:60:52:e7:7c:aa:9f:
         ab:e5:18:94:53:99:01:d0:a1:b7:3e:87:79:60:7b:f3:17:32:
         90:ca:c9:8c:94:46:4d:2d:e3:57:4a:ae:c9:5a:1b:90:e2:a2:
         d0:75:23:2f:95:7f:73:58:f3:92:35:98:ab:c0:09:8e:40:fe:
         1c:b5:be:bb:a7:ef:88:26:26:eb:bf:d0:b4:d8:49:b3:dc:70:
         79:c1:2b:7b:af:ce:0e:10:92:9f:56:d7:fd:49:f8:47:9b:7a:
         0d:88:b1:1c:1a:f4:9a:c2:fc:ad:a2:cc:24:1f:fa:ba:0e:5f:
         63:fe:43:58:af:8b:01:a1:8e:1d:a6:7e:0e:01:2b:ef:a7:1f:
         68:34:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:21 2026 by rpki-client