Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          3vJs0W14qa0oHcw4k0yvBXEcAitdOVYVrYzP7CpbERQ=
Subject key identifier:   6D:71:94:D7:DB:69:12:91:13:16:1D:96:AE:0E:06:06:8C:AF:FE:C7
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5B27E35B88E677E56323A8A7E167B02D1CF6530A
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     4230
IP address blocks:        200.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:27:e3:5b:88:e6:77:e5:63:23:a8:a7:e1:67:b0:2d:1c:f6:53:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:47:8b:78:4c:f8:e9:08:61:d4:c0:48:3f:
                    ca:60:1b:1b:d2:b0:f1:01:2a:c2:f3:cd:24:82:13:
                    10:25:a7:3a:22:32:50:f3:11:91:7c:fb:75:dc:c7:
                    91:98:7d:a9:ef:38:29:45:29:89:02:5e:92:3d:85:
                    46:b5:a8:82:8b:73:24:72:a4:64:ac:5e:93:de:f7:
                    59:40:8a:1f:88:93:42:16:ef:46:ce:c2:68:38:02:
                    29:94:9f:48:7f:4f:e1:d4:f9:76:a8:c6:e0:02:58:
                    28:d8:5c:c0:09:f1:13:d2:fa:44:98:59:24:d0:7c:
                    3d:bc:40:25:35:8d:76:92:8d:5e:1f:b2:8e:fa:3a:
                    7c:b0:a4:7d:ff:a7:0b:1c:45:31:be:64:aa:ce:33:
                    d0:b0:0d:0c:e0:8e:fc:c2:39:f3:d9:bd:c9:f6:42:
                    f3:fd:38:4a:87:21:1a:2d:ab:36:9e:9a:df:50:24:
                    31:20:16:ee:8a:57:29:b3:92:46:d5:41:a4:bb:e7:
                    7f:6c:d0:17:44:20:07:2e:4e:6e:93:96:61:26:2d:
                    e9:72:9b:5c:69:04:4a:54:f3:53:3f:50:24:57:24:
                    d1:5e:d6:ac:7e:18:cc:79:24:60:d9:0a:32:43:d0:
                    2e:14:ca:10:6a:28:49:8a:ba:06:ba:ef:3a:b0:8f:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:94:D7:DB:69:12:91:13:16:1D:96:AE:0E:06:06:8C:AF:FE:C7
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:e8:c1:ab:0c:f3:ec:e3:47:18:18:98:63:2f:a2:c6:fa:b7:
         23:8a:69:69:9c:ec:55:fd:bf:39:a6:05:a6:ff:c0:77:af:7d:
         84:b1:f8:0a:0d:81:cd:7e:9e:a7:0a:62:01:8b:21:ba:40:24:
         d2:f8:4e:6d:79:79:68:98:90:0b:25:d8:f5:4d:35:57:f0:e2:
         0c:83:ef:9e:cc:cf:23:55:d1:aa:61:0d:67:28:80:0b:6b:bb:
         ca:69:ed:73:7c:cd:96:0d:10:f4:22:3e:2c:14:66:f9:15:10:
         78:d5:91:e3:3f:82:f9:b4:d5:b2:38:b9:99:08:a4:2f:41:5a:
         5c:8a:03:e5:87:2f:bb:57:73:6b:56:12:15:22:5a:7c:31:00:
         35:f0:eb:39:83:4d:c1:d1:e6:4f:4f:64:f0:a9:a3:c6:ae:b3:
         03:09:92:65:57:51:39:cb:38:87:89:4b:0a:88:b0:16:38:5a:
         1e:04:65:d5:fd:7c:51:cb:e7:13:09:a4:50:3d:b5:e1:7d:19:
         64:3c:bf:81:24:d1:21:56:8d:2b:7c:58:9e:66:95:03:5a:73:
         d1:12:81:25:37:81:6c:1a:cf:1b:8b:53:71:3c:be:8e:26:25:
         66:3d:74:54:6b:89:84:07:9d:24:c4:63:78:fc:d6:00:11:f1:
         4e:0c:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:47 2026 by rpki-client