Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3138322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          qN2N9RltU9dgy4+wX+xOwUWOruz7Ms43caWf2VR1BHo=
Subject key identifier:   3C:B2:6B:57:85:A4:37:13:3C:ED:55:E9:0F:D5:4E:6E:80:9F:6E:B1
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1030149E193DEAAA88B8033EC3CFF9DD652852A0
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     4230
IP address blocks:        200.182.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:30:14:9e:19:3d:ea:aa:88:b8:03:3e:c3:cf:f9:dd:65:28:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:50:9c:2d:9a:ee:d0:43:f6:e0:91:70:7d:
                    46:a8:57:bf:59:21:82:fa:46:5f:16:51:31:73:d8:
                    cc:32:c0:ab:f5:24:1b:38:4b:ab:1a:9b:93:70:10:
                    3a:1d:f8:9c:55:01:9c:50:d6:2a:bf:ec:85:6d:a3:
                    c2:a6:09:47:2b:5a:9d:7c:71:46:71:34:97:0e:a4:
                    2b:1e:42:70:1d:3a:59:79:8e:e1:35:57:11:52:c6:
                    83:19:2c:1c:44:e8:9c:1c:96:bc:a0:94:25:e5:65:
                    ad:a1:9d:7d:6f:fc:96:fe:63:44:64:d3:90:20:67:
                    09:cd:2a:46:3f:33:52:2e:dc:a2:c3:ae:9c:bc:60:
                    a4:49:a3:48:a3:51:4f:77:14:bd:70:ad:19:bc:ec:
                    00:4e:df:e4:98:a4:2b:8b:c2:ae:06:2a:c4:49:b9:
                    53:0c:97:d1:97:6d:53:80:08:cf:b9:9b:d9:5d:a0:
                    75:f5:f3:82:21:f4:2b:74:f4:03:d9:89:05:a2:a6:
                    a5:ee:93:99:c2:06:1f:56:5d:5c:28:9b:40:42:38:
                    a1:95:38:09:83:22:33:e6:9d:63:d3:50:d2:a2:c8:
                    93:10:50:3f:50:23:5c:20:e0:9c:67:d7:c4:70:f0:
                    8c:80:f3:89:f6:6e:26:48:64:15:78:02:2a:a8:88:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B2:6B:57:85:A4:37:13:3C:ED:55:E9:0F:D5:4E:6E:80:9F:6E:B1
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:65:bf:10:7f:22:3c:53:33:fa:d2:96:47:26:19:88:9e:3e:
         6a:78:cd:eb:cf:73:aa:50:88:d0:6b:46:ba:75:57:6e:40:d9:
         d1:9a:db:e8:2d:bb:d3:6d:a7:e6:5d:96:58:7b:3f:cf:9a:8c:
         46:79:5d:41:0b:96:13:ed:d4:35:3f:26:03:90:47:9b:e1:29:
         44:5c:8a:f4:d1:97:dc:d1:0e:ba:27:b4:9f:98:59:e1:8c:33:
         17:d2:66:fc:3e:cd:91:97:a8:91:a2:3f:8d:e1:d6:f0:93:5c:
         75:16:61:5d:67:f5:c1:a6:d9:35:8f:d5:6d:58:6e:26:fa:4d:
         97:d5:df:b3:41:94:bf:af:8c:f1:18:b3:57:76:e5:41:59:b5:
         17:c5:f0:24:6d:b2:8b:0d:03:01:e0:51:56:5c:3d:16:d4:c6:
         ba:cc:59:05:a0:b0:84:e9:5e:76:8f:e7:87:a1:0f:eb:b6:40:
         32:eb:3b:76:3a:c9:00:44:a1:b7:3c:bd:98:6c:06:ff:93:56:
         37:ad:aa:e7:ac:1b:c3:d3:74:5a:bf:49:bb:73:ff:06:f1:e9:
         2e:9c:1e:3b:1d:84:ab:45:bc:e6:6c:e2:23:ca:a3:ec:89:72:
         bf:06:25:a4:46:4e:5f:e3:98:11:2b:02:97:3c:a8:2f:19:c7:
         e7:f3:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:35 2026 by rpki-client