Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3138332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ebUCzksNmkKChcvuGdV0kAHb6jYKkT06Fxpf9/5XyKE=
Subject key identifier:   4B:DD:48:53:A0:23:CB:48:40:63:B3:23:A5:5A:E7:92:17:AD:B8:19
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       45F04B5146EC24E27A3C5A0ED71FB20D61779CC8
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     4230
IP address blocks:        200.183.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f0:4b:51:46:ec:24:e2:7a:3c:5a:0e:d7:1f:b2:0d:61:77:9c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:06:61:6a:90:bd:c8:37:f8:27:f1:12:d2:
                    a1:9c:f0:40:96:7e:0c:4b:62:44:a9:3f:0a:ea:f5:
                    6c:7f:22:2e:4c:84:08:7a:60:46:d0:e3:51:d4:ec:
                    80:54:9c:db:c7:f6:1e:45:80:4b:c6:3d:e6:6c:3f:
                    32:32:2f:a2:dd:49:38:64:ae:04:ea:b4:af:2d:b8:
                    5e:eb:f9:26:f5:0a:9e:48:79:b9:46:df:07:96:3b:
                    f4:64:04:f6:b3:a4:e6:1d:3d:44:91:11:4f:83:1d:
                    be:ed:9d:4f:24:eb:4a:6d:03:ef:73:9e:03:71:0d:
                    d1:dc:b2:9a:e5:f4:0e:1c:25:2c:fa:ae:d0:19:56:
                    43:ca:f5:a6:73:0d:c7:49:62:b7:c9:ec:c6:4b:f6:
                    76:00:5b:de:ce:34:85:fa:9c:51:9f:80:f1:e4:5e:
                    49:32:a0:b1:42:d4:14:fb:ab:4f:91:4c:72:27:11:
                    5d:66:5a:56:12:b6:ed:78:d9:a5:09:60:41:33:71:
                    2b:a5:74:a7:d7:49:a4:7d:e0:76:de:ea:1f:81:00:
                    db:f7:5c:45:26:4d:26:f2:2f:99:6d:ee:e8:57:7a:
                    81:ec:c1:33:1a:1b:51:9a:d8:9e:48:dd:f5:89:4c:
                    82:74:3d:7a:81:cd:99:27:94:94:ce:6d:71:8e:55:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DD:48:53:A0:23:CB:48:40:63:B3:23:A5:5A:E7:92:17:AD:B8:19
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:ce:87:ca:9e:d1:b6:36:04:e4:00:cb:98:37:9a:40:68:
         ed:31:0c:8e:c9:4f:6f:a0:33:2b:de:19:0b:70:7c:a0:07:4e:
         a1:7e:d4:3c:a2:61:b8:7d:9e:12:4c:b7:80:8e:19:a8:ce:c1:
         40:68:df:c0:47:c0:90:a7:80:7d:66:ec:ca:9f:35:5d:e0:1b:
         22:23:ed:9c:bb:08:26:9e:75:da:f4:8f:2a:f5:ca:96:1d:b1:
         10:3f:bd:63:4b:a1:d3:6e:d9:be:aa:77:43:13:ee:b4:9d:5a:
         e0:6d:15:f0:4f:c5:34:f3:0e:a7:86:0f:01:b9:30:b7:19:9d:
         a4:6b:ee:8b:31:05:33:94:92:f8:84:5f:e6:cd:b3:61:90:00:
         cf:f3:ff:fb:f9:a3:e9:7b:c7:04:a0:c1:b4:97:bd:95:24:73:
         3c:c8:64:7a:4a:26:e0:72:79:a9:43:cb:b9:33:84:f5:97:e2:
         cd:f9:0f:1d:7d:da:83:03:49:a0:f2:22:43:59:d2:5e:ff:b9:
         f1:32:68:c2:de:fa:38:9b:49:57:58:6e:ae:1c:85:ad:d5:72:
         e4:af:2d:7a:c8:94:32:e2:a0:b3:5c:82:74:53:eb:ad:2e:e9:
         cb:69:04:97:88:aa:a3:d1:fc:05:cd:a3:dd:e2:55:80:2a:dc:
         90:af:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:18 2026 by rpki-client