Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3139312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          fLKQ1zkoTx6mpkqRkhT4LXjIchsiv1ufQU+LDAVGlHk=
Subject key identifier:   F0:CE:01:A0:E0:F9:D2:3E:14:90:CF:29:8A:15:A6:7F:8F:B9:5F:76
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       714B2D69E3813BE2AE66DA506B428E928A4F91D7
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     4230
IP address blocks:        200.191.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4b:2d:69:e3:81:3b:e2:ae:66:da:50:6b:42:8e:92:8a:4f:91:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:d9:3e:66:e0:ce:b3:6d:dc:a5:94:fd:61:
                    3c:25:77:5c:7f:c7:a0:75:f9:3a:70:13:7e:27:cb:
                    57:74:37:0a:13:a4:0a:8d:77:63:ae:ab:46:6a:a3:
                    70:f7:6b:b7:ef:a2:93:66:ae:b1:73:e6:92:bd:71:
                    21:e8:e4:04:9c:9e:36:ee:70:7f:47:ed:09:80:42:
                    f9:4c:64:83:d1:a2:3f:6f:f1:36:9c:67:90:fb:48:
                    5d:7a:19:b5:5e:f1:7b:bc:c7:21:9b:05:7f:8e:94:
                    37:e2:6f:67:53:d3:eb:d9:5e:21:f1:d2:d1:dd:23:
                    dc:7e:e4:a4:1d:51:5a:6e:58:32:6e:dd:d8:38:cb:
                    da:3d:8e:6b:51:11:b1:a9:81:90:5e:8a:ed:5c:7d:
                    1d:21:2e:fc:42:56:b3:2a:48:db:4e:c9:d5:b3:aa:
                    66:4c:72:28:2c:82:8c:04:f5:6a:87:48:6e:b2:9d:
                    4e:4d:80:2e:d6:98:38:af:82:4d:a7:81:18:38:6e:
                    98:85:63:48:08:f1:74:60:a5:40:ed:34:7b:94:70:
                    6e:23:45:a4:e9:97:25:df:b0:68:e4:06:2f:5f:9b:
                    c7:ae:07:da:7a:47:10:b5:2a:a7:47:8d:d4:46:71:
                    51:51:21:0d:c4:74:55:34:47:6a:4c:3f:5c:1b:cd:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CE:01:A0:E0:F9:D2:3E:14:90:CF:29:8A:15:A6:7F:8F:B9:5F:76
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:6e:dd:a7:2c:66:bf:c4:a9:6e:b9:05:52:1e:e4:2b:40:
         4b:45:ab:56:3e:1c:75:ad:5f:46:37:69:92:2a:13:b5:83:ba:
         d8:3a:59:93:6d:d2:fd:3d:2d:d3:4a:0e:d7:d3:1e:78:c9:ed:
         6a:69:a2:9e:ca:1d:ea:a0:e1:93:ed:2e:b5:36:e3:f2:be:bf:
         6b:a3:db:fc:cb:b9:f8:d9:bd:40:b7:d2:a8:b9:83:d2:4d:53:
         89:75:29:29:be:57:e1:bf:67:fc:ea:80:a7:cd:a6:bd:0b:d2:
         59:e0:cd:6b:cf:11:5f:58:1e:82:8e:ee:26:fd:74:11:25:69:
         f8:4d:b3:d5:c8:00:9b:c4:24:1f:59:e2:da:34:2a:e2:61:8b:
         da:f6:e7:b3:14:d4:80:4a:b3:73:ef:57:44:16:07:0e:de:e3:
         5a:7a:7d:a8:5d:43:70:30:0b:5a:c6:43:6f:5c:cb:81:7a:32:
         e2:46:23:46:f4:bf:4c:5f:0e:2c:47:13:b0:07:21:a4:8f:d6:
         d1:32:15:dd:d3:d0:eb:56:9c:9b:72:e1:54:23:29:3e:17:8e:
         74:2f:79:f1:32:c9:88:7a:9a:da:35:20:64:e2:98:e3:e1:63:
         59:f5:01:27:d0:ae:d8:b7:90:fd:e6:8e:39:c4:47:50:39:2a:
         53:0a:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:50:54 2026 by rpki-client