Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
File:                     3230302e3139322e302e302f31382d3138203d3e2034323330.roa (raw, json)
Hash identifier:          D/4A4jWmHiNPY/wfa4MGAEvh+gx5ZcQ4xHRR3C6ikfA=
Subject key identifier:   3E:5C:E0:62:91:DB:90:42:F7:8C:81:2E:AC:39:68:FE:1C:93:4A:AF
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       05206088B44A0AEE4F5A71DA035A7BF2117F9383
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     4230
IP address blocks:        200.192.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:20:60:88:b4:4a:0a:ee:4f:5a:71:da:03:5a:7b:f2:11:7f:93:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:ad:79:cc:0a:3b:c4:2a:f5:a6:f8:e7:db:
                    32:d1:ff:86:28:6f:3a:cd:2c:11:bf:1a:c2:1b:a7:
                    3c:ac:04:60:bb:2a:24:6d:37:f9:dd:08:c1:f6:da:
                    85:d3:4a:04:c4:7a:82:be:5f:8c:4f:3b:a5:ba:f9:
                    8e:bf:46:28:c2:31:18:3d:a5:25:86:27:ae:6b:db:
                    eb:54:a3:e7:dd:79:f8:42:ca:bc:9d:18:7e:dc:39:
                    8a:98:e7:22:e2:0f:49:fd:7f:46:a8:d2:aa:57:8d:
                    67:79:6a:4e:37:1a:28:27:4d:bc:8f:dc:59:5b:d7:
                    1c:6b:7d:42:db:12:58:e4:04:34:96:0b:8b:32:09:
                    cc:14:96:89:36:a1:09:05:8a:ec:65:37:24:cb:0e:
                    18:9b:43:36:97:1b:7f:07:7f:c2:b6:d0:74:81:ec:
                    3b:08:31:95:c3:de:9d:6f:96:34:9e:d8:43:16:c2:
                    e0:50:3a:ea:e8:08:3d:b0:7c:c3:83:46:42:03:f1:
                    77:ad:41:52:2e:43:62:45:f0:1b:b4:96:b2:f9:db:
                    ea:3b:39:66:b4:c4:22:0e:d7:ed:c6:3d:11:7e:90:
                    3a:89:4e:2a:f7:97:93:9d:de:9e:64:a4:b6:19:49:
                    1c:32:e6:01:78:3d:08:a3:87:68:d7:49:ce:39:2e:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5C:E0:62:91:DB:90:42:F7:8C:81:2E:AC:39:68:FE:1C:93:4A:AF
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bd:90:92:39:47:e0:30:77:28:fc:8b:3e:6a:61:b1:a3:8d:9a:
         91:44:5b:f3:22:6a:6a:18:5f:ef:62:6a:b2:35:73:f7:54:af:
         d5:b0:4f:b3:4f:97:7b:c3:dd:6b:ba:f6:ed:c4:1c:67:51:c4:
         d8:02:a1:52:d3:31:2b:c6:ba:6c:fd:67:fd:76:b7:6e:dd:e1:
         bb:0b:33:ec:3f:4b:6f:ff:7f:4b:50:ae:17:33:cd:ad:4c:76:
         7a:a7:eb:0f:7c:62:e7:3d:b6:5b:0b:93:e7:d2:01:83:6f:42:
         c3:0f:1b:1b:0e:cc:69:e5:9f:57:af:2e:64:a5:7a:28:9b:c6:
         62:61:4d:06:a6:2e:bc:d4:12:58:1a:7f:69:14:92:7f:c9:13:
         b7:c1:fd:f2:d6:2e:3f:53:b0:4f:bb:e1:af:df:96:72:04:6e:
         03:0c:75:8c:44:ab:3d:4c:c6:db:59:7c:8a:7c:6a:3a:09:8c:
         9e:db:96:27:cb:71:8f:5f:7d:62:0b:0a:18:b3:e4:97:f7:23:
         d6:8a:76:8f:9e:34:42:56:07:0e:a1:6c:58:da:cd:ae:c2:3e:
         79:c5:22:da:a4:8f:30:61:08:35:9d:ed:75:ba:fe:4b:39:09:
         d7:fc:f3:2d:b7:cf:f7:e8:ac:dc:f2:78:df:93:f4:56:cf:b3:
         78:1d:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:39 2026 by rpki-client