Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          IuclodQGaYYKG6BP/+GqtXduuhjr5pq3OIU7XsT4yd4=
Subject key identifier:   0B:CB:55:A5:4D:36:13:41:3D:C1:27:52:9C:38:D7:3C:94:6B:25:F6
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3B35CE2F065064708EC55EB84877A618B23B9C15
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     4230
IP address blocks:        200.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:35:ce:2f:06:50:64:70:8e:c5:5e:b8:48:77:a6:18:b2:3b:9c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=3082010A0282010100B3452F18ED9AEF152FDD8C23B8022C443DF40BA3CC388478942363A1983CF6EDBE7576C7D40B84EF62AD31D70286C7B373577D9D4F7E82B58FD1E0B41801C29407CFC4D87CD1B706626C63F6E6AEEF940E5E373D7B7520B93C167DDFCB9DF9E39F653A82EE705B14779A6F4BD220791CEB4D82C864DC92D9C6349A92741DF6E8B271331912C6CB8BA05B1F57ABC418A8673A40933A799FFF50B0C2D84F4698390E6FD4E2BFD40FD2004D43A23C5DA0E6D3D59DB658E753114959D7C9B9695D17D70B206BFE95A6094D14471A82A870D87175BEBAD5C1CC840883B8F2E51F4B775E976EDD39B2238C07A4B1B269BF2FD0CCFD1FCA71C7C90BAB8A499F261254BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:2f:18:ed:9a:ef:15:2f:dd:8c:23:b8:02:
                    2c:44:3d:f4:0b:a3:cc:38:84:78:94:23:63:a1:98:
                    3c:f6:ed:be:75:76:c7:d4:0b:84:ef:62:ad:31:d7:
                    02:86:c7:b3:73:57:7d:9d:4f:7e:82:b5:8f:d1:e0:
                    b4:18:01:c2:94:07:cf:c4:d8:7c:d1:b7:06:62:6c:
                    63:f6:e6:ae:ef:94:0e:5e:37:3d:7b:75:20:b9:3c:
                    16:7d:df:cb:9d:f9:e3:9f:65:3a:82:ee:70:5b:14:
                    77:9a:6f:4b:d2:20:79:1c:eb:4d:82:c8:64:dc:92:
                    d9:c6:34:9a:92:74:1d:f6:e8:b2:71:33:19:12:c6:
                    cb:8b:a0:5b:1f:57:ab:c4:18:a8:67:3a:40:93:3a:
                    79:9f:ff:50:b0:c2:d8:4f:46:98:39:0e:6f:d4:e2:
                    bf:d4:0f:d2:00:4d:43:a2:3c:5d:a0:e6:d3:d5:9d:
                    b6:58:e7:53:11:49:59:d7:c9:b9:69:5d:17:d7:0b:
                    20:6b:fe:95:a6:09:4d:14:47:1a:82:a8:70:d8:71:
                    75:be:ba:d5:c1:cc:84:08:83:b8:f2:e5:1f:4b:77:
                    5e:97:6e:dd:39:b2:23:8c:07:a4:b1:b2:69:bf:2f:
                    d0:cc:fd:1f:ca:71:c7:c9:0b:ab:8a:49:9f:26:12:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:55:A5:4D:36:13:41:3D:C1:27:52:9C:38:D7:3C:94:6B:25:F6
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:a4:33:ba:cd:fb:e5:78:ef:6f:7b:6d:9d:28:61:2e:e3:81:
         91:80:c8:80:97:a1:3d:02:55:0c:05:0e:64:29:0a:91:99:f2:
         75:27:ae:f5:a1:12:79:eb:e7:e1:f2:32:f6:01:bd:16:92:26:
         ea:08:ba:c7:f1:62:66:2d:cd:98:54:d3:13:ca:ac:03:bb:f1:
         e9:e8:88:e1:3f:97:fa:f2:b0:e3:45:69:a3:7c:3a:e9:e4:16:
         6f:8f:df:70:6d:8d:72:67:5b:06:c2:0a:33:5b:00:8c:cc:81:
         1d:3c:38:87:25:dc:d8:41:0d:ec:dc:f2:c8:a0:53:34:d2:0c:
         72:ae:41:1c:4e:7b:20:18:5b:c0:e0:80:4e:7c:7a:00:0b:e9:
         3c:76:e6:f7:9a:3d:e0:64:4f:3b:b4:90:05:a2:a0:96:ef:64:
         d2:01:eb:bf:8b:8f:3f:a9:75:f2:29:4d:f0:16:34:f9:02:59:
         d7:3e:bd:2d:46:20:1e:ac:ea:b4:3c:1d:b8:89:43:6c:c5:7f:
         e9:63:6a:1d:ca:0c:40:4f:50:d8:c5:1a:94:bd:b8:13:e8:04:
         b6:65:e1:47:16:3e:21:1f:9e:99:06:33:9e:13:e0:9f:24:a7:
         f5:dd:76:0d:a7:f0:98:09:ea:28:c7:b7:1e:23:43:73:77:26:
         9a:ce:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:51:02 2026 by rpki-client