Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          0fcuvfCxksSyq9YSqkY6N/WYu/uB4VwzXH4xnHRSU8E=
Subject key identifier:   49:CB:29:53:D6:0E:52:F0:CE:10:CB:94:C3:7D:BA:EE:A3:3B:28:2F
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       65D7B204DA599DBF2D21C7838FCC0762F97A37B3
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:08 +0000
ROA not before:           Wed 04 Feb 2026 19:55:08 +0000
ROA not after:            Wed 03 Feb 2027 20:00:08 +0000
asID:                     4230
IP address blocks:        200.209.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d7:b2:04:da:59:9d:bf:2d:21:c7:83:8f:cc:07:62:f9:7a:37:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:08 2026 GMT
            Not After : Feb  3 20:00:08 2027 GMT
        Subject: CN=3082010A0282010100A2E72657D69E52E08E73782F2EA9F1EF4ED310B7658F65FA07364798E99F6DF25CCF584660EF4BF18620DBBF19DEE189BF4D79FFDA05D3FD9FDFE492CEB2A86F534D35F1C2555922F36E340F5B03015B76042FCFA626F5D1D6D882D7E5D11097984C41DD1BCE615580BCC5275519AF89F175AD5E708D0FF91597E0009C2B2789CA3C4A3255827F7B3EA378F8AE38F30270472BB72872579B588E61FF34F70EAA31AE2F13B50A0A76317B101206580E5D02C1D2A520B15A2B5B74014F3E01F4DE4889EE5D9D5A7F2418AE2243E3413238729560FAE454E3974014B751880A166F9641ABFCD50DB71D6F0DD9223B37BAB965A7827F3191790B78DC6485DBF937590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:26:57:d6:9e:52:e0:8e:73:78:2f:2e:a9:
                    f1:ef:4e:d3:10:b7:65:8f:65:fa:07:36:47:98:e9:
                    9f:6d:f2:5c:cf:58:46:60:ef:4b:f1:86:20:db:bf:
                    19:de:e1:89:bf:4d:79:ff:da:05:d3:fd:9f:df:e4:
                    92:ce:b2:a8:6f:53:4d:35:f1:c2:55:59:22:f3:6e:
                    34:0f:5b:03:01:5b:76:04:2f:cf:a6:26:f5:d1:d6:
                    d8:82:d7:e5:d1:10:97:98:4c:41:dd:1b:ce:61:55:
                    80:bc:c5:27:55:19:af:89:f1:75:ad:5e:70:8d:0f:
                    f9:15:97:e0:00:9c:2b:27:89:ca:3c:4a:32:55:82:
                    7f:7b:3e:a3:78:f8:ae:38:f3:02:70:47:2b:b7:28:
                    72:57:9b:58:8e:61:ff:34:f7:0e:aa:31:ae:2f:13:
                    b5:0a:0a:76:31:7b:10:12:06:58:0e:5d:02:c1:d2:
                    a5:20:b1:5a:2b:5b:74:01:4f:3e:01:f4:de:48:89:
                    ee:5d:9d:5a:7f:24:18:ae:22:43:e3:41:32:38:72:
                    95:60:fa:e4:54:e3:97:40:14:b7:51:88:0a:16:6f:
                    96:41:ab:fc:d5:0d:b7:1d:6f:0d:d9:22:3b:37:ba:
                    b9:65:a7:82:7f:31:91:79:0b:78:dc:64:85:db:f9:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CB:29:53:D6:0E:52:F0:CE:10:CB:94:C3:7D:BA:EE:A3:3B:28:2F
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:ad:7c:f0:b2:ec:75:9d:3d:ee:e8:33:a8:75:18:7f:0f:15:
         a6:6d:71:a0:41:87:75:3b:17:8c:cf:cd:cc:98:f8:f2:99:3e:
         ef:b9:aa:90:69:5d:10:09:1f:b7:55:6c:8d:46:85:37:26:d0:
         2c:c8:b2:3f:7f:e7:da:d9:2f:6f:10:56:58:6f:d4:b6:e1:70:
         02:19:2c:89:1a:70:37:0a:a7:17:a3:02:39:67:96:b4:14:0a:
         78:e5:f9:a5:46:60:c8:d6:fc:f7:24:62:e8:d3:5d:0d:c1:34:
         b2:e0:73:3a:00:03:90:79:9d:a3:60:3b:d0:4b:97:b2:1e:c2:
         3a:1f:2c:a1:46:cd:f5:35:8b:da:cd:80:54:d2:69:27:45:36:
         19:67:74:d1:76:21:ae:71:b9:a1:e0:f4:44:ae:ae:d6:f0:27:
         59:57:02:a6:54:d6:cb:a7:00:32:88:f1:c9:12:14:7b:87:d5:
         fa:1e:df:7c:c8:8b:3a:51:55:33:e1:86:58:cf:cd:8d:8f:73:
         c3:be:01:23:9d:18:e9:8f:48:c1:a0:01:61:35:f0:90:04:62:
         a6:21:70:85:b9:8c:1b:cc:b0:26:f9:f2:2c:a6:ef:9d:ed:1b:
         e5:5f:5a:dc:55:a1:08:8f:d1:d5:98:f3:10:1b:25:e7:4b:dc:
         48:00:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:37 2026 by rpki-client