Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          9vvO4DIC6iL1elMjTQj06qJHVyyV/ygVvsNp3Q/I8BY=
Subject key identifier:   51:AF:7A:89:70:2C:C8:70:B0:F1:0D:C1:0E:9C:AD:7E:9F:C1:34:CE
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1F0545CFF7F4E82B47085243E93DB51F8B04180F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     4230
IP address blocks:        200.211.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:05:45:cf:f7:f4:e8:2b:47:08:52:43:e9:3d:b5:1f:8b:04:18:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:8b:76:4b:85:8f:c7:d0:c7:7a:88:f0:be:
                    aa:fb:38:1e:a8:57:7b:e9:5a:8c:e6:3a:6f:24:f7:
                    eb:d9:9d:f5:9d:8a:6a:b4:21:6d:8a:a2:99:72:29:
                    0d:ce:a2:dd:4c:98:51:57:d3:36:a7:e2:c0:26:4d:
                    26:e0:09:b0:70:e5:e7:7e:38:ec:1d:2d:b0:e7:41:
                    96:23:d8:57:2c:0e:35:55:c6:f5:a1:a6:fc:58:67:
                    25:14:d2:0c:bb:6e:9f:0a:5f:37:cd:43:c1:ea:3b:
                    99:a4:f6:15:ec:bb:76:40:bf:01:ea:9a:10:7f:eb:
                    08:87:8d:0a:d8:d2:0c:93:aa:f4:0a:71:56:fa:36:
                    73:79:0b:07:3a:cc:fe:80:c8:a6:2a:89:22:27:51:
                    6a:9a:5b:65:f2:d9:36:e6:3a:34:4e:5d:1b:92:c3:
                    af:bd:d1:09:f2:b1:c6:a6:5a:27:2d:be:37:c5:f1:
                    22:43:fa:a2:5a:8b:0b:9d:13:e0:1d:f5:4b:ce:12:
                    e7:2c:e6:bd:1a:32:15:15:49:b6:f8:5b:5c:27:28:
                    d9:ac:d5:dd:3d:11:c5:ea:35:f2:23:f5:6d:a6:c8:
                    40:19:52:76:2d:f3:35:ad:f2:f9:f3:6b:1f:2d:37:
                    6e:e9:38:3a:3a:9a:6e:47:6f:9a:10:c3:1f:c2:d3:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AF:7A:89:70:2C:C8:70:B0:F1:0D:C1:0E:9C:AD:7E:9F:C1:34:CE
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:63:d5:20:ac:76:5c:b3:71:29:f0:e7:f6:79:b1:a1:fc:48:
         e8:35:0b:e7:b1:9c:f5:41:63:cd:d0:a7:00:5e:0c:7f:f0:56:
         39:71:21:fd:5f:f3:ba:18:85:29:4b:75:b3:c8:0e:27:36:e0:
         3d:9c:7d:0b:d0:1c:8b:ee:4f:32:a5:eb:23:c2:7e:ca:0c:ad:
         ec:80:e6:d1:34:f1:3b:c5:ec:92:c3:81:1d:51:c7:55:ca:94:
         b5:b6:9a:1f:d7:31:8c:5e:74:a1:eb:e0:64:b5:ce:6b:5a:15:
         f0:bd:ba:d9:9a:56:92:f6:de:13:f9:74:58:88:5a:8f:2d:23:
         8e:8b:16:42:52:67:7f:81:bc:bf:5d:5e:8f:99:6d:88:53:c6:
         cc:cd:a0:4c:7e:fc:c3:76:79:e9:df:86:a5:e0:a4:ed:57:88:
         0a:6f:b0:67:ac:cb:eb:00:42:58:9f:6d:81:56:8e:4d:6d:09:
         ff:a3:12:39:b9:ee:07:b4:6e:fc:81:1a:59:c5:9f:49:82:79:
         00:d0:b4:15:30:71:ab:63:c3:29:06:2c:6f:58:7e:2f:b2:9e:
         10:32:3a:75:73:9b:06:88:19:ab:a3:94:ee:82:62:46:58:bd:
         e4:a1:a6:02:1a:b1:30:b2:f1:89:19:96:9e:de:3b:66:31:75:
         61:3f:eb:ca
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUHwVFz/f06CtHCFJD6T21H4sEGA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNjAyMDQxOTU1MDdaFw0yNzAyMDMyMDAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU3RDhCNzY0Qjg1OEZDN0Qw
Qzc3QTg4RjBCRUFBRkIzODFFQTg1NzdCRTk1QThDRTYzQTZGMjRGN0VCRDk5REY1
OUQ4QTZBQjQyMTZEOEFBMjk5NzIyOTBEQ0VBMkRENEM5ODUxNTdEMzM2QTdFMkMw
MjY0RDI2RTAwOUIwNzBFNUU3N0UzOEVDMUQyREIwRTc0MTk2MjNEODU3MkMwRTM1
NTVDNkY1QTFBNkZDNTg2NzI1MTREMjBDQkI2RTlGMEE1RjM3Q0Q0M0MxRUEzQjk5
QTRGNjE1RUNCQjc2NDBCRjAxRUE5QTEwN0ZFQjA4ODc4RDBBRDhEMjBDOTNBQUY0
MEE3MTU2RkEzNjczNzkwQjA3M0FDQ0ZFODBDOEE2MkE4OTIyMjc1MTZBOUE1QjY1
RjJEOTM2RTYzQTM0NEU1RDFCOTJDM0FGQkREMTA5RjJCMUM2QTY1QTI3MkRCRTM3
QzVGMTIyNDNGQUEyNUE4QjBCOUQxM0UwMURGNTRCQ0UxMkU3MkNFNkJEMUEzMjE1
MTU0OUI2Rjg1QjVDMjcyOEQ5QUNENUREM0QxMUM1RUEzNUYyMjNGNTZEQTZDODQw
MTk1Mjc2MkRGMzM1QURGMkY5RjM2QjFGMkQzNzZFRTkzODNBM0E5QTZFNDc2RjlB
MTBDMzFGQzJEMzI2QzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxX2LdkuFj8fQx3qI8L6q+zgeqFd76VqM5jpvJPfr2Z31nYpqtCFt
iqKZcikNzqLdTJhRV9M2p+LAJk0m4AmwcOXnfjjsHS2w50GWI9hXLA41Vcb1oab8
WGclFNIMu26fCl83zUPB6juZpPYV7Lt2QL8B6poQf+sIh40K2NIMk6r0CnFW+jZz
eQsHOsz+gMimKokiJ1Fqmltl8tk25jo0Tl0bksOvvdEJ8rHGplonLb43xfEiQ/qi
WosLnRPgHfVLzhLnLOa9GjIVFUm2+FtcJyjZrNXdPRHF6jXyI/VtpshAGVJ2LfM1
rfL582sfLTdu6Tg6OppuR2+aEMMfwtMmxQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FFGveolwLMhwsPENwQ6crX6fwTTOMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzMTMxMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyNMwDQYJ
KoZIhvcNAQELBQADggEBAA9j1SCsdlyzcSnw5/Z5saH8SOg1C+exnPVBY83QpwBe
DH/wVjlxIf1f87oYhSlLdbPIDic24D2cfQvQHIvuTzKl6yPCfsoMreyA5tE08TvF
7JLDgR1Rx1XKlLW2mh/XMYxedKHr4GS1zmtaFfC9utmaVpL23hP5dFiIWo8tI46L
FkJSZ3+BvL9dXo+ZbYhTxszNoEx+/MN2eenfhqXgpO1XiApvsGesy+sAQlifbYFW
jk1tCf+jEjm57ge0bvyBGlnFn0mCeQDQtBUwcatjwykGLG9Yfi+ynhAyOnVzmwaI
GaujlO6CYkZYveShpgIasTCy8YkZlp7eO2YxdWE/68o=
-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:42 2026 by rpki-client