Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          DNOOTS8DbJp8njl9hS3vkMIDohZIsu/pbLN56hhSRn0=
Subject key identifier:   7B:8E:78:65:92:2B:EB:C3:4B:0C:E6:4B:EF:A7:39:3B:5D:8D:7F:B7
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       4CC9648FA5C1F52080B282A2CFF65A997273A227
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     4230
IP address blocks:        200.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c9:64:8f:a5:c1:f5:20:80:b2:82:a2:cf:f6:5a:99:72:73:a2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:0b:ec:c4:f6:71:d0:95:a5:48:94:a9:8f:
                    9d:b2:a6:5f:ab:70:5a:46:38:99:7f:b8:8d:b8:77:
                    10:63:e3:46:c2:c8:03:c8:cc:4f:fb:0d:7d:bd:70:
                    60:df:41:71:a2:50:5f:55:13:ab:da:d3:71:33:3b:
                    d9:e0:02:93:4c:5e:91:32:9c:6c:20:36:53:36:48:
                    33:1a:cc:fb:aa:3d:9f:da:66:2c:e9:66:87:9d:a8:
                    8f:fa:02:5f:4b:18:ea:b3:56:1d:5c:66:6f:54:0b:
                    bb:1f:05:b0:01:20:fb:fd:20:0e:3d:ad:b6:b0:45:
                    af:c4:7e:74:fc:db:c4:74:73:82:8e:30:82:66:d5:
                    24:e1:e0:2f:31:70:77:da:33:9c:e3:a9:2d:e6:b7:
                    d3:4e:3c:7d:ab:dd:08:cc:3e:a6:3a:c1:d1:de:ef:
                    41:9a:cd:64:d8:e6:ef:30:35:cf:88:df:e2:f7:b4:
                    47:23:94:fe:ea:4c:71:bd:99:9b:1a:86:cc:cd:74:
                    bf:5c:27:53:57:c6:c1:d7:db:cc:a9:49:ce:86:52:
                    4c:cb:20:9b:15:2b:f1:a1:ae:bb:ac:93:1f:42:60:
                    88:13:d8:76:91:db:04:f4:45:74:b3:e7:25:c5:3e:
                    f7:77:1b:d8:39:df:6a:f2:48:48:cb:d2:49:ab:ae:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8E:78:65:92:2B:EB:C3:4B:0C:E6:4B:EF:A7:39:3B:5D:8D:7F:B7
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:5f:fb:fa:5f:45:37:f0:f7:5a:43:32:d2:b1:94:89:f5:
         a7:93:dd:20:20:49:7d:8b:35:1c:b8:67:0d:7e:56:d8:65:55:
         76:99:5a:b8:8b:61:60:17:2a:15:76:05:6e:40:49:3a:d5:ad:
         aa:41:81:c8:9e:74:ed:72:18:14:da:6f:39:8a:da:83:42:44:
         8e:2e:d8:02:4e:a0:7a:10:51:8f:86:8b:34:db:48:e9:c7:3d:
         b5:3a:44:14:4a:3c:5c:11:b6:96:1e:6e:bb:60:0f:a7:99:b5:
         74:b8:ca:5a:ec:03:2a:11:aa:fd:44:1d:6d:f2:d6:73:7f:32:
         a8:7a:60:53:02:94:75:ba:58:20:2e:c3:a2:66:52:85:fa:b0:
         18:52:3f:d1:84:5e:64:3c:b2:fe:c2:d2:35:b1:dc:56:78:07:
         c9:68:d5:e4:f0:c5:4d:09:0e:c0:b5:0a:22:f0:bd:6f:1d:23:
         d1:75:ce:b9:a1:a5:8e:64:42:17:a0:19:5d:d5:a9:52:5e:e7:
         43:c8:b9:78:50:e4:c9:c8:d0:79:02:fb:f0:bc:b7:e2:36:72:
         8d:da:fd:20:06:5c:aa:be:03:7d:ac:72:c0:6a:cc:fe:6a:aa:
         40:48:57:3e:12:82:ea:e4:31:5b:8f:d5:d4:48:21:a8:c9:2c:
         e9:fd:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:33 2026 by rpki-client