Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          RAsjAS7wgJrNFiX+pQD9Th5c9x9QJ0ms0N8JGuqOqnQ=
Subject key identifier:   2A:A4:3A:5E:FB:1A:29:0E:7A:D1:04:1B:96:99:49:8E:D6:1C:87:7B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1BE8466E13569F86597C82147B5035144A59B5AB
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     4230
IP address blocks:        200.213.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e8:46:6e:13:56:9f:86:59:7c:82:14:7b:50:35:14:4a:59:b5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:85:b4:4f:17:22:ab:b7:97:37:72:85:d4:
                    0c:03:49:f3:fb:91:56:72:96:31:15:e1:c9:4c:a8:
                    e9:e3:54:07:32:26:54:f9:6f:29:fe:11:67:56:fe:
                    11:20:17:10:04:f8:84:c4:38:f2:a7:b6:41:8c:0b:
                    a8:fd:90:4c:26:05:67:5f:a9:65:2d:3a:11:f1:59:
                    74:f7:c9:8d:db:c8:8e:af:fd:b5:02:fe:d5:fe:82:
                    11:e6:09:a3:5c:72:57:00:b3:f9:b3:d9:25:be:5a:
                    61:cb:fe:ce:89:3c:ce:da:6b:3c:a0:7b:b6:b5:48:
                    8b:de:a7:7f:5e:24:90:c9:cd:c9:40:79:40:ba:a8:
                    e2:2e:f2:18:3f:73:73:b1:61:5b:9b:52:27:ab:16:
                    f8:d8:6e:61:3f:e0:ce:8f:59:db:04:59:78:e1:e6:
                    17:58:0a:d4:17:1b:db:2d:86:ef:fc:1c:76:85:55:
                    1c:25:2d:e5:74:cf:82:08:7c:ac:69:ed:38:19:43:
                    c0:74:d2:53:91:27:47:b9:f0:89:ef:c4:13:1c:fd:
                    3c:f6:37:e0:9e:8c:70:49:00:9d:23:92:28:17:ce:
                    cb:58:69:f0:47:8e:c1:85:74:ba:5c:c5:86:bd:f3:
                    b3:b2:b8:be:dc:e3:4f:1c:92:a7:0b:32:7a:f8:f1:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A4:3A:5E:FB:1A:29:0E:7A:D1:04:1B:96:99:49:8E:D6:1C:87:7B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:2f:00:67:7a:66:ef:ec:5b:d1:8d:05:8f:65:df:7f:82:
         67:48:ab:62:91:40:10:61:8b:49:3f:14:91:e0:d0:7b:0d:6a:
         4c:a0:59:8c:fd:60:96:9d:86:fa:89:d6:de:e1:84:8a:52:4a:
         38:23:fb:07:5e:5c:fc:cc:3a:65:9c:a3:a9:17:95:92:3d:03:
         d3:3a:00:8a:22:9d:1f:f5:fe:4e:17:3b:43:23:1b:81:b0:ad:
         cd:0f:0c:e2:92:28:7d:69:a7:b4:ee:0e:60:d7:38:65:ef:8d:
         6a:21:09:2e:e6:04:bd:6d:eb:0c:11:62:96:c6:8a:6e:64:6c:
         45:11:b0:52:6e:e5:27:05:6e:24:44:ad:51:f6:61:a7:a7:bf:
         3a:ef:b6:fd:06:3f:45:f5:28:a8:ab:06:e3:c6:5b:0d:cf:c1:
         41:a0:8a:9d:e5:37:6a:88:9c:e4:8c:94:b0:74:6c:99:c4:45:
         d2:b6:3b:b9:bd:d3:04:4a:e2:8d:98:49:da:38:a2:14:a0:03:
         bd:db:0a:0e:b4:e5:49:fe:5a:35:b9:cf:8f:7e:7d:ad:a4:c4:
         41:5a:6e:f3:47:9f:2d:16:02:4d:ea:60:0c:f1:db:24:64:70:
         e8:98:cd:cc:ba:d7:38:b4:19:64:d9:2e:15:34:72:85:61:74:
         19:e7:57:14
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUG+hGbhNWn4ZZfIIUe1A1FEpZtaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNjAyMDQxOTU1MDZaFw0yNzAyMDMyMDAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY2RDg1QjQ0RjE3MjJBQkI3
OTczNzcyODVENDBDMDM0OUYzRkI5MTU2NzI5NjMxMTVFMUM5NENBOEU5RTM1NDA3
MzIyNjU0Rjk2RjI5RkUxMTY3NTZGRTExMjAxNzEwMDRGODg0QzQzOEYyQTdCNjQx
OEMwQkE4RkQ5MDRDMjYwNTY3NUZBOTY1MkQzQTExRjE1OTc0RjdDOThEREJDODhF
QUZGREI1MDJGRUQ1RkU4MjExRTYwOUEzNUM3MjU3MDBCM0Y5QjNEOTI1QkU1QTYx
Q0JGRUNFODkzQ0NFREE2QjNDQTA3QkI2QjU0ODhCREVBNzdGNUUyNDkwQzlDREM5
NDA3OTQwQkFBOEUyMkVGMjE4M0Y3MzczQjE2MTVCOUI1MjI3QUIxNkY4RDg2RTYx
M0ZFMENFOEY1OURCMDQ1OTc4RTFFNjE3NTgwQUQ0MTcxQkRCMkQ4NkVGRkMxQzc2
ODU1NTFDMjUyREU1NzRDRjgyMDg3Q0FDNjlFRDM4MTk0M0MwNzREMjUzOTEyNzQ3
QjlGMDg5RUZDNDEzMUNGRDNDRjYzN0UwOUU4QzcwNDkwMDlEMjM5MjI4MTdDRUNC
NTg2OUYwNDc4RUMxODU3NEJBNUNDNTg2QkRGM0IzQjJCOEJFRENFMzRGMUM5MkE3
MEIzMjdBRjhGMTlEQ0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxm2FtE8XIqu3lzdyhdQMA0nz+5FWcpYxFeHJTKjp41QHMiZU+W8p
/hFnVv4RIBcQBPiExDjyp7ZBjAuo/ZBMJgVnX6llLToR8Vl098mN28iOr/21Av7V
/oIR5gmjXHJXALP5s9klvlphy/7OiTzO2ms8oHu2tUiL3qd/XiSQyc3JQHlAuqji
LvIYP3NzsWFbm1Inqxb42G5hP+DOj1nbBFl44eYXWArUFxvbLYbv/Bx2hVUcJS3l
dM+CCHysae04GUPAdNJTkSdHufCJ78QTHP089jfgnoxwSQCdI5IoF87LWGnwR47B
hXS6XMWGvfOzsri+3ONPHJKnCzJ6+PGdywIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FCqkOl77GikOetEEG5aZSY7WHId7MB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzMTMzMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyNUwDQYJ
KoZIhvcNAQELBQADggEBACb6LwBnembv7FvRjQWPZd9/gmdIq2KRQBBhi0k/FJHg
0HsNakygWYz9YJadhvqJ1t7hhIpSSjgj+wdeXPzMOmWco6kXlZI9A9M6AIoinR/1
/k4XO0MjG4Gwrc0PDOKSKH1pp7TuDmDXOGXvjWohCS7mBL1t6wwRYpbGim5kbEUR
sFJu5ScFbiRErVH2Yaenvzrvtv0GP0X1KKirBuPGWw3PwUGgip3lN2qInOSMlLB0
bJnERdK2O7m90wRK4o2YSdo4ohSgA73bCg605Un+WjW5z49+fa2kxEFabvNHny0W
Ak3qYAzx2yRkcOiYzcy61zi0GWTZLhU0coVhdBnnVxQ=
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:17 2026 by rpki-client