Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          hUoDHMdjl7CmoiswbnAkfu8juPd3/ISsnrWqQ9GOMoE=
Subject key identifier:   8A:3C:D0:F3:B3:0D:A7:47:16:A3:30:0D:BD:8D:83:AD:D4:D2:07:C3
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       776AF8726A98109DDDAD327A2E05A78DB01BACD0
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     4230
IP address blocks:        200.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:f8:72:6a:98:10:9d:dd:ad:32:7a:2e:05:a7:8d:b0:1b:ac:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:9c:9f:ce:76:13:22:98:c7:7a:e1:6e:7b:
                    af:22:93:1c:d5:aa:3d:08:1a:57:20:03:27:4c:03:
                    0c:43:b9:d3:35:9a:c6:ab:b6:2f:e3:95:83:a6:14:
                    c5:da:ed:7d:00:a1:62:d4:b1:69:33:54:97:64:50:
                    fc:6d:6a:22:c9:e5:87:f8:42:3c:0f:f0:cf:fa:09:
                    4e:b0:33:f1:13:0f:dc:4b:5d:22:24:e3:5a:ec:6c:
                    d3:dc:d1:08:04:1e:d0:ae:89:b4:f1:c9:b8:ee:ba:
                    58:5b:e5:c5:c7:64:4c:af:f6:de:4e:a9:7b:78:13:
                    db:d5:bf:f4:2d:91:4f:17:9d:4f:53:25:a6:06:74:
                    73:f1:60:98:31:b0:99:13:5f:62:c9:50:08:31:ea:
                    03:b7:88:8c:c3:81:fd:ab:fe:8e:5a:fe:a6:7a:b0:
                    07:bf:30:8d:fb:4a:34:4d:4f:e5:b7:1e:2d:a8:79:
                    cf:6b:e5:5c:a9:eb:c5:d7:03:1d:fa:60:6a:f3:99:
                    02:1f:07:e0:89:f6:23:ae:ef:47:db:14:b5:47:a2:
                    16:29:4e:ab:7a:fc:ac:a0:81:ce:b1:ad:0d:93:75:
                    8c:d1:b0:16:0b:dc:61:6a:74:2a:6a:ea:8d:9a:4b:
                    1f:28:7f:91:d1:1a:ea:cc:0d:a3:d7:cc:fc:b3:f2:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:D0:F3:B3:0D:A7:47:16:A3:30:0D:BD:8D:83:AD:D4:D2:07:C3
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:8f:8e:09:13:10:8f:c4:73:8d:6d:e5:e6:c5:d7:28:5a:
         fe:dc:ff:e1:f7:5c:b5:7b:38:c8:90:6b:e7:fc:ef:8c:4a:94:
         de:44:0c:96:03:60:61:05:c4:b5:e4:a8:e7:c3:50:71:e2:7d:
         7e:b5:2c:cf:7c:43:5d:00:72:89:3b:31:a6:34:1d:ab:60:96:
         4c:63:e7:73:f5:19:95:62:43:b0:44:2a:a5:ad:1e:7b:7a:6b:
         05:76:69:af:ca:8b:18:d3:72:fb:5a:ec:cb:cf:0c:a8:bd:14:
         8d:33:0e:89:de:49:b1:fd:47:86:61:59:a4:3e:4e:55:f4:47:
         60:f7:79:64:06:46:44:76:f1:e7:9e:7a:f2:25:2a:e9:7b:59:
         a3:51:fc:ab:1e:af:c1:44:e9:5a:04:f7:a2:a5:5f:c1:aa:6f:
         18:b2:82:b2:e8:4b:f7:0e:48:c8:2b:ab:6c:26:23:e0:b9:3f:
         b4:0b:73:42:7e:ef:6c:4f:ff:0c:64:09:b5:5e:2b:71:f9:47:
         34:85:ea:31:5f:0c:5b:11:19:69:ee:de:6a:dc:48:b5:a4:a0:
         45:80:f3:4a:3b:42:14:23:b6:ae:a3:df:d3:44:ef:b7:95:d0:
         05:f3:54:00:c5:49:44:4f:8b:42:d1:bf:ad:cd:b8:c8:22:21:
         89:61:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:39 2026 by rpki-client