Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          YdbxyISL7l6eG2sT3bM+uahDDk2cTFQI31S2S7y3u+c=
Subject key identifier:   2F:02:F7:C9:97:FA:FA:B3:2B:64:D6:1D:AB:8A:E6:1E:1F:6B:87:98
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       4A6C244FA601427864AC49E6743609791C7F0EC6
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     4230
IP address blocks:        200.242.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6c:24:4f:a6:01:42:78:64:ac:49:e6:74:36:09:79:1c:7f:0e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:3f:f0:dd:88:63:71:35:b7:72:fb:2d:e6:
                    ea:97:f0:8b:02:c2:be:96:b2:02:6e:29:32:0a:b2:
                    61:1b:e1:36:de:dd:04:85:8b:39:c5:a2:2e:13:e9:
                    72:50:e0:d9:df:2d:08:90:38:87:97:14:66:86:4b:
                    40:b6:ca:40:e7:bd:b3:a0:a0:ce:15:19:8f:16:e4:
                    17:3f:7b:a4:b9:c2:3b:2a:49:51:d2:56:67:4f:8e:
                    0f:e6:85:c6:8c:c0:1e:3c:b4:57:cd:29:7a:73:7f:
                    ee:b4:ae:63:55:fa:2f:b4:76:6f:c4:2b:cd:7d:0b:
                    9d:95:8e:ad:9d:4d:3c:02:02:ce:86:15:38:c5:9d:
                    1d:2b:08:67:15:8d:99:b2:75:23:15:6b:ff:de:fc:
                    f3:b5:62:fa:30:90:18:f9:a8:40:d4:56:32:17:67:
                    fd:6b:98:d6:07:25:a3:11:1b:07:66:b3:aa:94:db:
                    70:e6:8d:5c:3d:9e:af:64:61:5d:c8:b2:97:4d:7f:
                    ae:16:70:26:d9:db:5e:36:ed:d3:e6:ef:e3:35:f3:
                    eb:4f:5c:47:7f:80:a0:a0:08:65:86:ed:76:1c:5a:
                    48:f1:45:d2:b3:38:7e:b3:9d:b8:41:1b:8e:cd:ab:
                    f0:38:68:e7:c2:80:9d:de:19:d2:59:87:68:4e:0f:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:F7:C9:97:FA:FA:B3:2B:64:D6:1D:AB:8A:E6:1E:1F:6B:87:98
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:55:66:fb:8f:a0:50:65:31:ab:07:13:db:fb:da:d7:75:fc:
         b7:64:b0:42:7a:e2:f8:5c:69:99:79:6a:2a:a7:27:0d:57:a0:
         44:21:a7:fa:ef:03:b0:3a:b3:d0:32:0a:70:d1:67:bc:d4:4f:
         bd:15:74:37:f5:55:b6:40:74:f2:ea:0a:d7:b1:72:41:d9:9c:
         51:98:66:c0:a1:50:7c:b4:23:58:24:fa:62:a9:5d:1b:33:67:
         b6:23:31:a8:22:19:89:2f:6e:e4:f5:67:1b:2c:8b:59:d4:fe:
         e0:41:82:5d:62:ce:02:1d:c6:58:bc:31:a9:22:ca:85:ed:59:
         e9:08:55:0f:21:b6:25:ff:de:f7:3b:b5:70:45:f2:34:71:97:
         79:12:37:81:f5:1c:1d:c8:1e:e6:a6:60:10:85:c1:40:e9:1c:
         11:50:98:7c:2a:3b:e8:e4:a5:10:39:ae:9d:03:81:01:fa:9c:
         11:33:e8:15:a8:b5:f1:f4:b0:c7:57:e5:71:82:8c:59:a6:46:
         8b:59:40:7d:12:2d:63:de:c6:17:92:98:5b:15:8e:dd:07:54:
         2e:ac:dd:9a:8e:e7:ca:ce:35:6f:46:be:48:78:71:00:cd:c7:
         70:f8:7c:f1:23:df:0f:58:ff:2c:63:8b:e8:38:82:dd:6b:1c:
         9d:e4:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:11 2026 by rpki-client