Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          xWx2AYyot/ugH1scA3+iHN3zOpfbxZ84S9vxFGfo6AM=
Subject key identifier:   8C:64:F2:EA:E8:C9:7A:87:34:26:0D:C3:34:EE:2D:A4:ED:0E:6D:80
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1451AF8F67B82D406F12ABEFE580DA41168ABCDF
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     4230
IP address blocks:        200.244.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:51:af:8f:67:b8:2d:40:6f:12:ab:ef:e5:80:da:41:16:8a:bc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:4f:a5:86:ee:49:b3:70:3d:82:e8:f1:9c:
                    23:b0:95:c8:eb:35:b6:73:f4:99:cb:42:18:eb:0b:
                    f0:14:86:a9:21:10:0b:ee:5f:39:5b:c9:1c:d9:0b:
                    e7:05:6d:2e:36:e4:94:d6:67:21:9a:11:ee:7e:e8:
                    71:b8:20:a3:2d:86:8b:b8:af:2a:e2:cf:02:59:fb:
                    2a:b2:b0:06:c8:4e:2d:c1:3c:cb:5b:47:64:08:38:
                    d9:25:4d:ba:6c:d4:5e:4e:08:ff:ba:ee:13:08:dd:
                    4b:7d:ee:fa:8f:79:06:16:53:46:1e:b3:c6:56:b8:
                    13:2a:20:a1:ae:62:30:85:8a:56:87:fe:e8:e0:89:
                    2a:df:62:01:92:0d:2f:9b:6c:67:f2:62:02:48:1c:
                    b0:13:06:66:2c:b5:f3:f0:15:85:1f:10:82:9d:e5:
                    ec:69:ed:33:fc:a5:ed:39:8b:d2:d9:22:c7:ab:f1:
                    73:77:21:83:b9:f3:2f:e3:b9:2e:06:cd:08:23:d8:
                    21:56:45:1c:49:4a:81:d9:b6:93:14:ef:b4:60:13:
                    27:b5:6d:f8:84:f9:b3:44:34:e4:62:a0:10:d9:d0:
                    48:36:90:78:64:25:d6:69:fe:7c:65:54:d9:35:9e:
                    9f:0e:43:ae:fe:ec:e0:a4:44:c2:f2:47:52:4f:87:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:F2:EA:E8:C9:7A:87:34:26:0D:C3:34:EE:2D:A4:ED:0E:6D:80
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:22:97:63:a2:98:20:82:74:28:b6:3e:2a:1b:14:0e:e5:a0:
         f5:f6:ff:1f:3e:a9:15:0d:5a:d9:cd:b8:09:49:df:46:da:fa:
         92:4c:f8:39:93:c1:c9:b8:23:ac:13:e6:00:07:b3:ff:e9:6d:
         c8:17:65:a3:ab:22:04:a2:f3:27:e4:9f:17:c6:e2:aa:7e:88:
         03:c1:d2:d3:68:3a:28:01:2e:67:02:4c:a3:29:ae:d8:59:c5:
         48:90:69:e2:fe:4b:95:2e:fc:9c:5c:e5:c5:95:6d:12:b0:f2:
         f3:dd:4d:df:09:37:5b:a7:7b:fa:80:a4:a0:ea:87:11:a5:42:
         82:7f:d2:24:99:fd:20:ed:6e:fe:9d:df:f1:cf:a0:ae:e2:aa:
         9b:f2:60:12:b8:d2:b8:09:db:2e:f7:0b:d3:6d:8a:9c:90:33:
         3c:1e:97:4e:bb:11:78:a9:9b:b0:b8:65:b0:46:22:1f:10:d4:
         42:d4:c7:fc:83:16:ea:a5:d9:53:ea:a1:af:df:6a:63:d7:2a:
         85:8d:2a:3e:42:67:27:e5:03:8c:1d:48:6c:61:84:5a:a7:85:
         e8:ad:a3:a0:ac:41:3d:83:30:2e:48:0d:b4:cd:94:a2:1d:dc:
         70:d1:f9:66:52:7d:61:ce:a8:19:a4:4c:d7:e3:2f:e8:4e:27:
         76:23:cd:de
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUFFGvj2e4LUBvEqvv5YDaQRaKvN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNjAyMDQxOTU1MDNaFw0yNzAyMDMyMDAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTgyMDRGQTU4NkVFNDlCMzcw
M0Q4MkU4RjE5QzIzQjA5NUM4RUIzNUI2NzNGNDk5Q0I0MjE4RUIwQkYwMTQ4NkE5
MjExMDBCRUU1RjM5NUJDOTFDRDkwQkU3MDU2RDJFMzZFNDk0RDY2NzIxOUExMUVF
N0VFODcxQjgyMEEzMkQ4NjhCQjhBRjJBRTJDRjAyNTlGQjJBQjJCMDA2Qzg0RTJE
QzEzQ0NCNUI0NzY0MDgzOEQ5MjU0REJBNkNENDVFNEUwOEZGQkFFRTEzMDhERDRC
N0RFRUZBOEY3OTA2MTY1MzQ2MUVCM0M2NTZCODEzMkEyMEExQUU2MjMwODU4QTU2
ODdGRUU4RTA4OTJBREY2MjAxOTIwRDJGOUI2QzY3RjI2MjAyNDgxQ0IwMTMwNjY2
MkNCNUYzRjAxNTg1MUYxMDgyOURFNUVDNjlFRDMzRkNBNUVEMzk4QkQyRDkyMkM3
QUJGMTczNzcyMTgzQjlGMzJGRTNCOTJFMDZDRDA4MjNEODIxNTY0NTFDNDk0QTgx
RDlCNjkzMTRFRkI0NjAxMzI3QjU2REY4ODRGOUIzNDQzNEU0NjJBMDEwRDlEMDQ4
MzY5MDc4NjQyNUQ2NjlGRTdDNjU1NEQ5MzU5RTlGMEU0M0FFRkVFQ0UwQTQ0NEMy
RjI0NzUyNEY4NzZBNEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6CBPpYbuSbNwPYLo8ZwjsJXI6zW2c/SZy0IY6wvwFIapIRAL7l85
W8kc2QvnBW0uNuSU1mchmhHufuhxuCCjLYaLuK8q4s8CWfsqsrAGyE4twTzLW0dk
CDjZJU26bNReTgj/uu4TCN1Lfe76j3kGFlNGHrPGVrgTKiChrmIwhYpWh/7o4Ikq
32IBkg0vm2xn8mICSBywEwZmLLXz8BWFHxCCneXsae0z/KXtOYvS2SLHq/FzdyGD
ufMv47kuBs0II9ghVkUcSUqB2baTFO+0YBMntW34hPmzRDTkYqAQ2dBINpB4ZCXW
af58ZVTZNZ6fDkOu/uzgpETC8kdST4dqSwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FIxk8uroyXqHNCYNwzTuLaTtDm2AMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNDM0MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPQwDQYJ
KoZIhvcNAQELBQADggEBAEUil2OimCCCdCi2PiobFA7loPX2/x8+qRUNWtnNuAlJ
30ba+pJM+DmTwcm4I6wT5gAHs//pbcgXZaOrIgSi8yfknxfG4qp+iAPB0tNoOigB
LmcCTKMprthZxUiQaeL+S5Uu/Jxc5cWVbRKw8vPdTd8JN1une/qApKDqhxGlQoJ/
0iSZ/SDtbv6d3/HPoK7iqpvyYBK40rgJ2y73C9NtipyQMzwel067EXipm7C4ZbBG
Ih8Q1ELUx/yDFuql2VPqoa/famPXKoWNKj5CZyflA4wdSGxhhFqnheito6CsQT2D
MC5IDbTNlKId3HDR+WZSfWHOqBmkTNfjL+hOJ3Yjzd4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:28 2026 by rpki-client