Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234352e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          9+aBgRdcUOXkLit76zc1S441Ek9rMmSQsZi4mvfJtzw=
Subject key identifier:   C3:EB:60:DA:A8:87:F2:4F:15:8D:44:22:D1:E4:E5:35:19:3D:07:55
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3967D83F5C7474ADAC55EA5608D304B7F4E4508C
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     4230
IP address blocks:        200.245.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:67:d8:3f:5c:74:74:ad:ac:55:ea:56:08:d3:04:b7:f4:e4:50:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:6f:99:c9:7c:0b:e9:9e:3d:e5:1b:db:b3:
                    ce:9a:61:ea:7c:ef:f1:e2:dc:3e:02:c6:ff:31:99:
                    19:c4:a1:63:46:42:de:37:eb:45:51:66:11:6b:9a:
                    66:ab:b8:0b:67:00:e1:f5:ad:3e:f6:66:57:4f:39:
                    86:0c:4e:f3:e1:27:b7:e5:d5:66:aa:96:78:82:59:
                    01:a9:2d:ed:4e:a9:26:98:a0:70:23:fe:ed:6d:ee:
                    80:e7:ef:34:f6:f9:24:d1:ee:ba:8b:a6:5d:0b:4e:
                    18:80:27:cc:9c:a4:ef:44:08:b3:dd:04:d8:70:0f:
                    7b:5a:1c:e8:2d:e0:a8:64:d6:e5:e5:15:3f:b1:17:
                    f7:cd:df:b5:c2:95:5f:36:17:67:2b:18:19:7f:ef:
                    70:82:6e:5d:c0:e5:1d:18:23:9b:7c:5a:8d:cc:7d:
                    ed:1f:ec:1b:07:97:21:05:72:a3:6a:5a:86:b0:e9:
                    1a:b8:9c:44:a9:c2:36:43:27:23:f1:59:1f:6c:c3:
                    d3:8c:09:94:80:91:db:4f:4b:d6:cd:e8:18:2a:99:
                    b4:a5:14:23:3c:1b:74:2b:02:b1:62:3c:52:9d:21:
                    35:a0:72:ee:2f:71:f0:82:8b:fc:c8:42:f9:72:15:
                    c0:1a:ac:9d:de:7b:40:ec:dd:e5:76:23:cc:30:e5:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EB:60:DA:A8:87:F2:4F:15:8D:44:22:D1:E4:E5:35:19:3D:07:55
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:c7:bf:0c:51:66:ad:3b:81:42:7d:db:06:16:04:06:a7:61:
         a9:0d:49:82:6c:d3:8e:80:87:c1:1f:e5:f0:e8:5b:22:7c:ea:
         fa:c1:1c:2f:66:66:27:74:61:fc:f6:79:4e:7e:b2:af:13:53:
         de:53:a8:5d:e7:56:70:70:b9:de:14:f1:93:1b:63:65:6d:7e:
         d8:56:2a:53:e8:b2:05:be:96:9d:63:14:9f:68:2f:07:28:b4:
         5c:8f:75:d3:d8:60:cf:59:6c:bf:39:02:e6:e7:fc:ef:a8:0f:
         9c:b6:fd:90:0e:00:ab:0a:12:d1:26:3f:bf:da:a4:df:5a:02:
         29:61:50:a7:43:11:00:04:e0:c6:a9:60:92:5c:1f:5c:4f:b8:
         ba:78:90:82:4c:4a:cc:a6:bd:ed:53:2c:13:b4:0a:c1:9b:fe:
         4c:43:bf:69:5e:2e:b8:58:f8:34:d3:2a:41:a4:99:fa:dd:bf:
         c7:f6:05:2b:ea:8e:60:2d:ad:c4:61:8d:69:b5:6e:1e:29:f2:
         75:96:11:f2:9e:ab:d3:38:b9:da:4b:98:29:be:19:11:0c:7f:
         70:85:9c:40:b9:9d:d1:d2:b1:88:a0:4b:c9:76:4f:28:f0:e6:
         48:ad:99:6b:f5:2d:c2:f3:32:53:43:5a:e2:6b:53:a7:1a:2d:
         d1:8f:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:31 2026 by rpki-client