Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          +xnxL+KxkNDMhPhphIgHELHpUiUzIGgx/AS0CbZmD+A=
Subject key identifier:   B8:EE:79:D1:75:B4:87:00:19:15:63:26:45:E1:1E:96:9E:68:92:DA
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       7C95ACE3CCCBF6A0FA79F0402309BA4DB4659141
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     4230
IP address blocks:        200.246.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:95:ac:e3:cc:cb:f6:a0:fa:79:f0:40:23:09:ba:4d:b4:65:91:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject: CN=3082010A0282010100C956063630516C74F13AB14C34E584856A648D7FD062C6A4D7DFC2E9F36B4A10C1C592624601E88D15A5A3F2E8BBCDB65C474D8945F92C54FB93AFD15DBCFD4CA43235A372EFDE04B2A16B18AAB00EB7F607270A781D198561079AD26D98F0A8ABCB2A81EC237089DDF1B20718CE427F4AA158C3AEA46C391868E6D38CEA35F022254AC2B3E599B982F8ED36EAB41701BF58382BEDDF06915559748D7A78C63378986011BCCA823AF9DD080C7C17A6C6B8A21B52B09B66A35F470F1E81E039C68D431345AFEB7CAE337905DDD2CCBCA73B754699061350194497CAF63DC723C7FB114B039C8D798B7818BAEBF6007CBCEEF9EC5C6471FB697DB3BE8BF37C43E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:06:36:30:51:6c:74:f1:3a:b1:4c:34:e5:
                    84:85:6a:64:8d:7f:d0:62:c6:a4:d7:df:c2:e9:f3:
                    6b:4a:10:c1:c5:92:62:46:01:e8:8d:15:a5:a3:f2:
                    e8:bb:cd:b6:5c:47:4d:89:45:f9:2c:54:fb:93:af:
                    d1:5d:bc:fd:4c:a4:32:35:a3:72:ef:de:04:b2:a1:
                    6b:18:aa:b0:0e:b7:f6:07:27:0a:78:1d:19:85:61:
                    07:9a:d2:6d:98:f0:a8:ab:cb:2a:81:ec:23:70:89:
                    dd:f1:b2:07:18:ce:42:7f:4a:a1:58:c3:ae:a4:6c:
                    39:18:68:e6:d3:8c:ea:35:f0:22:25:4a:c2:b3:e5:
                    99:b9:82:f8:ed:36:ea:b4:17:01:bf:58:38:2b:ed:
                    df:06:91:55:59:74:8d:7a:78:c6:33:78:98:60:11:
                    bc:ca:82:3a:f9:dd:08:0c:7c:17:a6:c6:b8:a2:1b:
                    52:b0:9b:66:a3:5f:47:0f:1e:81:e0:39:c6:8d:43:
                    13:45:af:eb:7c:ae:33:79:05:dd:d2:cc:bc:a7:3b:
                    75:46:99:06:13:50:19:44:97:ca:f6:3d:c7:23:c7:
                    fb:11:4b:03:9c:8d:79:8b:78:18:ba:eb:f6:00:7c:
                    bc:ee:f9:ec:5c:64:71:fb:69:7d:b3:be:8b:f3:7c:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:79:D1:75:B4:87:00:19:15:63:26:45:E1:1E:96:9E:68:92:DA
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:03:5d:46:75:85:c8:aa:7a:b8:27:b9:6b:43:66:0a:fd:
         2d:32:84:b3:0a:db:2a:97:83:94:a4:b4:8d:3d:d4:52:1c:e7:
         d1:40:f8:a9:b7:33:90:64:ae:11:26:28:6b:e3:fe:7f:0a:0f:
         f9:23:09:02:53:fc:ba:d6:bd:5c:b4:1c:ec:8d:65:c6:aa:7c:
         f2:7c:49:75:a1:84:5a:ef:1a:8a:94:69:79:19:76:9b:e2:c3:
         b9:68:25:4e:0b:cd:3b:32:78:ae:b5:60:51:cc:95:d2:e1:ac:
         89:40:a1:38:f6:e7:1d:82:d3:72:c6:f1:19:58:6c:a2:d6:38:
         cb:2c:f6:06:66:12:70:ff:93:39:d8:4e:7d:dd:ea:e9:2d:8d:
         1b:95:a6:86:5c:2d:08:a4:50:7d:65:94:7a:dd:50:86:cc:06:
         fc:86:d1:5c:ff:67:34:22:b8:fd:cd:89:45:2d:a6:b7:2f:8f:
         d3:de:79:0e:68:d7:1a:ef:bd:63:40:7f:8d:17:2e:63:04:c2:
         8c:bf:ba:bc:24:b7:e3:f6:e7:66:8d:e9:c7:fd:f5:af:c9:0e:
         e5:c7:07:55:76:2e:f1:23:c8:f8:3c:9e:06:34:4f:f0:bf:a7:
         d1:2c:2b:ca:bd:a3:5b:b5:b3:d1:5c:57:f9:20:97:80:cc:ce:
         fa:bb:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:58 2026 by rpki-client