Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          KVcvj0XJB6VhpekqKgzHnqQ7SOJI6l96qFQxltcbd1Q=
Subject key identifier:   3C:24:D6:7D:11:2A:1A:6E:5D:F9:6A:50:CE:1A:5F:0E:C0:6C:ED:07
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       16489BA52887B68D1061C118210A96498FC91CA5
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     4230
IP address blocks:        200.248.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:48:9b:a5:28:87:b6:8d:10:61:c1:18:21:0a:96:49:8f:c9:1c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:45:63:18:60:3e:cd:cb:d8:d6:16:e8:83:
                    6c:e6:14:18:c2:e7:b4:ad:42:68:a7:89:74:ec:c6:
                    76:09:2f:54:73:2a:73:db:5c:b7:07:72:f0:1d:97:
                    d9:21:85:3c:19:09:14:49:e4:d4:6b:ba:e3:13:0d:
                    c9:57:4a:ed:4f:2f:d2:36:20:40:f5:09:f7:68:fb:
                    52:84:64:5b:c1:55:3c:fe:cf:1f:52:2f:cf:d3:f6:
                    1d:98:c9:07:d1:a2:5f:4b:a8:91:4e:e3:19:b8:34:
                    68:2e:83:4d:f5:5b:59:b4:7e:c4:98:ed:7d:ec:b9:
                    4e:eb:4d:86:1b:3d:b2:47:c5:2d:43:a4:51:05:f7:
                    ad:ac:d6:5c:31:8b:59:68:0a:cb:3a:87:1a:59:b1:
                    5b:15:22:78:7b:ab:52:8e:7f:d5:5c:78:4a:3a:53:
                    39:8e:37:79:ac:f8:28:ae:65:49:6d:6b:f0:9c:49:
                    ad:4b:96:4e:ff:a3:9b:a2:e2:32:c3:e5:78:98:1d:
                    cd:e7:39:94:a5:9b:78:93:cd:aa:69:12:73:24:73:
                    06:f0:71:b9:9a:6d:c1:fc:8f:84:eb:40:3c:14:86:
                    b1:fb:9d:c6:a9:1a:35:ee:99:0c:8a:e3:ab:35:a5:
                    77:54:3c:c4:2e:a3:28:b0:37:87:5a:d0:5a:6f:da:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:D6:7D:11:2A:1A:6E:5D:F9:6A:50:CE:1A:5F:0E:C0:6C:ED:07
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:18:cb:79:0c:55:26:45:17:42:73:d3:81:df:d8:ca:75:
         38:cb:90:a0:b0:5e:79:62:22:e1:2a:22:4b:b4:7e:92:79:4a:
         73:07:2c:2c:7f:8a:ba:4b:68:f3:31:82:7d:52:64:d6:23:fa:
         f3:c8:54:6a:bc:2d:6a:d5:cc:1b:73:5b:c0:ec:d7:f4:ce:ab:
         69:95:c5:1f:0c:6e:c4:1e:7e:da:36:1e:80:6a:45:ae:3b:e7:
         ba:df:e1:f6:34:c0:0d:14:c6:5d:5d:75:db:73:83:e8:da:de:
         c4:3c:c0:0b:05:3a:b5:3d:f8:49:54:da:03:1c:c9:52:41:69:
         06:f7:47:d1:7a:18:af:ca:6e:27:ab:7c:48:79:22:46:38:01:
         91:60:2d:88:12:1b:b7:7a:94:ff:6e:14:53:4d:a1:2d:d8:38:
         d5:ab:5b:56:32:4b:a7:f7:7a:ee:d0:7b:10:58:1a:b6:83:6c:
         31:6f:d1:d8:7d:8b:1b:c7:d7:b1:1c:09:ef:b2:06:33:74:55:
         da:33:dc:1e:42:68:9e:59:da:64:1b:17:09:44:ac:31:f5:39:
         54:5b:9d:e6:69:4e:ff:60:cc:2e:4b:df:66:4e:e5:89:a8:c9:
         14:d9:a3:dc:3f:fb:9d:f1:33:fb:93:28:21:65:79:83:84:92:
         c3:e2:9a:2b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUFkibpSiHto0QYcEYIQqWSY/JHKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkExMDQ1NjMxODYwM0VDRENC
RDhENjE2RTg4MzZDRTYxNDE4QzJFN0I0QUQ0MjY4QTc4OTc0RUNDNjc2MDkyRjU0
NzMyQTczREI1Q0I3MDc3MkYwMUQ5N0Q5MjE4NTNDMTkwOTE0NDlFNEQ0NkJCQUUz
MTMwREM5NTc0QUVENEYyRkQyMzYyMDQwRjUwOUY3NjhGQjUyODQ2NDVCQzE1NTND
RkVDRjFGNTIyRkNGRDNGNjFEOThDOTA3RDFBMjVGNEJBODkxNEVFMzE5QjgzNDY4
MkU4MzRERjU1QjU5QjQ3RUM0OThFRDdERUNCOTRFRUI0RDg2MUIzREIyNDdDNTJE
NDNBNDUxMDVGN0FEQUNENjVDMzE4QjU5NjgwQUNCM0E4NzFBNTlCMTVCMTUyMjc4
N0JBQjUyOEU3RkQ1NUM3ODRBM0E1MzM5OEUzNzc5QUNGODI4QUU2NTQ5NkQ2QkYw
OUM0OUFENEI5NjRFRkZBMzlCQTJFMjMyQzNFNTc4OTgxRENERTczOTk0QTU5Qjc4
OTNDREFBNjkxMjczMjQ3MzA2RjA3MUI5OUE2REMxRkM4Rjg0RUI0MDNDMTQ4NkIx
RkI5REM2QTkxQTM1RUU5OTBDOEFFM0FCMzVBNTc3NTQzQ0M0MkVBMzI4QjAzNzg3
NUFEMDVBNkZEQTJGQzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuhBFYxhgPs3L2NYW6INs5hQYwue0rUJop4l07MZ2CS9Ucypz21y3
B3LwHZfZIYU8GQkUSeTUa7rjEw3JV0rtTy/SNiBA9Qn3aPtShGRbwVU8/s8fUi/P
0/YdmMkH0aJfS6iRTuMZuDRoLoNN9VtZtH7EmO197LlO602GGz2yR8UtQ6RRBfet
rNZcMYtZaArLOocaWbFbFSJ4e6tSjn/VXHhKOlM5jjd5rPgormVJbWvwnEmtS5ZO
/6ObouIyw+V4mB3N5zmUpZt4k82qaRJzJHMG8HG5mm3B/I+E60A8FIax+53GqRo1
7pkMiuOrNaV3VDzELqMosDeHWtBab9ovyQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FDwk1n0RKhpuXflqUM4aXw7AbO0HMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNDM4MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPgwDQYJ
KoZIhvcNAQELBQADggEBAJTHGMt5DFUmRRdCc9OB39jKdTjLkKCwXnliIuEqIku0
fpJ5SnMHLCx/irpLaPMxgn1SZNYj+vPIVGq8LWrVzBtzW8Ds1/TOq2mVxR8MbsQe
fto2HoBqRa4757rf4fY0wA0Uxl1dddtzg+ja3sQ8wAsFOrU9+ElU2gMcyVJBaQb3
R9F6GK/KbierfEh5IkY4AZFgLYgSG7d6lP9uFFNNoS3YONWrW1YyS6f3eu7QexBY
GraDbDFv0dh9ixvH17EcCe+yBjN0Vdoz3B5CaJ5Z2mQbFwlErDH1OVRbneZpTv9g
zC5L32ZO5YmoyRTZo9w/+53xM/uTKCFleYOEksPimis=
-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:40 2026 by rpki-client