Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          AvcYYzX7kgJ5Yed2uCHDy+VJ/06B2lvFARDSCEMa6Gg=
Subject key identifier:   89:9B:C2:CE:CA:CE:09:5F:DA:37:B9:A2:46:02:4A:34:8E:4F:9D:47
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       7D68FFE5103790E245DD7E842A64DD614C679793
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     4230
IP address blocks:        200.249.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:68:ff:e5:10:37:90:e2:45:dd:7e:84:2a:64:dd:61:4c:67:97:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:a1:95:9a:1d:e5:1a:2c:67:4a:6c:d2:77:
                    68:4a:f8:db:5b:f7:65:11:60:26:3f:36:1d:b7:e5:
                    80:67:04:04:9d:15:40:8b:6e:dc:16:49:b5:3c:79:
                    93:aa:96:18:41:b1:ba:1d:36:e6:8e:4e:c5:e8:41:
                    0d:14:5d:bd:16:dd:80:28:13:48:92:7d:10:57:32:
                    b5:17:f9:5d:c5:53:54:1d:8e:a3:88:72:ca:b2:c1:
                    38:fb:21:7a:29:a2:28:b7:c8:cb:f7:37:95:61:c5:
                    e3:a0:c1:45:c9:87:a6:af:c4:40:1d:fb:a3:21:0f:
                    a2:ad:86:ca:8b:8a:20:f5:78:dc:a0:23:49:ac:b8:
                    bb:a9:ea:14:e0:94:7c:15:99:47:4b:6c:11:96:64:
                    a4:dd:2a:4a:bf:bf:ff:7e:c4:d4:bd:c2:1f:9a:40:
                    34:43:38:14:1b:be:ed:f6:db:39:46:bb:cc:4c:f0:
                    c5:6a:75:5c:6b:33:fe:0a:71:d7:40:66:b1:0c:cb:
                    3d:93:c2:0e:57:88:14:13:c7:8a:cd:6e:ca:df:9c:
                    62:de:58:75:f4:5f:0a:12:d7:ee:11:91:9c:5d:22:
                    85:94:76:c2:cf:4e:60:f5:a5:21:bc:54:c2:69:89:
                    73:ee:7d:3b:14:02:86:6c:ec:58:57:1c:6c:1d:1e:
                    41:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9B:C2:CE:CA:CE:09:5F:DA:37:B9:A2:46:02:4A:34:8E:4F:9D:47
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:e2:cc:1c:e9:56:a8:ba:b9:25:cf:21:23:ec:50:c4:85:04:
         73:fd:c4:64:71:44:9f:45:a4:08:d8:d1:56:4a:d3:a1:1a:a1:
         61:8b:c9:a3:42:8a:2a:b6:2e:66:db:25:09:27:c5:0f:c5:17:
         c2:8d:a5:8c:e5:78:8d:f8:71:fd:29:34:48:07:9d:54:63:0f:
         94:b0:f1:de:83:06:20:f7:4d:98:e4:b3:35:9f:ad:40:99:e0:
         85:7c:b9:8f:cc:f2:f7:c6:8d:d4:46:2f:a7:9f:d9:a5:13:09:
         6d:f2:a3:1e:46:b9:21:03:dd:05:65:94:c4:15:be:04:21:df:
         7f:2a:67:bb:11:cf:a2:f7:d4:66:db:21:d7:ed:b7:77:91:19:
         ce:99:d0:06:df:e9:30:af:db:45:c5:3e:c7:16:9f:90:57:bb:
         d6:af:89:d1:1a:a6:7b:db:5e:66:16:09:45:43:96:b9:92:23:
         51:a3:09:4d:9e:02:11:d6:be:1a:32:3f:19:74:cc:a7:f3:8c:
         9c:6e:03:c8:78:c0:d0:78:d5:f2:ad:40:36:00:19:dc:5d:d4:
         48:53:29:44:86:96:db:5b:4c:ec:42:5c:a8:20:80:92:b2:a0:
         d8:e9:da:69:73:82:eb:ea:70:41:df:df:0e:7b:d0:ea:8a:ba:
         37:28:db:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:31 2026 by rpki-client