Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          jxJro1DkS0ej6q7IX8Vx/EN9xz5XyS0TDF4Fn23jcdA=
Subject key identifier:   38:BC:2E:84:71:3A:B4:C6:F6:B9:79:08:9E:29:DF:5C:68:53:72:4F
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       020BDDC9381750826B604C0068C31B5BC27FDD5F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     4230
IP address blocks:        200.251.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0b:dd:c9:38:17:50:82:6b:60:4c:00:68:c3:1b:5b:c2:7f:dd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:3d:fe:3f:8c:8d:38:af:e5:51:86:ff:1b:
                    8c:b5:3d:11:9b:98:cb:bd:d3:fc:8b:d2:6a:9f:b6:
                    bc:08:e4:7d:c5:be:d4:4d:81:98:87:3e:8b:42:31:
                    37:a3:fa:a2:0b:e6:11:5f:0c:de:fd:61:6d:ec:b8:
                    86:c1:21:a6:ee:e7:94:25:09:88:70:ec:90:a5:d0:
                    65:a4:a3:d3:ca:eb:31:1d:a1:bd:fe:d5:f0:a2:00:
                    74:02:de:e4:7d:46:86:58:b1:3f:ca:54:dd:a9:5f:
                    9b:11:1e:c0:97:16:c3:51:e8:73:99:d4:9d:fc:c2:
                    67:e2:e5:34:bb:d3:06:cd:c8:65:5c:d9:70:d7:58:
                    f3:56:24:04:7b:e5:2a:9c:48:38:c2:c9:33:11:f6:
                    23:e0:d9:d8:f5:15:58:4b:77:1e:aa:5a:2b:26:17:
                    9d:5b:a5:ca:e6:4a:be:c4:35:8a:69:2f:95:53:8e:
                    db:25:e0:71:af:dd:41:74:27:b8:df:3a:0d:e7:cd:
                    4b:0c:d7:c5:6d:ca:87:5e:6a:99:d7:9c:5a:4b:7b:
                    60:6e:bc:eb:d1:01:40:b6:c1:41:94:d6:01:72:f9:
                    e6:0d:1e:b8:b3:7d:34:8a:79:3c:e7:85:52:fa:3d:
                    62:2d:64:6b:46:fe:61:d2:69:cf:a9:e2:14:52:ad:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BC:2E:84:71:3A:B4:C6:F6:B9:79:08:9E:29:DF:5C:68:53:72:4F
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:85:66:48:8f:c1:56:3b:43:61:92:97:67:4d:af:fc:0b:26:
         24:33:df:45:20:0e:5f:0f:61:a4:4b:97:5d:13:20:d5:52:f2:
         40:b8:5d:a1:36:a3:e0:02:d7:ce:1c:27:db:4c:28:4f:86:2f:
         65:73:54:1f:40:36:4b:df:2d:2b:b5:a0:90:bd:bb:a6:d4:2c:
         aa:f4:8e:05:a0:a1:12:58:18:70:d1:5c:99:02:f2:8b:69:dc:
         16:f9:56:f9:2e:a1:49:5c:a8:82:14:a6:3f:47:6b:a3:58:a9:
         03:1f:73:6b:15:4c:f1:e9:bb:50:29:b8:bf:91:63:eb:a9:45:
         51:2a:dd:5f:d2:8a:fb:3e:73:37:b7:fc:f2:42:3b:b5:34:de:
         28:e7:47:a4:d8:2f:89:3f:76:44:de:c2:eb:11:94:15:a5:90:
         78:59:9c:9c:76:14:9f:57:4f:d5:56:ca:6b:92:86:f0:a9:e8:
         76:f4:62:17:3b:20:f4:c9:38:e3:98:93:27:b1:a0:4f:25:53:
         6a:97:2d:fb:34:e5:b3:85:f9:d4:11:a7:ba:d5:66:0a:82:ef:
         ca:d5:ef:94:68:a3:a4:7e:92:ed:50:d0:e7:24:66:c8:09:43:
         34:d5:74:2b:95:29:10:f4:59:51:8b:a2:c5:55:7c:71:2f:ae:
         38:1c:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:44 2026 by rpki-client