Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          u/E06fsWeOeDbg4E0AuOHUxIsvazWKxyoMKa7s3nUFE=
Subject key identifier:   5D:F2:4D:32:6D:E9:08:49:88:0B:8A:10:A5:DE:5D:EE:38:E3:72:38
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1407AFA3BD99034DB5B34068B60E765C52060CD2
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     4230
IP address blocks:        200.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:07:af:a3:bd:99:03:4d:b5:b3:40:68:b6:0e:76:5c:52:06:0c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:2e:9b:9e:cd:1c:4d:c6:70:de:dd:99:5f:
                    9a:5c:b0:a8:7c:cb:f3:0a:31:60:59:44:d8:20:0c:
                    27:8e:54:1a:cf:9f:6c:4c:b3:fe:8b:60:60:b6:37:
                    b5:9a:c9:c5:59:77:f4:5a:c9:74:bf:32:cd:08:c8:
                    93:9c:8a:df:2e:46:a9:13:74:01:df:8e:cc:94:97:
                    e1:9f:29:11:79:e6:1f:80:e2:bd:69:d3:9b:9b:bc:
                    7e:e3:f8:c6:43:ab:c7:fd:e8:0d:0a:6a:48:d1:a7:
                    1a:b4:12:11:27:41:32:72:21:af:94:aa:18:29:74:
                    25:30:fb:55:91:62:58:a2:7b:22:0e:60:00:87:5e:
                    36:3a:eb:93:ed:2c:1f:a8:f4:8a:74:1d:95:74:3a:
                    24:48:2b:4d:62:db:47:21:2a:cd:04:59:2d:d8:c1:
                    6b:71:9d:f7:05:7f:7b:d2:72:21:56:dd:16:31:53:
                    b3:a5:47:81:29:d4:93:70:38:d0:8d:c3:1b:c9:21:
                    05:b0:7e:00:d1:4f:77:d0:3a:3e:2a:4b:45:a5:8c:
                    f8:45:03:af:cb:13:96:03:13:96:1d:99:c1:d8:60:
                    db:37:f7:09:47:cd:ca:cc:51:15:16:ed:3c:1b:af:
                    6d:b1:50:74:47:e0:3c:2a:27:f3:fb:2b:63:fd:74:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:4D:32:6D:E9:08:49:88:0B:8A:10:A5:DE:5D:EE:38:E3:72:38
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:05:97:f1:ed:30:39:5f:51:2a:d6:01:0f:5c:cc:95:20:
         38:30:ae:98:6c:00:0e:df:a1:0b:28:81:86:ae:d2:c2:70:3c:
         7e:06:63:c8:25:e0:c7:02:17:56:e9:8b:c6:bb:c9:5e:e8:7a:
         7a:5a:76:3f:4e:f7:00:06:a2:76:b0:42:b8:f8:a3:a0:87:80:
         40:cf:c9:8d:f0:cc:d6:b3:81:a7:39:c1:db:3b:94:d5:a7:7e:
         9f:41:78:2f:1e:b8:57:c6:76:62:c8:3a:22:ff:c4:5b:8c:44:
         82:fc:10:07:fb:06:fe:ec:ae:97:a0:94:6b:1d:c7:9e:de:79:
         3e:10:8c:72:60:af:81:43:87:cb:a7:f3:a2:6f:cc:cf:1f:ca:
         24:0b:82:4b:ea:a1:81:83:57:0f:ff:30:ea:4d:be:ac:33:63:
         9c:8c:7a:35:e6:d8:f5:5e:b1:2e:cd:01:4a:e0:f2:e6:45:09:
         d3:bc:24:9c:dd:c7:ff:a1:07:c7:51:2b:6d:90:bc:74:9c:ea:
         93:6a:25:84:68:66:71:0c:da:b3:47:5f:8f:92:33:83:6d:9a:
         d1:d5:49:f3:5d:0b:df:80:9c:c5:94:03:41:2f:03:05:3f:ad:
         3d:e1:de:5d:31:6e:7b:67:7e:fe:a0:6d:38:d4:43:6a:3e:0c:
         a7:c6:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:34 2026 by rpki-client