Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          0oKCN55uA0FsLLTZShVom/USitm6BOrFZZH4badGAys=
Subject key identifier:   C5:AB:2F:A3:20:C4:4A:ED:CA:FF:F5:7D:D0:56:8D:FB:E8:57:64:37
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       73EA5F0EADEFEA857D78585DFFC0839C8DD2860C
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     4230
IP address blocks:        200.255.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ea:5f:0e:ad:ef:ea:85:7d:78:58:5d:ff:c0:83:9c:8d:d2:86:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:31:61:48:6a:3b:cb:1f:c2:27:73:43:e9:
                    ed:6f:3a:d4:69:18:29:39:a9:2a:41:af:a5:3e:37:
                    23:a5:2f:47:ee:b1:47:35:99:b1:8e:11:17:0e:b5:
                    bb:4c:85:21:14:8b:1b:de:79:88:0c:26:07:55:2d:
                    08:b0:ab:d5:d0:71:21:ef:78:99:22:c4:0a:61:b0:
                    ce:c5:85:f3:5c:8a:d9:0a:07:89:95:46:47:e6:85:
                    11:e7:fd:83:eb:f6:49:1d:5a:1f:fd:a9:48:e6:6b:
                    0d:e4:95:c1:10:5a:f7:41:81:c1:c1:c5:df:c1:be:
                    bd:f7:4b:74:05:e1:fb:78:99:7c:74:02:ce:5b:a2:
                    7b:38:d0:e6:6f:88:40:bd:4d:a1:d2:e2:3a:09:ec:
                    8b:5e:02:cf:7a:66:44:02:20:0e:70:b7:13:41:7c:
                    64:b8:6c:d6:c8:c0:d2:44:d0:25:43:c0:28:3a:62:
                    6e:0f:f2:8f:e1:50:d3:01:07:11:6b:38:1a:2f:38:
                    09:2f:99:87:70:4a:cd:22:82:b5:a2:ec:65:22:1b:
                    47:67:74:0b:a1:3f:f2:3d:d1:9f:55:ab:91:81:d5:
                    4a:aa:64:78:72:b9:58:c1:6c:96:da:bc:83:9f:05:
                    95:09:e1:76:77:fb:9a:cb:85:b1:c6:e0:31:5e:9e:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:2F:A3:20:C4:4A:ED:CA:FF:F5:7D:D0:56:8D:FB:E8:57:64:37
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:cd:f7:94:88:81:74:7d:b8:36:03:e0:d0:1d:11:da:3d:
         b9:30:a9:f2:a6:7b:ec:8e:d5:f9:89:86:39:e3:b0:10:be:4a:
         07:6d:0c:b5:7c:e5:ca:70:71:cb:42:52:1f:cd:90:53:8d:66:
         61:11:ae:1c:b5:39:cb:cd:0e:39:2e:6f:79:29:e8:b8:ab:f2:
         57:ed:7f:62:cb:91:f1:4c:4b:aa:3c:60:71:46:3b:11:e2:cb:
         de:53:ac:40:98:71:91:22:40:6a:cb:f0:12:1b:f7:2d:ee:1d:
         1f:ed:8d:6e:64:78:e4:05:b3:94:91:be:30:82:1f:f9:fe:ea:
         c2:cd:46:86:43:97:08:01:c1:e7:f2:a3:02:38:70:93:09:4c:
         f3:70:96:46:ca:3c:45:89:9b:32:3c:81:d9:cb:00:f4:27:4b:
         cb:8c:4d:19:5c:d6:1e:f5:66:f3:bf:64:e2:fc:d4:c7:99:c1:
         8b:af:3f:ee:28:46:48:f7:59:80:ed:3b:64:c2:ea:06:34:d1:
         76:18:6a:70:c1:98:5d:30:1f:b5:46:41:07:bf:57:1c:09:c2:
         05:97:ff:d7:e9:04:06:f0:27:70:79:ff:21:6f:3f:ce:72:0e:
         76:07:92:59:43:ab:98:0a:01:45:bf:42:8b:1f:f1:7e:a7:55:
         89:c9:a1:56
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUc+pfDq3v6oV9eFhd/8CDnI3ShgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNjAyMDQxOTU1MDJaFw0yNzAyMDMyMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTMyOTMxNjE0ODZBM0JDQjFG
QzIyNzczNDNFOUVENkYzQUQ0NjkxODI5MzlBOTJBNDFBRkE1M0UzNzIzQTUyRjQ3
RUVCMTQ3MzU5OUIxOEUxMTE3MEVCNUJCNEM4NTIxMTQ4QjFCREU3OTg4MEMyNjA3
NTUyRDA4QjBBQkQ1RDA3MTIxRUY3ODk5MjJDNDBBNjFCMENFQzU4NUYzNUM4QUQ5
MEEwNzg5OTU0NjQ3RTY4NTExRTdGRDgzRUJGNjQ5MUQ1QTFGRkRBOTQ4RTY2QjBE
RTQ5NUMxMTA1QUY3NDE4MUMxQzFDNURGQzFCRUJERjc0Qjc0MDVFMUZCNzg5OTdD
NzQwMkNFNUJBMjdCMzhEMEU2NkY4ODQwQkQ0REExRDJFMjNBMDlFQzhCNUUwMkNG
N0E2NjQ0MDIyMDBFNzBCNzEzNDE3QzY0Qjg2Q0Q2QzhDMEQyNDREMDI1NDNDMDI4
M0E2MjZFMEZGMjhGRTE1MEQzMDEwNzExNkIzODFBMkYzODA5MkY5OTg3NzA0QUNE
MjI4MkI1QTJFQzY1MjIxQjQ3Njc3NDBCQTEzRkYyM0REMTlGNTVBQjkxODFENTRB
QUE2NDc4NzJCOTU4QzE2Qzk2REFCQzgzOUYwNTk1MDlFMTc2NzdGQjlBQ0I4NUIx
QzZFMDMxNUU5RTY3ODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4ykxYUhqO8sfwidzQ+ntbzrUaRgpOakqQa+lPjcjpS9H7rFHNZmx
jhEXDrW7TIUhFIsb3nmIDCYHVS0IsKvV0HEh73iZIsQKYbDOxYXzXIrZCgeJlUZH
5oUR5/2D6/ZJHVof/alI5msN5JXBEFr3QYHBwcXfwb6990t0BeH7eJl8dALOW6J7
ONDmb4hAvU2h0uI6CeyLXgLPemZEAiAOcLcTQXxkuGzWyMDSRNAlQ8AoOmJuD/KP
4VDTAQcRazgaLzgJL5mHcErNIoK1ouxlIhtHZ3QLoT/yPdGfVauRgdVKqmR4crlY
wWyW2ryDnwWVCeF2d/uay4WxxuAxXp5ngQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FMWrL6MgxErtyv/1fdBWjfvoV2Q3MB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNTM1MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyP8wDQYJ
KoZIhvcNAQELBQADggEBAHjGzfeUiIF0fbg2A+DQHRHaPbkwqfKme+yO1fmJhjnj
sBC+SgdtDLV85cpwcctCUh/NkFONZmERrhy1OcvNDjkub3kp6Lir8lftf2LLkfFM
S6o8YHFGOxHiy95TrECYcZEiQGrL8BIb9y3uHR/tjW5keOQFs5SRvjCCH/n+6sLN
RoZDlwgBwefyowI4cJMJTPNwlkbKPEWJmzI8gdnLAPQnS8uMTRlc1h71ZvO/ZOL8
1MeZwYuvP+4oRkj3WYDtO2TC6gY00XYYanDBmF0wH7VGQQe/VxwJwgWX/9fpBAbw
J3B5/yFvP85yDnYHkllDq5gKAUW/Qosf8X6nVYnJoVY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:21 2026 by rpki-client