Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33302e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          nn64cJks9zHJzRfaSrg4feDpRrl0Sc0LoTYlIKGINEY=
Subject key identifier:   E0:10:DF:24:84:E5:9C:32:95:31:E0:13:2C:95:B7:2E:DA:97:18:77
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3BBFCDABC1F08ED7769361F9F9BB34B9536FD1D6
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     4230
IP address blocks:        201.30.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bf:cd:ab:c1:f0:8e:d7:76:93:61:f9:f9:bb:34:b9:53:6f:d1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:08:44:42:68:83:b3:07:99:75:67:19:27:
                    63:86:ad:69:8e:c4:3a:cb:a5:71:52:c2:2a:5a:bb:
                    e4:56:10:6e:88:9f:37:94:46:46:b6:c7:9b:ea:be:
                    04:e2:05:ab:ee:4a:89:c1:b0:0f:88:b4:09:4c:df:
                    57:d9:95:70:4d:a7:65:b2:14:42:b3:8a:ed:3f:22:
                    72:04:0f:aa:83:7b:8a:ab:80:2f:d1:c1:a2:0d:a3:
                    42:74:c2:c1:fd:49:75:f0:e5:ac:3a:11:b2:7d:da:
                    e1:33:de:02:cd:47:97:e5:70:6c:a0:0a:5b:e7:17:
                    d6:af:db:b9:1a:30:e1:1f:5e:8b:de:b7:09:e6:48:
                    50:45:dc:14:e1:e7:6f:8b:54:e4:be:90:98:8c:3b:
                    be:f2:cc:67:7c:b0:19:16:e5:b7:fc:3d:79:b2:b7:
                    86:6b:55:0f:74:f3:72:5a:8a:f8:8c:48:44:42:f9:
                    25:c9:af:cb:3e:b1:fd:c8:af:70:6a:2f:8c:1b:9b:
                    f1:7d:78:05:a3:57:29:a4:e9:15:df:99:b9:aa:c1:
                    76:5b:96:c2:65:ea:03:b5:54:48:5f:6b:50:08:a9:
                    bb:78:10:60:8d:31:e7:36:eb:91:8d:5d:d1:58:56:
                    d7:77:06:95:d7:40:c7:07:6d:8a:b4:a5:8b:07:0f:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:10:DF:24:84:E5:9C:32:95:31:E0:13:2C:95:B7:2E:DA:97:18:77
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:f5:01:c9:6e:bb:3f:a4:e2:8c:0b:dc:bc:df:3b:03:b9:7b:
         d2:f7:a9:6e:ca:b2:82:77:e5:bc:bb:89:4c:bd:a3:f8:1c:0e:
         f5:37:be:95:79:e9:fb:3d:57:ad:96:aa:56:55:71:d3:61:83:
         96:f3:10:68:3c:1a:2c:6d:dd:fe:91:24:29:2b:4c:d4:8f:e9:
         53:6c:dc:0f:4f:59:b8:f6:13:d0:49:22:7b:31:8b:56:ba:4d:
         78:13:75:37:1f:40:dd:94:00:80:c0:86:fe:84:de:be:ca:0c:
         75:89:04:62:f3:68:68:df:f6:69:14:99:89:65:00:c1:41:bf:
         cd:1b:84:28:8d:cc:6f:57:32:6a:78:96:62:ce:e2:4d:46:e2:
         ff:75:02:2d:2f:d2:f8:65:17:5a:a4:78:8c:83:27:8e:50:82:
         d5:cd:b9:9a:e6:6f:b8:98:8c:69:bd:61:07:09:f2:03:dc:ea:
         34:a5:c9:43:51:8c:2d:2e:0a:34:04:98:b4:d4:0f:7c:ea:03:
         b2:a8:17:1e:4c:55:f8:60:76:41:8d:a4:02:7b:1b:8d:0d:b3:
         17:ed:86:19:2f:f7:a6:b8:56:8b:70:3e:ab:3a:d8:38:e6:92:
         82:7d:88:45:17:ce:38:17:cb:33:e4:db:09:c8:02:e5:c3:b9:
         77:e2:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:13 2026 by rpki-client