Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34342e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e34342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          1TQtE4rjshtfwzsOrICJV3QGjj1wCy/vDB3EqzqE6GA=
Subject key identifier:   56:ED:BC:9E:03:EA:F1:C8:46:46:77:E0:6A:70:7E:FE:BF:27:81:EC
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       260FBD08DA9372077B89980258B82A4FADB42C0E
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     4230
IP address blocks:        201.44.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0f:bd:08:da:93:72:07:7b:89:98:02:58:b8:2a:4f:ad:b4:2c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:74:50:e6:52:ae:fe:6b:ee:f3:db:7a:74:
                    0f:aa:da:9c:34:4c:e1:06:98:9e:6c:db:a6:38:14:
                    a3:fd:c1:6f:12:e4:b0:27:97:d3:83:7f:be:d9:f5:
                    65:83:5a:ef:2c:68:c9:92:14:68:a7:c7:2c:b0:19:
                    b5:d2:17:03:86:20:8e:3f:28:d1:51:e2:83:b2:7d:
                    89:ce:0d:75:5b:b1:f9:86:2f:6b:f0:f1:19:90:d5:
                    21:32:73:e4:b6:de:27:15:5f:25:61:41:11:20:34:
                    aa:33:b3:12:b0:99:3e:d7:f1:61:d1:45:af:5d:89:
                    e7:5d:cc:c6:ca:23:1e:de:ed:1e:42:be:35:1c:94:
                    1f:73:3d:9c:49:03:6c:22:11:51:92:fd:af:ed:47:
                    4b:9a:67:ac:2e:3e:f5:23:7e:bf:52:f2:c7:39:8d:
                    4d:06:88:6f:19:5d:75:a7:1a:72:02:98:a8:fa:17:
                    4c:18:16:5a:02:33:4a:84:30:a8:78:50:72:cc:e4:
                    bb:b5:a0:70:94:80:7f:5c:4b:7f:4e:f1:dc:91:2c:
                    f7:86:c5:8f:93:bb:ab:a6:6a:34:79:f3:23:d9:81:
                    db:3c:8a:e1:fd:b0:53:e8:47:a7:64:c6:4d:46:77:
                    15:7f:6f:51:04:50:84:ce:0f:cd:70:b0:2f:b2:29:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:ED:BC:9E:03:EA:F1:C8:46:46:77:E0:6A:70:7E:FE:BF:27:81:EC
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:86:54:67:fd:2f:ab:53:9d:e1:29:3d:91:c7:d5:f7:fd:94:
         89:29:ed:cc:56:33:52:f2:d0:a6:f4:ca:31:ff:56:be:36:d1:
         44:09:6e:f7:23:95:00:ff:52:50:37:fa:99:47:a5:15:5f:2d:
         18:b9:e8:94:65:a0:64:47:d2:9c:4f:74:78:2b:d3:8a:43:24:
         7a:fe:6b:89:45:7d:94:2f:1d:2e:49:5b:71:9f:c3:0a:9b:09:
         a1:47:21:b2:82:83:b8:04:40:c4:c5:8e:4c:de:61:af:11:c5:
         df:75:65:f5:b0:40:c7:2a:12:5b:0d:70:5a:73:c3:f8:53:7d:
         cd:0c:0e:14:d9:c5:d8:bd:4c:b5:e8:b2:97:c6:ef:38:cb:9a:
         a1:33:20:d9:ef:3e:4a:82:3b:9a:56:99:09:ce:37:16:8f:2c:
         6c:56:77:f0:10:e9:0b:07:83:65:7e:af:cc:b0:01:ca:f2:9f:
         c1:88:2f:95:8a:01:39:fd:7f:99:f1:17:34:17:9d:e9:59:e4:
         b2:83:a6:0b:ad:4d:e0:0b:cd:bd:c2:59:d2:a5:6e:c1:a8:30:
         d9:18:55:16:dd:c9:54:5c:2b:0e:12:aa:83:6e:6e:2d:cb:e5:
         5a:36:e9:d9:73:3b:e0:e7:86:dc:f3:80:a0:04:e8:ce:db:4d:
         ab:10:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:17 2026 by rpki-client