Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34352e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e34352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          fv2c+KWnpFWqqnx3BU6eqMf/ERNor6GUU1tfSENKZzU=
Subject key identifier:   48:C3:05:89:E5:83:36:D6:9C:23:F3:4C:C2:9B:EE:5D:A7:56:69:25
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       7BE4CA8085395BE475D9186F6E7C08AA96E54A02
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     4230
IP address blocks:        201.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:ca:80:85:39:5b:e4:75:d9:18:6f:6e:7c:08:aa:96:e5:4a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=3082010A0282010100C438702EAB94F5F16526EBAD62062CAA916505089BF264CDCD7FE9B6718325E32DFB2856F133B9AEC738AE7D52EBDC3580BB660E0565138949AA4678DABC907A4D3605547187E184AD94CF533576867F6E5C9A351DE6A48BB648FC93499CCDF6DDB822C46E9DE9FEDB49573D2C15CFF0E6BAACE7DBD98321B514418BC757DC092CCBCC86497728EA399334DD626D8F5069C47BB8A4F1F21679399062244C06DFA2C1683EDBD8C4D3D56FAAB3B656CD727CB8FE19CFE28E6231D5F44CC808F0C7A01B28D33616551E892118C3C93D35D4444A8D9218F9FA1776ACFF943861E62FF26C0702D65B71EC06ECAEAAD20BC2A8ED6991E142F7BE84F8BECE56FC0D11DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:70:2e:ab:94:f5:f1:65:26:eb:ad:62:06:
                    2c:aa:91:65:05:08:9b:f2:64:cd:cd:7f:e9:b6:71:
                    83:25:e3:2d:fb:28:56:f1:33:b9:ae:c7:38:ae:7d:
                    52:eb:dc:35:80:bb:66:0e:05:65:13:89:49:aa:46:
                    78:da:bc:90:7a:4d:36:05:54:71:87:e1:84:ad:94:
                    cf:53:35:76:86:7f:6e:5c:9a:35:1d:e6:a4:8b:b6:
                    48:fc:93:49:9c:cd:f6:dd:b8:22:c4:6e:9d:e9:fe:
                    db:49:57:3d:2c:15:cf:f0:e6:ba:ac:e7:db:d9:83:
                    21:b5:14:41:8b:c7:57:dc:09:2c:cb:cc:86:49:77:
                    28:ea:39:93:34:dd:62:6d:8f:50:69:c4:7b:b8:a4:
                    f1:f2:16:79:39:90:62:24:4c:06:df:a2:c1:68:3e:
                    db:d8:c4:d3:d5:6f:aa:b3:b6:56:cd:72:7c:b8:fe:
                    19:cf:e2:8e:62:31:d5:f4:4c:c8:08:f0:c7:a0:1b:
                    28:d3:36:16:55:1e:89:21:18:c3:c9:3d:35:d4:44:
                    4a:8d:92:18:f9:fa:17:76:ac:ff:94:38:61:e6:2f:
                    f2:6c:07:02:d6:5b:71:ec:06:ec:ae:aa:d2:0b:c2:
                    a8:ed:69:91:e1:42:f7:be:84:f8:be:ce:56:fc:0d:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C3:05:89:E5:83:36:D6:9C:23:F3:4C:C2:9B:EE:5D:A7:56:69:25
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.45.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c2:da:4b:cb:9c:99:ab:08:fc:90:b5:6f:9f:39:03:71:6d:42:
         1f:80:43:92:d1:f5:7f:aa:2a:a5:88:1a:81:5e:b1:f9:69:76:
         0a:da:bb:60:3d:84:eb:19:66:f3:34:ff:b1:93:74:97:2b:32:
         d9:d2:3c:b5:ed:72:55:59:92:cf:f8:21:cf:bf:5f:f8:15:52:
         8d:36:31:ea:56:5d:ee:55:6b:9b:4e:8e:67:64:71:79:a8:21:
         42:7a:74:b5:4a:f0:fb:1b:3b:cf:38:d9:fd:24:43:9c:51:16:
         cd:c8:0c:e7:a9:f5:f8:80:1e:7e:71:95:2c:a8:f1:fe:15:55:
         45:91:aa:65:ea:8d:7c:29:96:02:ff:69:25:52:be:89:d7:5a:
         12:fe:ce:05:9e:7d:9f:15:a1:b1:c2:8a:97:17:af:d4:30:c3:
         4a:d5:fc:aa:43:74:ed:7d:6f:fb:db:2d:d3:5a:42:1d:4e:8b:
         43:86:2d:e4:92:78:7a:f9:ad:f9:d4:89:13:09:cd:1c:94:c2:
         fd:cf:0c:fd:b0:e3:61:fb:d9:a3:7f:cb:86:6b:4a:3e:95:2b:
         15:53:ce:c3:64:eb:51:b0:cc:32:07:30:46:de:87:12:51:49:
         b5:9a:91:1a:9a:dc:c4:c7:59:71:d8:16:2f:72:fb:f1:d9:ce:
         ba:fe:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:57 2026 by rpki-client