Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e34332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e34332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          q93UBdFFmYe44NOn/NGpW2YYGFp3BCMXZOw7HCltbjc=
Subject key identifier:   AF:DC:A0:E1:8A:4C:B2:BE:D3:F1:32:59:60:06:6E:F6:2C:29:85:6D
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       39A39993CC17B48DDEA956659988349C34931D01
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e34332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Tue 19 May 2026 18:00:00 +0000
ROA not before:           Tue 19 May 2026 17:55:00 +0000
ROA not after:            Tue 18 May 2027 18:00:00 +0000
asID:                     4230
IP address blocks:        189.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a3:99:93:cc:17:b4:8d:de:a9:56:65:99:88:34:9c:34:93:1d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: May 19 17:55:00 2026 GMT
            Not After : May 18 18:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:42:99:a2:e2:8c:db:31:0d:18:20:63:27:
                    a4:ff:cd:34:f0:a8:74:bd:7b:2b:89:ec:3e:e0:db:
                    f5:98:70:1e:5f:84:e5:e6:44:9c:2c:ad:f0:26:77:
                    e1:f0:a4:08:b2:7e:05:84:33:8b:a0:36:17:c5:5e:
                    6f:6a:c5:92:48:dd:d4:ec:45:46:c8:ee:70:05:36:
                    f9:5a:6c:a7:ac:ba:68:18:bb:78:ec:fe:5c:48:f1:
                    5f:8f:3b:5e:50:67:22:31:e3:b1:cf:8a:dd:ff:8d:
                    06:ae:90:46:09:dc:93:4c:56:b4:05:a8:67:83:c3:
                    99:5f:8a:57:ba:e6:fe:22:85:32:54:2e:e9:5f:8f:
                    25:1f:82:9d:b5:61:6c:53:c3:b4:c7:5f:a8:c5:44:
                    15:5c:3b:b3:33:e1:51:f3:42:74:68:df:9d:6c:c9:
                    40:68:3d:4b:e1:18:a4:97:2e:f6:15:c0:65:b7:6c:
                    15:ab:b8:68:82:be:ff:58:c1:5d:c9:c3:5c:76:fc:
                    51:55:a2:fc:e9:29:07:14:cc:bc:45:66:7d:d9:62:
                    d1:b9:9c:b6:e3:d1:b3:f5:68:60:1e:37:79:98:4a:
                    45:b4:3a:17:1e:0b:01:a5:93:5d:f4:ff:8b:9a:69:
                    88:6f:c6:8e:c2:d3:ab:ae:18:6f:59:42:43:c6:23:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:A0:E1:8A:4C:B2:BE:D3:F1:32:59:60:06:6E:F6:2C:29:85:6D
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e34332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:fe:f4:85:2a:92:bb:a9:30:8a:45:47:d5:09:7d:a3:05:
         fa:21:dc:09:40:ba:44:17:1e:68:dc:c1:f8:a1:93:a7:03:54:
         9b:8a:ba:2d:f8:51:09:fe:48:ea:54:19:86:ae:e0:20:98:d5:
         88:49:78:d7:50:3d:2c:d4:15:b1:54:92:4c:cd:d1:19:be:f6:
         69:fd:20:6b:3c:49:6c:2d:b9:4b:31:3c:fa:7d:a7:69:1f:ff:
         57:89:e0:52:cd:6b:3b:b0:03:c6:3f:53:c4:4d:6b:99:2f:75:
         f4:9f:c1:51:cf:bd:50:a2:42:10:84:aa:9b:b3:67:1f:2e:2c:
         1d:83:74:c5:1d:f6:90:d2:8f:52:32:ff:f3:d3:5b:08:1b:a1:
         a5:0e:f7:59:7c:d2:b3:b8:9c:0a:30:47:c5:27:7a:98:e3:22:
         3c:f6:bd:fc:f1:cd:d9:e9:cb:a3:91:69:61:f8:06:d5:4f:b7:
         d5:85:ce:29:b2:0d:45:53:91:86:62:14:6c:8b:4b:4b:cf:3b:
         5e:43:2e:6c:0f:bb:28:ef:9f:17:57:29:f5:38:b9:fb:c7:5f:
         38:4c:af:37:2c:98:cd:b3:80:d3:d1:8d:8f:3a:46:9f:f9:52:
         fb:bf:5f:e0:ca:bb:29:9d:3b:70:ab:d1:92:65:50:38:30:b8:
         ef:a1:6d:80
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUOaOZk8wXtI3eqVZlmYg0nDSTHQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNjA1MTkxNzU1MDBaFw0yNzA1MTgxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk5MTQyOTlBMkUyOENEQjMx
MEQxODIwNjMyN0E0RkZDRDM0RjBBODc0QkQ3QjJCODlFQzNFRTBEQkY1OTg3MDFF
NUY4NEU1RTY0NDlDMkNBREYwMjY3N0UxRjBBNDA4QjI3RTA1ODQzMzhCQTAzNjE3
QzU1RTZGNkFDNTkyNDhEREQ0RUM0NTQ2QzhFRTcwMDUzNkY5NUE2Q0E3QUNCQTY4
MThCQjc4RUNGRTVDNDhGMTVGOEYzQjVFNTA2NzIyMzFFM0IxQ0Y4QURERkY4RDA2
QUU5MDQ2MDlEQzkzNEM1NkI0MDVBODY3ODNDMzk5NUY4QTU3QkFFNkZFMjI4NTMy
NTQyRUU5NUY4RjI1MUY4MjlEQjU2MTZDNTNDM0I0Qzc1RkE4QzU0NDE1NUMzQkIz
MzNFMTUxRjM0Mjc0NjhERjlENkNDOTQwNjgzRDRCRTExOEE0OTcyRUY2MTVDMDY1
Qjc2QzE1QUJCODY4ODJCRUZGNThDMTVEQzlDMzVDNzZGQzUxNTVBMkZDRTkyOTA3
MTRDQ0JDNDU2NjdERDk2MkQxQjk5Q0I2RTNEMUIzRjU2ODYwMUUzNzc5OTg0QTQ1
QjQzQTE3MUUwQjAxQTU5MzVERjRGRjhCOUE2OTg4NkZDNjhFQzJEM0FCQUUxODZG
NTk0MjQzQzYyMzFDNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuZFCmaLijNsxDRggYyek/8008Kh0vXsriew+4Nv1mHAeX4Tl5kSc
LK3wJnfh8KQIsn4FhDOLoDYXxV5vasWSSN3U7EVGyO5wBTb5WmynrLpoGLt47P5c
SPFfjzteUGciMeOxz4rd/40GrpBGCdyTTFa0Bahng8OZX4pXuub+IoUyVC7pX48l
H4KdtWFsU8O0x1+oxUQVXDuzM+FR80J0aN+dbMlAaD1L4Rikly72FcBlt2wVq7ho
gr7/WMFdycNcdvxRVaL86SkHFMy8RWZ92WLRuZy249Gz9WhgHjd5mEpFtDoXHgsB
pZNd9P+LmmmIb8aOwtOrrhhvWUJDxiMcVQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FK/coOGKTLK+0/EyWWAGbvYsKYVtMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzgzOTJlMzQzMzJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL0rMA0GCSqG
SIb3DQEBCwUAA4IBAQCXzf70hSqSu6kwikVH1Ql9owX6IdwJQLpEFx5o3MH4oZOn
A1Sbirot+FEJ/kjqVBmGruAgmNWISXjXUD0s1BWxVJJMzdEZvvZp/SBrPElsLblL
MTz6fadpH/9XieBSzWs7sAPGP1PETWuZL3X0n8FRz71QokIQhKqbs2cfLiwdg3TF
HfaQ0o9SMv/z01sIG6GlDvdZfNKzuJwKMEfFJ3qY4yI89r388c3Z6cujkWlh+AbV
T7fVhc4psg1FU5GGYhRsi0tLzzteQy5sD7so758XVyn1OLn7x184TK83LJjNs4DT
0Y2POkaf+VL7v1/gyrspnTtwq9GSZVA4MLjvoW2A
-----END CERTIFICATE-----
Generated at Sun May 24 15:41:08 2026 by rpki-client