Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3234203d3e2034323330.roa
File:                     3230302e3136362e302e302f31362d3234203d3e2034323330.roa (raw, json)
Hash identifier:          v/kCMwfIuPMrdCuOq2X2olPDCl9NPrGr/eTo90LtVK8=
Subject key identifier:   B7:EE:75:4D:2F:0F:21:29:DD:EB:95:79:DC:83:8E:F2:FA:0B:BC:E3
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5F1BFCDEC18478115E7AAA44861ADF29B459FBDB
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3234203d3e2034323330.roa
Signing time:             Wed 30 Sep 2026 15:02:08 +0000
ROA not before:           Wed 30 Sep 2026 14:57:08 +0000
ROA not after:            Wed 29 Sep 2027 15:02:08 +0000
asID:                     4230
IP address blocks:        200.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1b:fc:de:c1:84:78:11:5e:7a:aa:44:86:1a:df:29:b4:59:fb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Sep 30 14:57:08 2026 GMT
            Not After : Sep 29 15:02:08 2027 GMT
        Subject: CN=3082010A0282010100D68A71482D49D5F0390706DB25F57A16A580EED2E9E6723D8D995CDE204530940CBF2493EF24E350778961187DB1E4F651060551CFF61782007798E89533A0523D7711924D7CB0141D3CD857255FCD1AF90B75524ABC88ACCD1A38CC26667925D0BCADC2E7EC3AEAA8BA5208D5B919A5E82FF8218122489259DC485D1D3EAAE79D780769DD5817405B3A9E129599C551D59C5319AC40BE8AFA60EEBB5AB9C6BEC05CCFBF983E23ADCB1569DC4F4356605E6B4A430DD00EA2B9E82D5477CFB4FB1818F1C8709901285C9206B68793299E91CB5C686B8C30142F6855E022392269E6211418462F3CA7ACF3CBCB2F56AC88F5C2C078321ED6A82390774103735E830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:71:48:2d:49:d5:f0:39:07:06:db:25:f5:
                    7a:16:a5:80:ee:d2:e9:e6:72:3d:8d:99:5c:de:20:
                    45:30:94:0c:bf:24:93:ef:24:e3:50:77:89:61:18:
                    7d:b1:e4:f6:51:06:05:51:cf:f6:17:82:00:77:98:
                    e8:95:33:a0:52:3d:77:11:92:4d:7c:b0:14:1d:3c:
                    d8:57:25:5f:cd:1a:f9:0b:75:52:4a:bc:88:ac:cd:
                    1a:38:cc:26:66:79:25:d0:bc:ad:c2:e7:ec:3a:ea:
                    a8:ba:52:08:d5:b9:19:a5:e8:2f:f8:21:81:22:48:
                    92:59:dc:48:5d:1d:3e:aa:e7:9d:78:07:69:dd:58:
                    17:40:5b:3a:9e:12:95:99:c5:51:d5:9c:53:19:ac:
                    40:be:8a:fa:60:ee:bb:5a:b9:c6:be:c0:5c:cf:bf:
                    98:3e:23:ad:cb:15:69:dc:4f:43:56:60:5e:6b:4a:
                    43:0d:d0:0e:a2:b9:e8:2d:54:77:cf:b4:fb:18:18:
                    f1:c8:70:99:01:28:5c:92:06:b6:87:93:29:9e:91:
                    cb:5c:68:6b:8c:30:14:2f:68:55:e0:22:39:22:69:
                    e6:21:14:18:46:2f:3c:a7:ac:f3:cb:cb:2f:56:ac:
                    88:f5:c2:c0:78:32:1e:d6:a8:23:90:77:41:03:73:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EE:75:4D:2F:0F:21:29:DD:EB:95:79:DC:83:8E:F2:FA:0B:BC:E3
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3234203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:69:99:40:8e:6a:ac:66:19:d0:72:e4:03:96:42:48:96:a2:
         71:d5:e2:d3:5e:2e:cd:99:5a:92:c1:74:79:62:e5:ef:f2:77:
         8f:b3:df:83:70:f7:4c:4f:f3:2c:29:3e:e3:9e:bf:04:87:cb:
         ff:e0:d5:05:63:f4:76:90:a6:87:bf:88:77:2f:bf:6a:c9:0d:
         86:d4:52:e7:2f:96:ce:d4:7b:fd:fb:65:79:90:c1:df:c2:2a:
         e3:0a:c3:92:d4:5a:c1:19:6f:3d:85:b0:f3:38:12:1f:c9:7e:
         6f:c3:5c:b1:f8:f9:01:74:58:ae:17:0b:9f:d9:b8:7d:b9:36:
         1e:b8:9d:7a:88:25:63:ac:f1:d4:59:2f:3a:e9:fa:2c:de:e2:
         bb:83:f6:a0:2f:f9:d5:7c:33:de:fc:1f:6b:cb:45:2b:d7:7f:
         5b:94:15:c4:dd:8a:e5:61:b2:c3:0e:cb:57:8a:7e:1e:ba:1d:
         34:63:41:d2:83:79:f3:90:34:39:46:20:8f:b1:b1:49:41:9a:
         68:e7:af:b2:1e:17:4c:39:de:29:23:83:8b:f4:73:12:af:68:
         d6:7c:d7:e2:c6:f4:c9:ad:1b:c0:49:b1:0c:97:55:4e:b9:f8:
         e2:16:d6:1b:fa:1c:25:f4:1b:39:26:7c:55:26:22:23:df:81:
         be:64:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:22:40 2026 by rpki-client