Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e302e302f32302d3230203d3e2034323330.roa
File:                     3137392e3233372e302e302f32302d3230203d3e2034323330.roa (raw, json)
Hash identifier:          sJAVlNbdwIKZweSW2kdN6jjMqGMUE8e3tvMx1ZuVPK4=
Subject key identifier:   03:6F:5B:68:7C:6F:EF:51:BC:B3:44:B3:CA:98:3C:AC:E7:05:53:99
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5874074695E2306DCFFBE51C769CB8F9744A35DD
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e302e302f32302d3230203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     4230
IP address blocks:        179.237.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:74:07:46:95:e2:30:6d:cf:fb:e5:1c:76:9c:b8:f9:74:4a:35:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d7:60:2e:4a:e7:cb:58:32:b1:f6:77:02:38:
                    41:5f:d7:bd:da:ca:53:a3:72:06:7d:bd:10:5a:ec:
                    33:91:64:3b:b2:9a:e1:ca:23:d4:ab:30:81:36:87:
                    de:03:70:e5:a5:21:24:06:30:9e:0f:ba:c7:06:01:
                    9e:b5:45:12:d8:80:9d:84:2f:1b:7e:a0:06:c1:83:
                    10:7e:28:34:18:ef:63:6e:6a:ea:d5:fa:30:10:7e:
                    aa:f7:eb:0f:1e:0a:3e:e3:37:f0:6b:61:e1:e2:77:
                    2d:12:1e:57:51:6a:24:6a:3d:e1:f4:ee:a5:c3:68:
                    a3:21:78:9e:ef:3d:45:3b:f5:aa:3b:92:d7:41:5d:
                    d3:be:20:fb:fb:ea:bf:e4:01:77:ac:a4:d2:f7:fd:
                    dd:71:16:b6:28:e3:15:4d:8e:e0:b3:e1:04:0f:70:
                    f0:9a:42:4e:2e:b2:19:29:74:49:57:e5:ad:21:d5:
                    d5:03:fa:eb:52:df:f0:5c:8d:79:78:01:6b:45:74:
                    62:87:b9:1d:75:e2:15:7b:0f:eb:96:4a:ca:56:10:
                    d1:e7:b2:b4:85:30:5c:5d:75:e7:34:f1:83:ec:36:
                    72:ba:f5:3c:c2:49:b7:c3:c4:aa:1f:70:2b:71:99:
                    2a:6f:1f:45:b4:6f:32:cf:ed:75:25:ab:3c:11:94:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:5B:68:7C:6F:EF:51:BC:B3:44:B3:CA:98:3C:AC:E7:05:53:99
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e302e302f32302d3230203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.237.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:31:55:96:d8:0a:f5:4f:e4:af:09:b7:ab:1a:5a:62:e4:
         60:09:6d:f5:d6:6a:06:97:36:e8:55:ed:20:5c:7b:29:b7:ca:
         ba:c9:d1:cf:51:60:6e:2d:bc:02:9d:6a:ad:d1:65:ac:fc:78:
         7e:ef:b9:91:2b:dc:58:7f:75:9b:f7:2e:51:b9:00:e5:d8:8e:
         91:37:70:45:03:d9:2e:86:50:9a:7b:5b:4d:7a:1b:a5:52:41:
         e8:b2:5a:3e:59:ff:42:5f:61:bb:21:7b:2b:f2:34:20:6c:b0:
         b0:df:7b:f8:5c:ba:a6:43:dd:56:ba:71:88:37:7e:4d:71:4c:
         5d:66:9f:6f:32:f7:b5:1d:e4:03:01:3a:ad:19:32:15:2f:82:
         f0:31:4d:12:44:2f:fb:6d:44:25:a8:d4:f8:ec:cd:c6:11:ab:
         c3:22:a7:56:96:d9:d7:d8:9b:c6:46:9d:f4:ad:b4:09:57:d6:
         9f:07:b3:6b:64:8c:ab:76:18:9a:79:e5:7a:f0:3b:d1:ac:97:
         5a:ea:b7:96:d3:9d:08:07:35:69:45:9c:e3:f2:ac:cf:dc:56:
         7b:0b:6f:df:09:08:2c:0f:86:9b:dc:86:6d:ef:7f:28:06:52:
         e0:22:c4:c0:34:a3:45:10:16:19:ef:b0:6d:87:9d:4d:0a:e0:
         c0:e5:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org