Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e302e302f32302d3230203d3e2034323330.roa
File:                     3137392e3233372e302e302f32302d3230203d3e2034323330.roa (raw, json)
Hash identifier:          DFy68I25G9DYxWrl5gN/CYOmOUo/gCozz1g285Poptw=
Subject key identifier:   53:D9:82:70:97:21:0A:B4:84:4C:90:3C:74:9A:F7:2F:C0:56:72:DF
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1CCF65938BC5A666B95663C48233F52E9E8261DD
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e302e302f32302d3230203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     4230
IP address blocks:        179.237.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cf:65:93:8b:c5:a6:66:b9:56:63:c4:82:33:f5:2e:9e:82:61:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100ABDDE8B0F7672FDC589CCD13557B0DF056FA95B9C3E6C50B4314FED4CEEA9B23D6F1230D9A55CC297F9361F22DE1E036B2F11E7F55A267A19BCEEE08FB8EEF907D30FD58ACDCE7E4DC70FF838AAFC38159C03A121ED1B7DD34379EE111502EDDB792DB6B6585BB0CB731A253153C9E766D91057CF6B53328D6515AD1CC852D23A7289B3242B6F182F105429606795190A4B36BC6F3D05E86546EF9E0DBF3D3F1E3ACA85B65B7B0DE6ECBC75F34682724FD15FB191129B4885A3ECDECDDF9854820271D1D683B47947A4E27116CC93C44150DA8C1511F43AF513C9292B703CF4594D3056DD8ABBDF9E78EC1596F7594816B518789DAB403F365DBAC1655175D2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:e8:b0:f7:67:2f:dc:58:9c:cd:13:55:7b:
                    0d:f0:56:fa:95:b9:c3:e6:c5:0b:43:14:fe:d4:ce:
                    ea:9b:23:d6:f1:23:0d:9a:55:cc:29:7f:93:61:f2:
                    2d:e1:e0:36:b2:f1:1e:7f:55:a2:67:a1:9b:ce:ee:
                    08:fb:8e:ef:90:7d:30:fd:58:ac:dc:e7:e4:dc:70:
                    ff:83:8a:af:c3:81:59:c0:3a:12:1e:d1:b7:dd:34:
                    37:9e:e1:11:50:2e:dd:b7:92:db:6b:65:85:bb:0c:
                    b7:31:a2:53:15:3c:9e:76:6d:91:05:7c:f6:b5:33:
                    28:d6:51:5a:d1:cc:85:2d:23:a7:28:9b:32:42:b6:
                    f1:82:f1:05:42:96:06:79:51:90:a4:b3:6b:c6:f3:
                    d0:5e:86:54:6e:f9:e0:db:f3:d3:f1:e3:ac:a8:5b:
                    65:b7:b0:de:6e:cb:c7:5f:34:68:27:24:fd:15:fb:
                    19:11:29:b4:88:5a:3e:cd:ec:dd:f9:85:48:20:27:
                    1d:1d:68:3b:47:94:7a:4e:27:11:6c:c9:3c:44:15:
                    0d:a8:c1:51:1f:43:af:51:3c:92:92:b7:03:cf:45:
                    94:d3:05:6d:d8:ab:bd:f9:e7:8e:c1:59:6f:75:94:
                    81:6b:51:87:89:da:b4:03:f3:65:db:ac:16:55:17:
                    5d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D9:82:70:97:21:0A:B4:84:4C:90:3C:74:9A:F7:2F:C0:56:72:DF
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e302e302f32302d3230203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.237.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:92:62:93:fe:da:34:41:60:31:93:07:74:a2:e8:1f:1c:62:
         4c:20:98:97:4a:23:1d:ed:6e:aa:3e:38:bc:0b:fd:ea:38:60:
         32:4d:76:13:2a:87:29:ab:bb:5b:e8:25:7f:f1:47:07:90:f6:
         95:33:61:03:74:f5:14:ff:d4:f5:35:14:2f:13:67:b9:4e:e8:
         6a:02:e8:a4:8a:00:fb:4d:4a:77:99:fd:23:3d:2a:b9:32:4c:
         bd:fd:65:0f:27:d0:ab:ca:11:54:eb:5b:71:99:c1:fb:cf:cd:
         8e:dc:f7:03:f7:fe:b6:c6:80:82:37:eb:62:8c:22:42:62:48:
         65:8c:59:cd:e4:c5:51:e7:b6:08:69:f7:c7:a0:9d:0b:eb:42:
         64:b7:d4:91:29:24:81:fb:57:58:54:de:d1:63:36:a5:ad:37:
         83:20:b8:28:ca:ab:1e:f9:e6:46:fe:ad:dd:56:d5:e7:97:46:
         4d:e5:92:f6:d5:36:c0:a5:d6:a2:1d:aa:68:2b:67:1f:21:c6:
         fc:2b:dc:1b:19:39:f2:61:fd:46:42:0d:04:be:d3:ee:73:57:
         67:3c:a9:1b:ed:c6:3e:ba:de:2e:19:ce:26:84:04:32:fd:d0:
         0b:c9:6e:0e:d2:4f:4e:74:fd:eb:4b:b3:00:3a:e5:c8:3f:46:
         1f:5c:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:49 2025 by rpki-client