Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e31362e302f32312d3231203d3e2034323330.roa
File:                     3137392e3233372e31362e302f32312d3231203d3e2034323330.roa (raw, json)
Hash identifier:          S7/sAwQhVMaU1hfqyISXeunQCsdFPY92IzQH3bQ0NLA=
Subject key identifier:   3E:22:25:23:CF:66:AC:81:08:98:26:78:96:AA:21:47:B2:94:2A:A1
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5C79A08E079D1904D95E31EEC6189B5A7AC65DA5
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e31362e302f32312d3231203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        179.237.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:79:a0:8e:07:9d:19:04:d9:5e:31:ee:c6:18:9b:5a:7a:c6:5d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:0b:ba:f4:3b:4b:0f:d6:5e:3d:91:bf:ea:
                    71:9a:9c:9f:a8:95:84:3e:20:b7:2b:df:71:66:33:
                    72:f5:56:5d:26:6a:2d:5c:0b:8f:41:e3:60:01:7d:
                    4b:e3:f4:6c:94:e0:6f:2e:71:e5:e0:fa:13:b9:ee:
                    0b:94:3f:b5:2d:cd:3d:88:d5:85:d1:2b:da:5a:4c:
                    9b:06:15:b0:48:8d:40:55:dc:b1:ad:02:c5:c2:bf:
                    1c:66:07:2b:94:fc:d4:d8:e3:98:ee:f1:56:aa:e3:
                    a1:e0:d1:95:d8:e6:5e:e6:ee:91:91:4a:7f:42:28:
                    cd:c0:75:f4:0b:9e:44:06:44:10:3b:0e:85:64:97:
                    65:08:87:04:df:08:a1:00:30:5f:55:67:5f:ff:3e:
                    d1:63:38:72:8f:44:fe:8c:f9:c1:b1:78:89:e5:28:
                    ec:8d:c9:55:85:07:a2:d9:4b:52:59:7f:0f:74:72:
                    8a:ec:5b:7b:8f:db:dd:69:df:dd:c3:1e:be:9a:95:
                    0d:be:8d:ac:f6:89:70:88:34:c9:ae:b3:25:07:87:
                    26:65:a5:df:28:9a:1f:53:40:b8:22:f7:74:c2:b7:
                    e4:1d:f4:4d:89:fb:6f:f1:95:aa:e9:5d:f7:5e:17:
                    3a:80:14:02:03:a7:75:57:d1:d6:91:ff:7f:4f:bd:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:25:23:CF:66:AC:81:08:98:26:78:96:AA:21:47:B2:94:2A:A1
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e31362e302f32312d3231203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.237.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:10:c2:5f:64:ce:76:2d:41:c2:c8:cf:26:ed:ca:aa:c9:2b:
         57:8a:75:18:1c:b2:e2:b5:cc:e5:4f:be:17:e3:fa:30:92:6f:
         35:1c:fd:08:b0:42:44:4c:d6:75:3f:8d:d8:7b:73:d9:db:73:
         db:4d:30:3e:cc:23:bf:b0:3b:bf:bc:50:81:34:9e:ec:6d:fe:
         6f:53:07:d5:d2:71:9f:12:e0:de:c6:92:c1:92:a5:2d:c9:37:
         07:1e:2a:dd:76:65:37:4d:3b:da:d8:a6:0c:73:b4:48:1a:e1:
         ee:7d:76:b4:f1:b6:b2:d3:ab:4f:f7:57:1d:c3:42:21:6a:51:
         94:d3:84:2c:e4:25:f2:44:6f:0a:c7:26:25:55:f9:16:3a:1d:
         27:a8:c1:74:c6:ee:0b:53:09:e2:4c:53:37:06:35:d4:da:d2:
         84:e2:b9:36:4d:a4:ee:d5:31:c3:4e:4e:fc:7a:e7:36:e3:28:
         ab:67:93:3f:05:36:b4:81:6b:63:1c:ad:79:1a:a1:cf:24:70:
         ad:e3:79:bc:b3:87:86:93:6c:03:05:97:e3:d0:18:c4:5e:4b:
         ea:cf:ed:4f:97:3a:b1:57:9f:dc:dc:f1:68:9e:a4:16:8f:fb:
         fc:90:ac:3b:cd:3f:96:20:52:dc:80:11:f0:b1:89:f3:42:85:
         31:3b:9e:6c
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUXHmgjgedGQTZXjHuxhibWnrGXaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDdaFw0yNTA0MDIxODMxMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTFCQTBCQkFGNDNCNEIwRkQ2
NUUzRDkxQkZFQTcxOUE5QzlGQTg5NTg0M0UyMEI3MkJERjcxNjYzMzcyRjU1NjVE
MjY2QTJENUMwQjhGNDFFMzYwMDE3RDRCRTNGNDZDOTRFMDZGMkU3MUU1RTBGQTEz
QjlFRTBCOTQzRkI1MkRDRDNEODhENTg1RDEyQkRBNUE0QzlCMDYxNUIwNDg4RDQw
NTVEQ0IxQUQwMkM1QzJCRjFDNjYwNzJCOTRGQ0Q0RDhFMzk4RUVGMTU2QUFFM0Ex
RTBEMTk1RDhFNjVFRTZFRTkxOTE0QTdGNDIyOENEQzA3NUY0MEI5RTQ0MDY0NDEw
M0IwRTg1NjQ5NzY1MDg4NzA0REYwOEExMDAzMDVGNTU2NzVGRkYzRUQxNjMzODcy
OEY0NEZFOENGOUMxQjE3ODg5RTUyOEVDOERDOTU1ODUwN0EyRDk0QjUyNTk3RjBG
NzQ3MjhBRUM1QjdCOEZEQkRENjlERkREQzMxRUJFOUE5NTBEQkU4REFDRjY4OTcw
ODgzNEM5QUVCMzI1MDc4NzI2NjVBNURGMjg5QTFGNTM0MEI4MjJGNzc0QzJCN0U0
MURGNDREODlGQjZGRjE5NUFBRTk1REY3NUUxNzNBODAxNDAyMDNBNzc1NTdEMUQ2
OTFGRjdGNEZCREExQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoboLuvQ7Sw/WXj2Rv+pxmpyfqJWEPiC3K99xZjNy9VZdJmotXAuP
QeNgAX1L4/RslOBvLnHl4PoTue4LlD+1Lc09iNWF0SvaWkybBhWwSI1AVdyxrQLF
wr8cZgcrlPzU2OOY7vFWquOh4NGV2OZe5u6RkUp/QijNwHX0C55EBkQQOw6FZJdl
CIcE3wihADBfVWdf/z7RYzhyj0T+jPnBsXiJ5SjsjclVhQei2UtSWX8PdHKK7Ft7
j9vdad/dwx6+mpUNvo2s9olwiDTJrrMlB4cmZaXfKJofU0C4Ivd0wrfkHfRNiftv
8ZWq6V33Xhc6gBQCA6d1V9HWkf9/T72htwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FD4iJSPPZqyBCJgmeJaqIUeylCqhMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzczOTJlMzIzMzM3MmUzMTM2
MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzMjMzMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOz7RAw
DQYJKoZIhvcNAQELBQADggEBAAEQwl9kznYtQcLIzybtyqrJK1eKdRgcsuK1zOVP
vhfj+jCSbzUc/QiwQkRM1nU/jdh7c9nbc9tNMD7MI7+wO7+8UIE0nuxt/m9TB9XS
cZ8S4N7GksGSpS3JNwceKt12ZTdNO9rYpgxztEga4e59drTxtrLTq0/3Vx3DQiFq
UZTThCzkJfJEbwrHJiVV+RY6HSeowXTG7gtTCeJMUzcGNdTa0oTiuTZNpO7VMcNO
Tvx65zbjKKtnkz8FNrSBa2McrXkaoc8kcK3jebyzh4aTbAMFl+PQGMReS+rP7U+X
OrFXn9zc8WiepBaP+/yQrDvNP5YgUtyAEfCxifNChTE7nmw=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:53 2024 by rpki-client on console-fra.rpki-client.org