Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e32342e302f32332d3233203d3e2034323330.roa
File:                     3137392e3233372e32342e302f32332d3233203d3e2034323330.roa (raw, json)
Hash identifier:          EWF1MpdUWbqURLl84HzHiVoh8vPCpImqHmmsOyHvGvk=
Subject key identifier:   DF:67:CE:35:5D:1E:FB:61:F1:E8:11:AA:32:A5:F7:A5:5F:6D:D7:18
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       76CE47942F0AA1CACDBB429345854DC9B6038F55
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e32342e302f32332d3233203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     4230
IP address blocks:        179.237.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ce:47:94:2f:0a:a1:ca:cd:bb:42:93:45:85:4d:c9:b6:03:8f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:dc:d1:38:f9:c0:14:7a:7f:9c:cf:65:c5:
                    e0:77:56:62:20:69:61:06:42:ac:2c:b9:60:b7:ed:
                    2c:5e:5e:53:e4:26:8a:1e:fd:ef:0c:9b:08:63:62:
                    e1:91:06:6b:18:d1:dc:f4:41:95:3b:ed:a6:fa:e6:
                    0f:0f:67:2e:c1:ff:c1:b1:77:5d:ac:d2:51:39:51:
                    78:ef:9b:2d:b6:01:7e:d2:9d:f0:14:7c:b4:03:2a:
                    3b:66:ee:e0:1f:52:5a:12:68:19:50:39:8d:09:b7:
                    5c:10:c1:67:08:b2:09:2f:84:e5:89:cf:b8:2c:4c:
                    d6:5a:54:bb:6f:b6:72:89:89:e4:be:16:ab:3f:d2:
                    10:93:1a:59:a9:ee:53:85:68:1a:30:9d:8f:11:df:
                    99:2d:78:34:3d:33:e5:ca:ca:c0:e7:9b:b7:31:8e:
                    58:27:fd:62:87:d5:51:3e:97:a0:8e:03:86:a4:ca:
                    4d:3e:91:f2:a5:99:3d:0c:b8:29:fa:19:a3:63:0b:
                    2d:5b:fb:42:13:79:c6:e1:74:12:96:06:85:92:9d:
                    1f:34:97:46:f6:ca:4a:75:a1:4f:ed:af:16:7c:0a:
                    72:d8:10:fb:ac:a2:3e:68:df:50:82:03:2b:6a:13:
                    e2:0e:72:b9:10:58:ef:47:16:2f:41:c5:07:0f:be:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:67:CE:35:5D:1E:FB:61:F1:E8:11:AA:32:A5:F7:A5:5F:6D:D7:18
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3137392e3233372e32342e302f32332d3233203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.237.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:61:da:8d:c1:34:02:67:44:5d:4c:ca:1d:a8:1d:81:62:e8:
         85:12:0f:cf:1c:cc:d8:1b:90:84:62:a2:ea:fc:75:10:ea:18:
         58:18:54:82:0b:ae:a9:d4:44:16:ac:5a:0c:6f:44:4b:54:de:
         bb:c2:05:70:8c:64:15:8a:93:5d:bd:9a:df:94:00:eb:97:77:
         9e:a9:de:af:5d:ba:80:3e:45:d1:41:b7:cf:bd:06:84:77:72:
         2d:f1:75:3b:5c:2a:e2:c2:ff:4b:77:9f:77:2d:31:34:78:89:
         ec:5f:1a:82:76:33:60:16:53:c6:54:72:24:e3:43:00:65:53:
         d8:9f:52:34:e6:bd:0e:2c:92:09:94:48:f9:8b:b7:85:0b:7b:
         59:40:a8:72:0c:cf:c4:79:4d:b6:74:76:c8:bf:ff:93:f1:23:
         d5:8c:e3:ed:3c:51:e8:29:15:fd:51:fc:9f:71:50:12:e4:73:
         f7:51:f0:d1:02:26:62:aa:f8:31:5c:1c:99:6a:a7:02:40:14:
         e8:89:2b:0b:61:f2:36:4d:f0:1a:a6:ef:69:0e:ab:8e:c5:96:
         9d:f4:a7:c2:10:fa:14:f0:bd:b1:83:f4:df:10:25:83:cd:a2:
         1a:c8:87:e8:b0:92:7b:d7:48:dc:0f:ad:81:57:e5:40:86:2f:
         74:db:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:31 2025 by rpki-client