Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa
File:                     3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa (raw, json)
Hash identifier:          KWN3NSHCdR2DXNxZWqN+YB75Cq3yUXukiqXeZiYWUx0=
Subject key identifier:   D1:BA:43:F2:0C:28:00:B7:7D:5F:F2:E0:B9:A8:D0:B3:15:09:C9:0E
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       142BD2A5FB34BE5C770D4C11F9295457F82CFEBC
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     4230
IP address blocks:        186.249.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2b:d2:a5:fb:34:be:5c:77:0d:4c:11:f9:29:54:57:f8:2c:fe:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5f:ee:02:c4:96:ca:98:59:a1:19:e7:45:03:
                    2b:c7:87:eb:3d:d5:9f:45:74:fb:21:67:69:88:80:
                    2b:bc:f3:7c:65:60:b9:80:2b:b8:cd:09:3b:63:ac:
                    2f:32:02:87:41:cd:a3:89:c3:01:35:a4:94:08:08:
                    52:09:1e:95:8f:1d:20:91:dd:1e:e6:aa:aa:7a:5d:
                    73:20:09:7a:48:59:73:d5:6f:75:6c:6c:52:0f:d8:
                    c8:e0:bb:a6:ac:f0:f9:aa:02:f4:9d:dc:fb:4d:0e:
                    07:a7:30:aa:cd:e1:c1:cf:86:13:7c:17:d8:2b:a3:
                    f3:62:40:3b:74:10:7c:64:a5:d4:c9:54:ae:de:ef:
                    46:28:82:2e:9b:a1:af:93:5f:f3:f8:75:d6:0a:59:
                    5c:da:6a:a8:46:0d:d2:2e:a8:f9:c4:90:48:10:17:
                    9c:5e:14:04:22:35:19:8d:80:42:2f:54:b8:43:8e:
                    c5:f0:c2:8a:02:56:f2:eb:ae:82:60:6b:04:22:dc:
                    f5:58:89:a4:75:62:1f:ba:78:a4:8c:ac:a2:53:f5:
                    15:99:f5:28:12:2b:a7:7e:b4:06:01:8a:dc:13:9f:
                    e8:8f:b5:47:d0:56:08:ee:4d:45:ca:8f:68:04:84:
                    ba:d8:86:a5:f1:30:d4:14:83:c0:75:b5:75:17:34:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BA:43:F2:0C:28:00:B7:7D:5F:F2:E0:B9:A8:D0:B3:15:09:C9:0E
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:20:41:f0:72:a9:74:13:fc:c6:52:81:66:73:b4:13:b5:31:
         53:0f:31:b6:2b:1d:82:de:d0:de:b0:fd:b2:d9:93:8a:b1:90:
         8e:73:dc:51:b3:6c:ea:86:61:6c:d4:51:86:7c:10:66:c7:43:
         81:f0:92:f9:74:2d:44:2a:37:39:93:76:9b:f1:47:70:3b:60:
         41:9a:a3:7b:cc:6e:08:cd:e7:f2:04:ac:b4:17:6e:81:53:ef:
         e6:c6:20:30:f0:94:0c:c7:4c:03:b5:d4:4a:0c:ac:14:ab:75:
         ea:c4:c9:a3:b4:86:96:05:80:15:ac:75:26:1f:ed:53:f9:57:
         d0:29:84:63:8f:24:e6:43:d8:6d:e3:5c:0b:a6:86:f7:f3:f5:
         81:1d:57:9f:d1:aa:d4:16:52:02:e4:3e:5a:01:6b:5d:98:45:
         ee:52:44:b6:d4:8d:71:e7:99:38:78:97:a0:82:65:34:32:f6:
         46:e2:92:05:37:08:1d:1c:22:af:e3:0e:8b:9b:56:5a:04:c6:
         74:72:c4:49:41:80:0f:e0:e1:23:12:7c:65:b4:ea:10:7c:40:
         64:34:24:47:37:bf:ad:00:12:95:41:02:25:02:03:ad:94:e6:
         e7:8f:bb:d4:63:42:9d:77:fc:8d:d4:51:8c:6c:96:08:20:95:
         1f:95:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org