Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e32392e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e32392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          3HDPvt9RACvoifTJtsbB6U1POjSL88lmt4HKgR91uA8=
Subject key identifier:   E7:87:91:72:B1:39:67:32:7A:C4:60:D8:19:1E:3F:29:E7:94:72:99
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       34D17CA7046ECBE02C79180E9A643DB01A235BAC
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e32392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     4230
IP address blocks:        187.29.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d1:7c:a7:04:6e:cb:e0:2c:79:18:0e:9a:64:3d:b0:1a:23:5b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:30:a9:52:c4:23:bc:95:0c:02:e8:5a:89:70:
                    22:bd:bf:3c:53:ca:d9:ae:a6:b5:c6:ea:99:e8:86:
                    f0:4d:69:73:d8:70:4e:46:12:e1:a4:a1:3a:f9:a3:
                    31:e2:0b:2f:6c:42:e8:f9:1a:5c:02:98:ee:87:c9:
                    9c:e1:58:58:c4:09:18:88:4e:c9:26:6f:2d:ec:89:
                    0f:9b:c6:1c:8f:1a:15:74:18:f2:d0:0f:c4:c2:8d:
                    fd:a6:58:33:88:05:1c:f8:5a:93:cc:99:35:0b:c6:
                    8d:22:39:e0:36:29:04:9b:e6:17:24:31:dc:25:fa:
                    50:c2:6b:58:9a:39:44:41:42:03:e5:e9:69:13:2c:
                    03:38:07:46:32:d1:a6:58:79:cd:b3:34:f5:15:e8:
                    f6:10:cb:f2:17:af:6f:b4:ca:f3:3d:fd:9f:59:2b:
                    f9:7f:76:a3:3e:09:86:73:0a:d9:2f:77:b1:40:19:
                    71:1d:9c:ef:ce:db:80:fe:be:5c:20:37:9a:d1:1f:
                    54:c4:1f:9a:0e:5f:ac:c4:0c:75:a0:e7:63:39:1e:
                    18:8a:95:ea:88:f1:7c:ee:d6:ac:99:d8:5a:3b:7c:
                    ec:81:ce:32:c2:0e:56:40:a3:b3:5c:58:14:ff:ef:
                    f3:b3:66:6f:41:d9:cd:89:7e:a5:4c:5a:b1:65:96:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:87:91:72:B1:39:67:32:7A:C4:60:D8:19:1E:3F:29:E7:94:72:99
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e32392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.29.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:e6:bb:01:a6:99:ed:97:7f:df:00:63:43:24:04:ab:22:4e:
         49:06:9a:55:af:32:32:bd:90:9e:ac:da:19:37:6d:4d:97:ab:
         aa:b7:8f:cd:95:d4:ae:ee:46:2c:8c:c1:5d:e3:9e:a6:d6:74:
         83:94:57:4c:d2:28:f2:d2:ad:d4:27:07:5c:d9:70:05:81:a3:
         75:78:d3:21:d6:1c:78:d2:9c:ce:4d:d7:cb:eb:73:c0:c9:19:
         ce:20:05:f6:98:f5:ea:bb:75:63:bf:f7:73:09:16:5d:f0:34:
         d5:e4:90:03:fe:a7:52:52:66:30:87:e8:43:b4:70:c9:41:bc:
         87:d5:d4:31:16:2c:64:4a:68:7e:8b:0d:26:4e:5a:74:82:61:
         09:c9:ed:56:06:ea:bf:00:f2:20:c0:16:25:73:ff:08:dc:4d:
         68:92:55:03:87:cd:7d:38:fa:ac:ec:8a:c5:79:ab:81:3e:3e:
         5d:38:7d:c4:3f:f8:4f:af:fd:23:b6:26:37:21:1a:28:d0:51:
         17:39:cd:1b:f2:b7:33:31:06:ff:ce:91:7f:50:b8:51:6e:02:
         4e:f1:8c:cb:8b:14:a2:1a:3c:e6:74:30:65:5d:b1:09:19:ab:
         c0:ea:33:3d:3a:2b:0a:a2:f1:a5:64:eb:73:ed:44:69:5b:3d:
         bd:07:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:55:41 2025 by rpki-client