Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e33302e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e33302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          n6RKl2WFm1FGhcsVNa6WjvHwBcQx2Yvcycnngu+P5Pk=
Subject key identifier:   F5:0E:9C:DD:79:31:72:59:6F:2C:CA:D6:F2:09:91:54:8F:9A:2D:74
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       463C57CD9CB10BA15CC0A70FEBCDD79CB54F05C0
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e33302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     4230
IP address blocks:        187.30.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3c:57:cd:9c:b1:0b:a1:5c:c0:a7:0f:eb:cd:d7:9c:b5:4f:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:25:9b:43:33:e2:f4:f5:c4:d6:ff:f5:e0:
                    0d:62:ba:16:2a:8e:22:28:3e:43:1d:3e:ca:08:2c:
                    2b:ea:e9:42:fb:07:79:84:e1:ab:eb:69:2f:68:aa:
                    36:c2:a1:51:2d:72:09:c3:cf:8c:8e:dd:f0:72:f1:
                    6f:1b:ce:10:69:d5:b2:94:6b:aa:1e:34:2b:ba:65:
                    fd:97:27:1a:77:3d:b4:6f:75:03:fa:51:5a:dc:b9:
                    50:71:86:07:f9:d7:65:fd:17:73:48:54:ac:07:b8:
                    64:18:a8:d7:a0:99:93:ab:5b:18:72:b6:4b:ee:dc:
                    42:5a:94:b5:ac:5e:27:e6:12:cd:65:4c:b6:08:86:
                    59:76:6f:7d:1a:a7:43:fa:ac:25:f7:29:ce:a2:92:
                    0f:12:ee:3c:f1:39:03:cd:93:a7:0e:5b:1c:85:94:
                    7c:2d:ac:bd:b4:08:10:7a:56:33:93:88:4f:8f:1e:
                    b8:0b:8f:b4:d6:64:1c:61:c6:94:c9:5d:bc:85:45:
                    99:df:72:51:23:bd:a9:3c:2b:19:fc:bf:e8:47:67:
                    1d:19:b6:3d:62:da:73:24:87:2c:6f:92:2a:04:04:
                    d7:e6:19:2d:de:37:d3:0e:5e:03:7b:30:1b:c3:2b:
                    e7:90:d0:da:e2:9f:00:63:d5:56:c5:f3:b0:4a:c1:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0E:9C:DD:79:31:72:59:6F:2C:CA:D6:F2:09:91:54:8F:9A:2D:74
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e33302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:a3:0f:af:54:36:1c:04:ab:f3:51:39:71:e0:2a:a0:74:
         05:22:86:f2:25:a5:8d:ee:90:9a:bc:1a:98:91:4b:ed:aa:18:
         87:d9:06:8d:3e:1b:0c:28:62:38:fa:74:be:d9:4b:2e:7e:ec:
         42:51:ea:92:c2:a0:bc:bc:26:4e:22:e0:b6:c5:d5:a2:25:9e:
         8a:23:ee:13:84:2a:51:31:9b:b7:cd:dc:28:52:67:5d:7f:0b:
         97:37:82:38:60:d3:e2:e4:35:8b:a2:ec:ca:b1:50:a0:2b:09:
         cc:6c:e2:c6:20:c4:ad:43:fd:08:db:85:79:84:5b:8b:c2:6a:
         da:d7:b4:34:96:32:fb:29:2c:0e:59:aa:24:8f:0a:d9:e8:93:
         b4:18:a6:7d:ee:2d:10:ff:65:57:af:f7:1c:0e:88:55:56:9a:
         88:22:0b:64:03:3d:ea:a8:7c:1d:5f:3c:09:28:0c:0c:2c:f7:
         48:c0:9e:27:bc:05:30:a7:e1:d7:fb:a8:98:e1:3d:01:bf:7d:
         43:cd:9a:4b:f2:ad:aa:e1:ba:e0:f5:f6:10:c0:8f:be:73:d2:
         0b:24:e9:bd:c3:c3:b3:72:d1:5a:56:a5:f7:28:94:cb:05:46:
         65:44:3d:20:47:2a:c1:63:87:47:1a:01:1b:12:1d:e1:83:ac:
         9e:f7:4a:45
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIURjxXzZyxC6FcwKcP683XnLVPBcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MTNaFw0yNTA0MDIxODMxMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0MzOTI1OUI0MzMzRTJGNEY1
QzRENkZGRjVFMDBENjJCQTE2MkE4RTIyMjgzRTQzMUQzRUNBMDgyQzJCRUFFOTQy
RkIwNzc5ODRFMUFCRUI2OTJGNjhBQTM2QzJBMTUxMkQ3MjA5QzNDRjhDOEVEREYw
NzJGMTZGMUJDRTEwNjlENUIyOTQ2QkFBMUUzNDJCQkE2NUZEOTcyNzFBNzczREI0
NkY3NTAzRkE1MTVBRENCOTUwNzE4NjA3RjlENzY1RkQxNzczNDg1NEFDMDdCODY0
MThBOEQ3QTA5OTkzQUI1QjE4NzJCNjRCRUVEQzQyNUE5NEI1QUM1RTI3RTYxMkNE
NjU0Q0I2MDg4NjU5NzY2RjdEMUFBNzQzRkFBQzI1RjcyOUNFQTI5MjBGMTJFRTND
RjEzOTAzQ0Q5M0E3MEU1QjFDODU5NDdDMkRBQ0JEQjQwODEwN0E1NjMzOTM4ODRG
OEYxRUI4MEI4RkI0RDY2NDFDNjFDNjk0Qzk1REJDODU0NTk5REY3MjUxMjNCREE5
M0MyQjE5RkNCRkU4NDc2NzFEMTlCNjNENjJEQTczMjQ4NzJDNkY5MjJBMDQwNEQ3
RTYxOTJEREUzN0QzMEU1RTAzN0IzMDFCQzMyQkU3OTBEMERBRTI5RjAwNjNENTU2
QzVGM0IwNEFDMTMyNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzDklm0Mz4vT1xNb/9eANYroWKo4iKD5DHT7KCCwr6ulC+wd5hOGr
62kvaKo2wqFRLXIJw8+Mjt3wcvFvG84QadWylGuqHjQrumX9lycadz20b3UD+lFa
3LlQcYYH+ddl/RdzSFSsB7hkGKjXoJmTq1sYcrZL7txCWpS1rF4n5hLNZUy2CIZZ
dm99GqdD+qwl9ynOopIPEu488TkDzZOnDlschZR8Lay9tAgQelYzk4hPjx64C4+0
1mQcYcaUyV28hUWZ33JRI72pPCsZ/L/oR2cdGbY9YtpzJIcsb5IqBATX5hkt3jfT
Dl4DezAbwyvnkNDa4p8AY9VWxfOwSsEyRQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FPUOnN15MXJZbyzK1vIJkVSPmi10MB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzgzNzJlMzMzMDJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALseMA0GCSqG
SIb3DQEBCwUAA4IBAQBLKKMPr1Q2HASr81E5ceAqoHQFIobyJaWN7pCavBqYkUvt
qhiH2QaNPhsMKGI4+nS+2UsufuxCUeqSwqC8vCZOIuC2xdWiJZ6KI+4ThCpRMZu3
zdwoUmddfwuXN4I4YNPi5DWLouzKsVCgKwnMbOLGIMStQ/0I24V5hFuLwmra17Q0
ljL7KSwOWaokjwrZ6JO0GKZ97i0Q/2VXr/ccDohVVpqIIgtkAz3qqHwdXzwJKAwM
LPdIwJ4nvAUwp+HX+6iY4T0Bv31DzZpL8q2q4brg9fYQwI++c9ILJOm9w8OzctFa
VqX3KJTLBUZlRD0gRyrBY4dHGgEbEh3hg6ye90pF
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org