Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e32332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e32332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          gBYlbr8wj/o/UkTwr2CMA8GXz8xQKFcAolugUABWyRA=
Subject key identifier:   2B:8B:1B:E4:27:AC:3B:BE:A2:C1:54:D8:86:EE:6F:CF:FE:03:D6:16
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       4A8C2C2C77B24CE90019B51B6C9DFAEF7DEC7412
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e32332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     4230
IP address blocks:        189.23.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8c:2c:2c:77:b2:4c:e9:00:19:b5:1b:6c:9d:fa:ef:7d:ec:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:30:eb:96:e5:e3:f4:35:2d:52:c0:24:3a:
                    d2:9b:1c:37:10:39:c4:2e:f1:5b:22:45:47:53:07:
                    f7:9a:af:d1:44:b6:9d:cd:30:60:44:86:aa:d7:87:
                    f1:3c:95:38:b0:0d:2e:53:25:c9:b9:f9:29:44:c9:
                    5a:9a:f2:4f:9b:c5:87:1d:c9:9a:b3:af:1f:9b:b3:
                    8f:45:bf:98:62:3a:19:dd:12:56:2a:03:6d:4c:66:
                    8b:65:8d:36:a0:98:55:3b:77:25:6e:8f:28:f1:a9:
                    59:68:85:a6:de:f3:a0:9d:0d:7b:93:a7:2f:86:58:
                    3a:7e:b1:c7:92:53:c9:db:57:d2:fa:54:16:6e:9b:
                    52:a5:8b:92:3b:83:6b:e1:a6:c0:f9:ef:ba:10:e5:
                    a7:ea:3e:83:b4:2f:bf:37:65:d8:54:96:72:27:b4:
                    89:66:6a:77:65:92:dd:ec:ae:3a:2e:a3:0c:c1:b4:
                    ca:b4:cd:38:d6:79:9c:a8:37:70:97:e9:34:74:8d:
                    02:64:4d:65:16:14:80:8e:b9:ef:d5:cb:58:e7:ab:
                    a7:19:7e:88:a8:90:05:cf:ee:77:53:56:87:04:67:
                    76:8e:b4:3a:4f:ab:05:f7:0b:7a:9e:80:58:16:aa:
                    72:52:19:81:9a:18:62:8f:ed:26:38:57:55:60:81:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8B:1B:E4:27:AC:3B:BE:A2:C1:54:D8:86:EE:6F:CF:FE:03:D6:16
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e32332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:e7:73:45:14:03:36:a6:17:19:3b:9d:6d:b6:22:d4:d5:
         63:4a:c9:a4:35:93:e7:bf:67:79:41:0e:46:cb:f6:84:c1:96:
         be:0c:3b:ab:4c:44:dc:e8:9a:64:0f:79:f5:30:f5:34:02:3a:
         16:a0:1c:77:98:34:8f:cc:85:88:3d:5e:1c:06:ed:9c:9c:0d:
         d4:92:71:c6:3c:33:2b:e9:59:32:98:58:f6:c9:2e:f7:4d:b5:
         0e:5c:02:2a:15:a9:17:f3:f0:fc:6d:d5:09:39:6f:59:4e:e7:
         11:24:14:d5:0d:7b:d2:ef:ed:dc:4d:bf:a6:3c:d4:cd:5d:45:
         9d:a5:c2:35:d6:2b:a9:cf:b6:af:46:05:85:3c:63:95:69:29:
         b6:43:c5:72:89:79:34:91:44:2c:59:96:3a:f0:12:22:45:e9:
         f1:cb:0f:6a:d4:52:f2:ea:69:a6:7d:09:52:b5:71:3c:0a:ac:
         7f:e9:6a:3e:26:db:b1:29:ef:5f:6a:98:96:d9:da:63:c8:2e:
         2d:14:aa:a8:94:de:61:fa:4a:21:59:9b:86:49:7a:fc:dd:39:
         99:41:45:a6:72:ff:cb:2d:8f:34:37:d0:06:bb:6d:af:7c:c9:
         99:ab:5f:99:cc:ac:1e:d7:34:d6:a6:60:94:47:48:6e:98:d4:
         16:2f:69:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:27 2025 by rpki-client