Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          +wZfYWZiSSV+EMtjeZCbFA/PkZqjKyRMaW9OC44b2dY=
Subject key identifier:   7C:9B:8F:F7:82:98:82:61:61:AE:5C:D9:12:77:AB:68:7C:AE:A5:7D
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3D48E4EB8C79433498A5B76052234FABB4D46B6A
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:05 +0000
ROA not before:           Wed 03 Apr 2024 18:26:05 +0000
ROA not after:            Wed 02 Apr 2025 18:31:05 +0000
asID:                     4230
IP address blocks:        189.3.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:48:e4:eb:8c:79:43:34:98:a5:b7:60:52:23:4f:ab:b4:d4:6b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:ab:c8:9a:93:ce:c9:cc:c1:df:cb:db:fe:
                    78:e0:4c:2b:56:cb:57:2f:41:ad:0b:7f:81:0f:9a:
                    0a:da:fe:34:3b:57:51:2b:a7:f6:a9:ab:73:af:25:
                    6e:53:b0:12:ea:c5:73:24:fa:19:4f:34:93:ee:6f:
                    9b:03:2b:04:83:f1:68:10:30:01:65:fe:46:3d:56:
                    8f:cd:6b:b9:18:02:4a:e6:17:47:53:47:18:78:c6:
                    74:1e:e4:b2:7a:5e:f7:f7:5a:03:14:a2:8a:a8:a1:
                    71:2c:c8:6b:07:c7:8d:13:06:99:73:79:e6:35:2f:
                    61:7c:ee:e3:8e:2a:a1:09:60:24:af:b5:f3:68:5f:
                    cf:a8:f9:c1:cf:23:bb:eb:eb:0d:f6:f4:a5:b5:fb:
                    97:d1:49:68:c5:06:f8:6b:88:2a:49:96:5d:3d:c3:
                    eb:fb:23:95:94:9a:05:ea:5f:eb:da:7f:a0:1a:54:
                    77:e4:9c:9e:7b:64:82:3b:53:f0:d2:00:10:43:77:
                    0c:13:f5:0d:8f:70:ab:53:6e:82:e5:9b:c0:45:59:
                    2e:c5:72:97:0d:4b:82:d2:a0:06:d8:de:0f:5a:20:
                    8b:0b:a1:ca:53:34:7c:18:d7:4a:e8:26:97:e4:3f:
                    7a:87:61:f5:f3:4a:7d:49:e8:9d:2e:81:1f:54:c8:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9B:8F:F7:82:98:82:61:61:AE:5C:D9:12:77:AB:68:7C:AE:A5:7D
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:f7:42:94:47:f9:0d:c4:9a:1d:6a:89:6d:8c:45:09:7f:32:
         86:02:cb:b7:60:9b:e5:16:07:0f:64:64:cd:13:81:a4:32:04:
         9e:46:fa:e1:d3:ef:67:36:5a:e7:52:41:7f:bf:47:7b:6a:12:
         3e:58:85:76:1f:05:08:b1:bc:7f:10:cb:d5:28:04:cd:a2:7e:
         34:d9:a3:b1:e5:37:c3:84:1d:44:13:5e:9b:5f:b6:e7:57:5f:
         48:04:72:54:7e:89:68:ee:b7:15:da:0e:6b:1f:16:08:15:79:
         a8:5e:79:45:0c:cd:6b:67:75:f6:f4:e8:8a:1c:b8:3a:98:33:
         88:51:3a:b1:d9:09:31:fd:4f:ac:7d:9d:6a:e1:1a:d1:7b:22:
         5e:27:2c:98:98:27:13:cd:24:7e:b4:8c:9d:6f:0e:41:14:48:
         83:44:65:00:e7:86:aa:f5:2a:ca:bc:01:48:71:eb:f1:69:79:
         53:ff:df:09:ff:36:51:8f:d4:c4:b5:e8:17:6f:f1:38:6d:90:
         ae:dd:19:d9:22:df:fb:73:94:f4:0e:59:66:72:42:ba:98:9f:
         89:cc:2f:73:5f:56:a6:3b:44:b3:c7:9b:a5:bd:32:27:e8:04:
         0c:85:bb:ef:f1:91:8e:c4:d4:c4:13:7e:a1:03:5d:e1:e7:a7:
         fa:83:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:56 2024 by rpki-client on console-ams.rpki-client.org