Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e35322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          rgxJlFNmzfhBO3bE4SNDjXiBnCQ660PQe5i2+Z5kU5k=
Subject key identifier:   17:6E:05:57:45:40:F1:A0:99:9B:65:A6:8A:8D:20:D9:35:77:9B:BB
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       703A3C15B7B4F4BE7B3D2DDFB7ED9A85880DFF1D
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     4230
IP address blocks:        189.52.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3a:3c:15:b7:b4:f4:be:7b:3d:2d:df:b7:ed:9a:85:88:0d:ff:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:e3:0f:ca:07:5d:2b:33:22:14:b3:93:2f:
                    59:c8:7c:fa:c8:98:7e:d1:51:d7:1e:91:98:c9:13:
                    33:3a:65:f6:82:08:8e:09:62:e2:7d:dd:78:6f:a8:
                    18:da:e1:c6:ee:93:fe:14:17:fb:5f:73:5b:f8:03:
                    a8:5b:04:c2:bd:c1:32:ea:20:56:da:fd:de:e5:1d:
                    9c:24:b6:76:0d:78:b5:9f:3e:14:34:3a:67:51:a8:
                    e3:9b:af:b5:cd:f6:d7:16:67:47:ea:ca:61:61:59:
                    af:ac:94:e5:68:0a:a9:ed:bf:f2:c5:8c:91:4b:4d:
                    65:72:97:4e:37:9e:4c:43:19:dc:16:fa:b3:40:d4:
                    b4:55:7c:55:3d:48:5a:15:c3:0c:61:fd:04:42:d7:
                    c6:ac:5f:96:9b:ef:33:ab:c1:6a:2b:1b:d0:8a:f4:
                    85:1f:8b:ed:77:13:10:d2:64:3a:4c:9f:cb:c4:e5:
                    df:95:19:04:ca:03:fb:b6:12:dc:b2:87:41:0b:8e:
                    aa:5d:2b:26:23:26:55:f0:81:c1:a4:95:7a:4a:2d:
                    a0:f3:6f:b8:8b:0a:13:2f:c7:5f:dd:be:6e:ff:9b:
                    8b:56:db:f9:aa:c4:82:36:20:c4:61:56:e2:5a:f1:
                    9c:35:13:d9:96:ab:ec:33:ec:3e:68:30:0a:49:15:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6E:05:57:45:40:F1:A0:99:9B:65:A6:8A:8D:20:D9:35:77:9B:BB
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:53:56:57:b8:b7:79:a9:ce:d2:ac:41:18:4b:a1:60:d7:
         ca:6a:53:7a:f2:39:ff:6d:c7:d5:22:9d:93:88:24:99:e2:b2:
         37:93:e4:6b:67:fa:0a:57:88:46:74:8b:93:e7:ff:7c:89:7a:
         11:44:1f:31:0d:4a:06:69:db:85:63:f7:3a:0d:f1:dd:a7:18:
         c1:db:87:79:38:29:80:9a:94:16:84:f3:9a:af:04:6f:f1:00:
         65:b4:c5:22:bd:2a:15:d8:e8:00:28:2a:ce:44:25:38:fc:c6:
         02:ff:46:44:49:0e:79:5d:ac:d9:33:c6:fe:91:5d:20:68:0d:
         68:f9:bb:89:52:83:13:9a:e9:9a:e8:ae:d8:1f:38:d5:80:41:
         aa:95:53:44:9a:7a:95:1f:0f:42:d1:9f:fa:5c:bc:f1:5d:11:
         d2:01:19:6e:ab:6b:95:40:45:dc:8d:61:f4:b5:30:8b:1a:c1:
         25:b8:c5:fc:15:9a:a4:c5:75:25:65:ff:f3:5a:61:64:83:91:
         72:74:da:c8:96:6e:4c:51:06:4a:6b:d8:9c:36:53:f3:1c:ee:
         48:95:65:e7:98:a0:f2:5e:1c:2f:7b:e8:ba:ff:1f:e0:cb:ed:
         74:ab:14:28:90:6f:23:19:78:dc:24:de:83:fd:35:26:8f:1f:
         ff:91:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org