Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e35332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          64YoUNz2qZCmuOyIxa6zIzcRZHLjIbQR71MnJDs7Ulc=
Subject key identifier:   6E:36:41:58:5C:1F:65:8A:D1:6D:DD:AC:E1:64:6F:16:9D:5A:4F:07
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1BABAA30AD33891CF3C4F959BD18FB124BECEFF1
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     4230
IP address blocks:        189.53.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ab:aa:30:ad:33:89:1c:f3:c4:f9:59:bd:18:fb:12:4b:ec:ef:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject: CN=3082010A0282010100C4B55022DFA0D007157C6BF86B95EB21ED3C3B8AD47B32A86BE0A202E14DED5590E45D57931CAD3546F04824B6F48DBFBE37CE7AA1AD4BB80EDBA7EA6B09F267D690039D36D9AF784835350100E3EB86CEE47D986BE1BF7B7FDE29A169EB5560866569450F76293A1EFE951B7F038E33A95145C9BFACDA943003F2296B09CF7A0F2F5355F187A9C61AD0C438C4935F78E260E05658044F317244609F270F0C06EA661BFF396D91E1334A69BEFF307501D73CDED2B92BAB7E7C346225F730086A259E9882D333C5E3B3CAD2A5F3320FB33728426088B95F47A6C40DC7538382395D90961B81BCA09A3E1A9637822577997AC97BA8ED255EC26DB9DCB74CCE01270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:50:22:df:a0:d0:07:15:7c:6b:f8:6b:95:
                    eb:21:ed:3c:3b:8a:d4:7b:32:a8:6b:e0:a2:02:e1:
                    4d:ed:55:90:e4:5d:57:93:1c:ad:35:46:f0:48:24:
                    b6:f4:8d:bf:be:37:ce:7a:a1:ad:4b:b8:0e:db:a7:
                    ea:6b:09:f2:67:d6:90:03:9d:36:d9:af:78:48:35:
                    35:01:00:e3:eb:86:ce:e4:7d:98:6b:e1:bf:7b:7f:
                    de:29:a1:69:eb:55:60:86:65:69:45:0f:76:29:3a:
                    1e:fe:95:1b:7f:03:8e:33:a9:51:45:c9:bf:ac:da:
                    94:30:03:f2:29:6b:09:cf:7a:0f:2f:53:55:f1:87:
                    a9:c6:1a:d0:c4:38:c4:93:5f:78:e2:60:e0:56:58:
                    04:4f:31:72:44:60:9f:27:0f:0c:06:ea:66:1b:ff:
                    39:6d:91:e1:33:4a:69:be:ff:30:75:01:d7:3c:de:
                    d2:b9:2b:ab:7e:7c:34:62:25:f7:30:08:6a:25:9e:
                    98:82:d3:33:c5:e3:b3:ca:d2:a5:f3:32:0f:b3:37:
                    28:42:60:88:b9:5f:47:a6:c4:0d:c7:53:83:82:39:
                    5d:90:96:1b:81:bc:a0:9a:3e:1a:96:37:82:25:77:
                    99:7a:c9:7b:a8:ed:25:5e:c2:6d:b9:dc:b7:4c:ce:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:41:58:5C:1F:65:8A:D1:6D:DD:AC:E1:64:6F:16:9D:5A:4F:07
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e35332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:4a:71:2a:7a:b6:1b:29:fd:8b:b3:81:6f:1f:15:27:d0:
         59:ed:7c:5d:df:9a:e1:79:1c:7e:a6:45:d6:d1:57:86:0f:8b:
         7d:7b:f0:aa:fe:68:a1:4a:a5:ba:b7:c2:2d:90:63:16:47:59:
         1f:12:b7:24:7e:48:d7:60:9e:d8:39:b2:a0:89:29:3d:f5:35:
         a6:b1:ef:92:c1:9d:34:34:9e:1a:29:cc:a1:55:a4:4a:49:30:
         48:27:2a:d8:40:ec:6f:90:ae:20:57:a6:34:cc:ce:d6:fa:80:
         bc:cd:ef:39:99:81:65:77:7f:5f:48:cb:44:9e:65:80:f8:10:
         4c:b3:f1:b3:d1:19:e3:3e:55:20:b1:bf:32:31:70:e7:6f:e4:
         7f:fe:59:9a:11:0d:f3:c5:0d:fc:e6:46:f7:7b:ec:fc:28:6a:
         12:b1:5a:e8:86:b5:ad:4d:cb:a9:43:58:79:64:85:01:63:55:
         e3:c0:f4:6a:3e:23:7e:0b:0b:d8:8a:d0:87:23:13:55:5c:d2:
         3a:1f:9e:ba:d1:45:29:70:4a:9f:03:94:86:42:d7:98:61:69:
         2a:a6:06:d1:60:9f:df:5e:d6:c3:b8:0d:9d:ce:cc:c4:b9:67:
         02:1b:f1:56:5d:df:8e:33:92:95:20:4c:eb:d0:8d:53:d0:e3:
         0b:d1:a6:dd
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUG6uqMK0ziRzzxPlZvRj7Ekvs7/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDZaFw0yNTA0MDIxODMxMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRCNTUwMjJERkEwRDAwNzE1
N0M2QkY4NkI5NUVCMjFFRDNDM0I4QUQ0N0IzMkE4NkJFMEEyMDJFMTRERUQ1NTkw
RTQ1RDU3OTMxQ0FEMzU0NkYwNDgyNEI2RjQ4REJGQkUzN0NFN0FBMUFENEJCODBF
REJBN0VBNkIwOUYyNjdENjkwMDM5RDM2RDlBRjc4NDgzNTM1MDEwMEUzRUI4NkNF
RTQ3RDk4NkJFMUJGN0I3RkRFMjlBMTY5RUI1NTYwODY2NTY5NDUwRjc2MjkzQTFF
RkU5NTFCN0YwMzhFMzNBOTUxNDVDOUJGQUNEQTk0MzAwM0YyMjk2QjA5Q0Y3QTBG
MkY1MzU1RjE4N0E5QzYxQUQwQzQzOEM0OTM1Rjc4RTI2MEUwNTY1ODA0NEYzMTcy
NDQ2MDlGMjcwRjBDMDZFQTY2MUJGRjM5NkQ5MUUxMzM0QTY5QkVGRjMwNzUwMUQ3
M0NERUQyQjkyQkFCN0U3QzM0NjIyNUY3MzAwODZBMjU5RTk4ODJEMzMzQzVFM0Iz
Q0FEMkE1RjMzMjBGQjMzNzI4NDI2MDg4Qjk1RjQ3QTZDNDBEQzc1MzgzODIzOTVE
OTA5NjFCODFCQ0EwOUEzRTFBOTYzNzgyMjU3Nzk5N0FDOTdCQThFRDI1NUVDMjZE
QjlEQ0I3NENDRTAxMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxLVQIt+g0AcVfGv4a5XrIe08O4rUezKoa+CiAuFN7VWQ5F1Xkxyt
NUbwSCS29I2/vjfOeqGtS7gO26fqawnyZ9aQA5022a94SDU1AQDj64bO5H2Ya+G/
e3/eKaFp61VghmVpRQ92KToe/pUbfwOOM6lRRcm/rNqUMAPyKWsJz3oPL1NV8Yep
xhrQxDjEk1944mDgVlgETzFyRGCfJw8MBupmG/85bZHhM0ppvv8wdQHXPN7SuSur
fnw0YiX3MAhqJZ6YgtMzxeOzytKl8zIPszcoQmCIuV9HpsQNx1ODgjldkJYbgbyg
mj4aljeCJXeZesl7qO0lXsJtudy3TM4BJwIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FG42QVhcH2WK0W3drOFkbxadWk8HMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzgzOTJlMzUzMzJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL01MA0GCSqG
SIb3DQEBCwUAA4IBAQA6W0pxKnq2Gyn9i7OBbx8VJ9BZ7Xxd35rheRx+pkXW0VeG
D4t9e/Cq/mihSqW6t8ItkGMWR1kfErckfkjXYJ7YObKgiSk99TWmse+SwZ00NJ4a
KcyhVaRKSTBIJyrYQOxvkK4gV6Y0zM7W+oC8ze85mYFld39fSMtEnmWA+BBMs/Gz
0RnjPlUgsb8yMXDnb+R//lmaEQ3zxQ385kb3e+z8KGoSsVrohrWtTcupQ1h5ZIUB
Y1XjwPRqPiN+CwvYitCHIxNVXNI6H5660UUpcEqfA5SGQteYYWkqpgbRYJ/fXtbD
uA2dzszEuWcCG/FWXd+OM5KVIEzr0I1T0OML0abd
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org