Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38362e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          LtfcqoR89+zSykwDxhQL8/mR9YFGT3AHFSGz3ZT52fY=
Subject key identifier:   94:0F:38:D0:AD:1E:A7:E6:7D:35:82:6B:D1:06:A7:78:33:20:EA:4A
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       07268E095154AAE34E376469258805B5D045B845
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     4230
IP address blocks:        189.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:26:8e:09:51:54:aa:e3:4e:37:64:69:25:88:05:b5:d0:45:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100C6762B35D369EB9034A69329672D39C02FF90E60AC0B00C2474F0F6EBD799E14E6F73A27E0645DB0CFFAD81E12C97BD87D8D1FACADD6A89D963BC13EC28343929A44175F2BD012038E2870C4A1FB1CBC42675C57B696D7907E1169FE7307E004ABFB27F1652B9A0CA8CD8EC78005FB6FDFE5B5B87DAD101C60368A4C0FC0D7D114844F3FADD9AA27A41C1A1F7B0A09AC86C7CF8C2902D83F847E0CE4A9726D474F60093B912271A15336A3137AAC7D4E3065D5EBB95A4F3ADC00364A39004802A7D3C16D253E453D80F53CEC7891E3DD8964CDE0754A9F48D440A0CF7B9E74B807E880626F240392C39D9595DAFE5225F84E71D86DB590B1ECF56E8F69393D090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:2b:35:d3:69:eb:90:34:a6:93:29:67:2d:
                    39:c0:2f:f9:0e:60:ac:0b:00:c2:47:4f:0f:6e:bd:
                    79:9e:14:e6:f7:3a:27:e0:64:5d:b0:cf:fa:d8:1e:
                    12:c9:7b:d8:7d:8d:1f:ac:ad:d6:a8:9d:96:3b:c1:
                    3e:c2:83:43:92:9a:44:17:5f:2b:d0:12:03:8e:28:
                    70:c4:a1:fb:1c:bc:42:67:5c:57:b6:96:d7:90:7e:
                    11:69:fe:73:07:e0:04:ab:fb:27:f1:65:2b:9a:0c:
                    a8:cd:8e:c7:80:05:fb:6f:df:e5:b5:b8:7d:ad:10:
                    1c:60:36:8a:4c:0f:c0:d7:d1:14:84:4f:3f:ad:d9:
                    aa:27:a4:1c:1a:1f:7b:0a:09:ac:86:c7:cf:8c:29:
                    02:d8:3f:84:7e:0c:e4:a9:72:6d:47:4f:60:09:3b:
                    91:22:71:a1:53:36:a3:13:7a:ac:7d:4e:30:65:d5:
                    eb:b9:5a:4f:3a:dc:00:36:4a:39:00:48:02:a7:d3:
                    c1:6d:25:3e:45:3d:80:f5:3c:ec:78:91:e3:dd:89:
                    64:cd:e0:75:4a:9f:48:d4:40:a0:cf:7b:9e:74:b8:
                    07:e8:80:62:6f:24:03:92:c3:9d:95:95:da:fe:52:
                    25:f8:4e:71:d8:6d:b5:90:b1:ec:f5:6e:8f:69:39:
                    3d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:38:D0:AD:1E:A7:E6:7D:35:82:6B:D1:06:A7:78:33:20:EA:4A
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:04:2a:26:77:59:99:18:a5:3d:bc:53:9d:ac:2e:73:4c:0f:
         d7:d9:72:f8:a1:b9:8f:d3:8f:64:60:cf:69:b3:11:b3:c0:08:
         d0:68:de:30:c0:0b:fd:50:a7:22:6d:7b:cf:04:5f:11:e3:a8:
         7e:1c:72:28:aa:9b:47:6f:d5:77:b1:fa:d6:32:2f:3e:8d:6f:
         2b:3c:e6:24:91:6f:e7:28:c5:81:59:e9:5d:90:d8:6c:09:ff:
         19:a8:5c:ac:7e:42:55:f8:db:65:9e:21:f5:28:56:39:6b:b8:
         44:8f:15:4e:42:4a:85:64:0e:82:96:57:1a:eb:00:4d:d7:78:
         69:9c:c1:a2:27:70:01:56:da:37:4b:77:27:9b:1a:32:1a:2b:
         a9:31:c3:6f:8b:d4:c9:7c:35:59:61:7b:f3:13:34:91:f3:cd:
         12:d5:8f:98:37:ee:87:9f:1e:a0:fe:11:0e:03:b6:fd:38:b4:
         56:ee:3e:77:03:36:cc:e4:29:ee:41:0d:83:dd:b5:0b:4d:4f:
         a7:3f:e6:d1:1e:d6:01:13:d5:a2:36:cf:30:95:b1:9c:e5:1e:
         a2:70:cd:33:e2:0b:8b:5a:b0:a4:42:ae:b3:1c:b7:08:64:57:
         fd:9f:9e:b3:f1:f4:9f:35:5b:b6:2c:17:fc:4d:2d:9d:1a:10:
         6f:7c:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:10 2025 by rpki-client