Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38372e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Fe88nP1bMHG1lcA9PvrXkqE8tgv7tQTD2Xif7tGpejQ=
Subject key identifier:   75:87:5C:73:24:D9:90:07:89:F3:7B:99:2B:B4:41:EC:D8:E9:C3:5B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       727FF477044D0109B2602916E245EF443805BB6A
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:05 +0000
ROA not before:           Wed 03 Apr 2024 18:26:05 +0000
ROA not after:            Wed 02 Apr 2025 18:31:05 +0000
asID:                     4230
IP address blocks:        189.87.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7f:f4:77:04:4d:01:09:b2:60:29:16:e2:45:ef:44:38:05:bb:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:07:9c:3c:3b:ce:3e:6f:83:0e:4c:30:7c:
                    f9:49:d2:a9:35:6f:03:4d:00:a1:bd:d0:f2:d1:03:
                    c4:10:82:4b:97:e1:f8:cc:e5:3f:1d:1e:5c:ed:c9:
                    e3:c5:20:23:9f:0e:88:a6:e3:0e:e3:68:4d:3c:86:
                    5f:d2:d2:36:9f:42:85:4b:86:61:a8:a9:aa:79:e4:
                    c1:9a:a8:b9:12:81:3b:b5:87:2b:5a:0c:98:2d:c5:
                    17:72:9c:5c:e0:2a:ee:61:27:70:1f:75:ff:40:6f:
                    47:11:41:92:1f:04:ea:0e:04:63:f5:63:5b:8d:6d:
                    9a:91:86:5d:5b:36:bc:29:55:32:22:16:87:f6:fa:
                    81:86:a8:1c:86:ce:a5:bc:33:14:d9:cd:7f:6f:35:
                    47:95:2f:46:52:18:a1:c3:3b:80:ee:5e:7b:78:2f:
                    2d:ce:75:89:ec:69:82:33:58:72:83:60:4e:6b:73:
                    2f:a3:8a:18:29:3a:26:88:ae:b3:e3:cc:3c:01:f3:
                    c9:37:0c:7d:75:78:d0:29:77:e9:8a:e8:aa:9a:99:
                    e2:91:96:08:14:ff:c3:80:ff:7a:2e:4b:88:09:52:
                    6a:44:b8:4a:a1:25:0f:6e:6e:13:ed:9c:94:ea:f3:
                    12:99:d1:58:4a:5b:b3:21:2f:26:37:13:1f:61:07:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:5C:73:24:D9:90:07:89:F3:7B:99:2B:B4:41:EC:D8:E9:C3:5B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:56:6b:37:97:03:96:36:2d:64:17:84:4a:ad:4f:d5:63:10:
         da:e6:cb:15:10:d0:d6:0c:ea:a2:b5:fc:02:0a:89:af:fb:02:
         91:b5:ed:fc:9e:da:04:3c:0b:43:3d:4b:33:c0:2d:b6:0a:29:
         d1:c7:72:1c:c7:6f:91:e4:f9:47:5a:c8:df:dd:6e:59:19:d1:
         a8:01:9d:42:0c:52:2d:30:fb:67:ec:fe:b3:7b:91:4a:62:dd:
         d3:3c:7f:a0:28:c2:ea:28:10:78:82:21:df:19:37:da:df:4a:
         85:e3:c8:9d:25:3c:e4:b4:92:ff:a7:66:27:26:1d:14:e1:8f:
         14:21:f3:92:4f:34:b3:60:d6:f3:af:4e:a6:de:a8:d5:3d:11:
         72:20:c8:9b:88:b5:a6:ed:5c:f9:9c:44:80:09:9f:4d:d7:9a:
         49:20:26:c1:63:1f:4b:23:9a:3b:4a:95:21:97:25:c6:52:23:
         81:e1:80:0a:dd:f3:b2:5a:fc:22:13:eb:a9:7a:3d:ce:ad:66:
         34:18:91:b5:22:d8:ec:d2:e3:90:a0:28:36:da:e6:e9:7f:3b:
         e7:e8:39:f7:5b:3d:9c:b6:6a:1e:b1:40:0b:12:6e:ef:17:1e:
         f2:ac:60:6b:f8:e0:25:49:c7:30:d9:14:e7:e9:f9:96:96:df:
         60:de:5f:5d
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUcn/0dwRNAQmyYCkW4kXvRDgFu2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDVaFw0yNTA0MDIxODMxMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZBNDA3OUMzQzNCQ0UzRTZG
ODMwRTRDMzA3Q0Y5NDlEMkE5MzU2RjAzNEQwMEExQkREMEYyRDEwM0M0MTA4MjRC
OTdFMUY4Q0NFNTNGMUQxRTVDRURDOUUzQzUyMDIzOUYwRTg4QTZFMzBFRTM2ODRE
M0M4NjVGRDJEMjM2OUY0Mjg1NEI4NjYxQThBOUFBNzlFNEMxOUFBOEI5MTI4MTNC
QjU4NzJCNUEwQzk4MkRDNTE3NzI5QzVDRTAyQUVFNjEyNzcwMUY3NUZGNDA2RjQ3
MTE0MTkyMUYwNEVBMEUwNDYzRjU2MzVCOEQ2RDlBOTE4NjVENUIzNkJDMjk1NTMy
MjIxNjg3RjZGQTgxODZBODFDODZDRUE1QkMzMzE0RDlDRDdGNkYzNTQ3OTUyRjQ2
NTIxOEExQzMzQjgwRUU1RTdCNzgyRjJEQ0U3NTg5RUM2OTgyMzM1ODcyODM2MDRF
NkI3MzJGQTM4QTE4MjkzQTI2ODhBRUIzRTNDQzNDMDFGM0M5MzcwQzdENzU3OEQw
Mjk3N0U5OEFFOEFBOUE5OUUyOTE5NjA4MTRGRkMzODBGRjdBMkU0Qjg4MDk1MjZB
NDRCODRBQTEyNTBGNkU2RTEzRUQ5Qzk0RUFGMzEyOTlEMTU4NEE1QkIzMjEyRjI2
MzcxMzFGNjEwN0I1M0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr6QHnDw7zj5vgw5MMHz5SdKpNW8DTQChvdDy0QPEEIJLl+H4zOU/
HR5c7cnjxSAjnw6IpuMO42hNPIZf0tI2n0KFS4ZhqKmqeeTBmqi5EoE7tYcrWgyY
LcUXcpxc4CruYSdwH3X/QG9HEUGSHwTqDgRj9WNbjW2akYZdWza8KVUyIhaH9vqB
hqgchs6lvDMU2c1/bzVHlS9GUhihwzuA7l57eC8tznWJ7GmCM1hyg2BOa3Mvo4oY
KTomiK6z48w8AfPJNwx9dXjQKXfpiuiqmpnikZYIFP/DgP96LkuICVJqRLhKoSUP
bm4T7ZyU6vMSmdFYSluzIS8mNxMfYQe1PQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FHWHXHMk2ZAHifN7mSu0QezY6cNbMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMxMzgzOTJlMzgzNzJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL1XMA0GCSqG
SIb3DQEBCwUAA4IBAQAiVms3lwOWNi1kF4RKrU/VYxDa5ssVENDWDOqitfwCComv
+wKRte38ntoEPAtDPUszwC22CinRx3Icx2+R5PlHWsjf3W5ZGdGoAZ1CDFItMPtn
7P6ze5FKYt3TPH+gKMLqKBB4giHfGTfa30qF48idJTzktJL/p2YnJh0U4Y8UIfOS
TzSzYNbzr06m3qjVPRFyIMibiLWm7Vz5nESACZ9N15pJICbBYx9LI5o7SpUhlyXG
UiOB4YAK3fOyWvwiE+upej3OrWY0GJG1Itjs0uOQoCg22ubpfzvn6Dn3Wz2ctmoe
sUALEm7vFx7yrGBr+OAlSccw2RTn6fmWlt9g3l9d
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org