Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          9e9B5wvHQQEVqPz+3YFITddqKzKuen0yG3Yjw3DPLaM=
Subject key identifier:   9F:9D:35:6E:28:15:17:8B:0C:11:85:42:F6:F7:3F:74:6E:DF:2F:60
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       11DA983E72D7FAE5EEEAB1F5C2B0B1C5D596F487
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     4230
IP address blocks:        189.88.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:da:98:3e:72:d7:fa:e5:ee:ea:b1:f5:c2:b0:b1:c5:d5:96:f4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100B412EA5C04A63F8422081A95154AC6D66CA45908FFAA9866ED1732CA299D916B56F9E4919B9DD461AC7C40AB38EE941A758F5A303623459C21C9CD8BF2F0F3A5DB0B77D2663D52CDB2EF4F49E775BBBC3BBA2CAC0142BCDC581EF3E2CEB57FCFF1C48298701FDC63FE959D146EC0A22160A5D5EDC1334166DA115E4296C465FB2A6BF9B5E3520757EE8C0E1F2E153A7B98B765F7E84854DF2D376B7A0FB336783634D77088EE08988143884DFB158E8A75BA367327804F16372CBC9DA5A5984F5D2861F0D1E300F6A404BA33B7CC44F85CB67F0034F2BD5DFF49B2C62D0E4EF59A430A4201008C9ECB54E6F8B3C1C2B6F2225572A29025551F5961A62E372FF90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:ea:5c:04:a6:3f:84:22:08:1a:95:15:4a:
                    c6:d6:6c:a4:59:08:ff:aa:98:66:ed:17:32:ca:29:
                    9d:91:6b:56:f9:e4:91:9b:9d:d4:61:ac:7c:40:ab:
                    38:ee:94:1a:75:8f:5a:30:36:23:45:9c:21:c9:cd:
                    8b:f2:f0:f3:a5:db:0b:77:d2:66:3d:52:cd:b2:ef:
                    4f:49:e7:75:bb:bc:3b:ba:2c:ac:01:42:bc:dc:58:
                    1e:f3:e2:ce:b5:7f:cf:f1:c4:82:98:70:1f:dc:63:
                    fe:95:9d:14:6e:c0:a2:21:60:a5:d5:ed:c1:33:41:
                    66:da:11:5e:42:96:c4:65:fb:2a:6b:f9:b5:e3:52:
                    07:57:ee:8c:0e:1f:2e:15:3a:7b:98:b7:65:f7:e8:
                    48:54:df:2d:37:6b:7a:0f:b3:36:78:36:34:d7:70:
                    88:ee:08:98:81:43:88:4d:fb:15:8e:8a:75:ba:36:
                    73:27:80:4f:16:37:2c:bc:9d:a5:a5:98:4f:5d:28:
                    61:f0:d1:e3:00:f6:a4:04:ba:33:b7:cc:44:f8:5c:
                    b6:7f:00:34:f2:bd:5d:ff:49:b2:c6:2d:0e:4e:f5:
                    9a:43:0a:42:01:00:8c:9e:cb:54:e6:f8:b3:c1:c2:
                    b6:f2:22:55:72:a2:90:25:55:1f:59:61:a6:2e:37:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:35:6E:28:15:17:8B:0C:11:85:42:F6:F7:3F:74:6E:DF:2F:60
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:c7:e0:58:19:7f:08:01:18:b4:64:4d:31:9e:84:f5:4a:09:
         0e:5b:9c:c0:63:3c:13:ee:4b:f4:e7:83:b5:e8:ed:9b:f3:55:
         46:6a:90:9f:78:a7:c7:64:37:ef:30:cb:9e:2c:76:1a:b8:b2:
         be:18:04:31:3b:a3:ad:9f:f6:4a:73:bc:9c:42:e4:fb:ff:be:
         39:13:97:e8:6f:23:57:d2:76:07:a4:fb:96:1f:5e:03:3f:e0:
         28:a5:8a:1f:71:6e:e6:dc:c3:b0:4d:46:12:b7:8b:13:2a:43:
         a5:e8:21:70:a4:d0:a9:61:b0:49:7a:c9:58:e4:c9:5e:fa:7e:
         ab:0f:02:48:72:6a:94:69:1d:17:16:3a:eb:96:0a:1e:95:17:
         7a:10:93:09:8b:43:af:f3:5a:ca:79:3b:d4:e6:62:ca:20:25:
         a2:ab:5f:a7:dd:a0:84:f2:72:21:59:19:c8:00:db:c8:1a:f1:
         c0:d2:34:78:6c:27:87:da:e0:05:cb:46:b4:61:4e:d8:c8:98:
         64:cf:09:9d:68:b0:8f:32:65:62:91:b8:d1:21:c1:23:74:67:
         49:2f:37:24:09:b4:60:00:90:70:ac:e4:b7:af:aa:7a:a8:9b:
         e6:19:8d:4a:16:a1:f6:a8:b5:0c:ad:5a:84:74:b9:f7:a0:d0:
         5b:b0:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:38:07 2025 by rpki-client