Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          SdltPyjdUF+wZ3LEgATFClFQB3OgMC3tT4sTJqg6mWM=
Subject key identifier:   A4:01:09:B2:0A:04:C0:DA:7D:59:F1:B4:87:84:B4:F9:3D:00:30:FB
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       66AB1D74F32017C8120E955A04C7A746A1437D57
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     4230
IP address blocks:        189.88.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ab:1d:74:f3:20:17:c8:12:0e:95:5a:04:c7:a7:46:a1:43:7d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:68:5c:a7:a6:8b:96:59:88:98:44:5d:5b:8f:
                    85:a2:35:a2:76:e3:42:38:55:7a:54:27:e2:ff:21:
                    ec:4f:ba:b0:1a:3f:56:66:06:4a:76:da:93:a0:ce:
                    84:c7:57:83:36:5f:1b:90:85:1a:53:43:f3:5b:ff:
                    eb:78:e9:b7:34:cd:2a:9e:c5:96:7a:b2:8b:37:69:
                    2c:dd:28:0b:de:fa:6e:da:6e:b0:26:78:4c:88:ba:
                    e8:64:eb:97:e4:af:59:a5:58:e9:19:9a:3c:3c:4f:
                    af:b7:b4:3a:6b:7c:ef:74:8b:cb:66:b1:a7:ce:20:
                    47:9d:8b:ae:6d:9f:54:94:17:48:c1:8f:05:ec:15:
                    01:cd:ad:e9:a6:2f:9f:c8:ce:ce:ad:e3:8d:af:14:
                    0e:0d:b4:61:5e:e1:24:29:c2:2b:29:3d:4f:80:cf:
                    5b:e4:78:f1:0d:7b:dd:06:99:71:69:8e:36:5c:67:
                    be:52:f2:3b:41:9e:1f:52:f5:9a:38:bd:d7:41:6c:
                    30:7b:7c:6f:46:65:e4:86:43:d3:39:53:47:74:fa:
                    8d:02:9b:d9:cd:be:56:24:28:6a:cc:ca:36:93:89:
                    2e:76:87:7e:3f:73:3d:ea:1d:c4:67:ab:4c:87:51:
                    e5:3c:2a:f7:40:5f:1b:53:7e:1a:97:f9:64:a7:d1:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:01:09:B2:0A:04:C0:DA:7D:59:F1:B4:87:84:B4:F9:3D:00:30:FB
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138392e38382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:bc:68:5a:82:2d:8c:8b:b3:82:d2:0e:0b:b6:f6:93:94:
         36:de:fc:12:a1:d6:4a:d6:79:94:da:1e:91:3a:5f:66:77:85:
         2b:83:5b:e8:2f:40:ed:29:91:36:33:37:0d:51:a2:a1:2f:e4:
         d0:a2:ef:ec:9c:b3:bb:a4:ab:b5:03:38:5d:ae:4d:79:ff:80:
         fc:da:12:29:6b:6c:83:4c:eb:64:86:83:49:4b:71:a1:0b:ec:
         31:7f:3c:60:e2:1b:50:f4:ae:82:10:17:dc:de:01:fb:a6:7a:
         02:5e:bc:cc:ac:fc:1e:ff:77:d6:c4:38:d9:2b:17:16:d7:50:
         99:dc:a0:75:39:c5:b0:a2:3b:c7:73:31:19:fc:b5:11:94:e8:
         25:70:20:6c:bc:21:92:30:ae:b7:41:5e:27:8c:b7:1e:af:ba:
         ff:11:fa:43:6a:c1:bb:a0:f9:01:a4:b8:c5:6d:50:57:f6:09:
         6e:ba:03:16:ea:16:ea:93:89:13:a3:4d:2b:9d:ce:d6:ec:4a:
         3a:29:ba:10:29:70:9d:6c:30:2b:1f:0e:4a:85:b9:71:82:cd:
         58:98:a1:26:ab:c2:91:15:5f:03:33:3f:ff:eb:d1:7f:de:3d:
         84:cc:da:3b:42:c2:74:eb:88:cf:18:f0:d2:9c:83:49:df:9e:
         06:a3:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org