Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa
File:                     3230302e31302e3135392e302f32342d3234203d3e2034323330.roa (raw, json)
Hash identifier:          hRULat1k5SOV7WeuN5J6xtIE5d3QGg87uj1wY6vSPEo=
Subject key identifier:   D9:9F:AC:5D:04:BA:45:47:05:B9:43:4A:4B:57:3A:4F:69:D5:76:2B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       0F79F628355622D4267092CA574AC67BA1D4584B
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     4230
IP address blocks:        200.10.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:79:f6:28:35:56:22:d4:26:70:92:ca:57:4a:c6:7b:a1:d4:58:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:eb:83:8d:cd:6b:7d:2e:38:e0:9d:0e:4d:
                    6d:7f:d4:8e:34:a3:15:24:ba:a4:2b:7b:03:b9:94:
                    07:64:dd:d7:d9:7c:dd:39:67:a6:60:58:66:30:d8:
                    91:7a:5f:bd:86:1c:fb:bb:05:1c:b8:09:51:c8:a1:
                    60:99:e8:2a:f3:ca:c0:b3:a3:42:bc:af:d7:3c:c4:
                    af:e2:e7:6f:c5:cd:78:39:ab:a2:29:50:f1:e4:26:
                    48:27:fd:02:ff:e9:2f:a0:a4:09:1e:2c:9e:33:b7:
                    ed:1c:e1:89:9d:12:7f:26:b2:37:21:5a:0d:38:a9:
                    69:e3:5f:d8:76:36:23:27:c8:28:03:35:e4:b0:1c:
                    c3:08:af:2b:8f:b5:66:3b:3c:51:33:4e:41:89:fa:
                    95:33:e8:bc:b9:e8:d1:9d:e4:7b:8c:21:92:25:80:
                    20:b4:e3:5e:14:41:8b:0b:9c:08:45:3f:5b:72:c9:
                    26:24:0e:1c:53:7b:5b:07:10:a6:7d:d1:60:56:7a:
                    d1:9f:c7:89:cd:f0:4e:33:d3:13:d9:0a:51:2a:eb:
                    f2:22:35:82:72:dd:4d:0b:56:db:e7:6e:61:ea:ad:
                    21:45:e2:0c:06:1b:e5:ca:7c:00:01:46:7b:b8:d8:
                    31:5c:a1:d9:02:fe:fc:aa:35:6c:ac:59:b3:52:51:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:AC:5D:04:BA:45:47:05:B9:43:4A:4B:57:3A:4F:69:D5:76:2B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:23:4d:52:43:69:2f:db:3e:01:61:db:a4:43:01:6d:a6:c5:
         0c:3f:ae:00:f1:6d:a8:47:d6:4c:7c:a9:27:a1:35:02:fd:42:
         7b:bf:c1:8b:bd:ff:36:98:5d:56:31:9a:9b:a1:aa:69:7e:a0:
         d8:9a:63:f0:24:e4:15:48:49:71:5c:c5:d8:61:0c:56:4e:27:
         39:cf:19:30:21:d2:b8:02:42:a1:a5:36:02:b6:c1:2c:a6:7e:
         cc:f4:31:71:f6:49:1d:95:66:34:9f:9d:c3:20:8f:e5:80:29:
         c9:e8:d5:8b:05:0f:fa:15:b9:de:54:39:bf:a8:68:3e:83:5f:
         d7:87:4d:80:6e:aa:35:90:35:b0:c7:7d:9f:b1:55:07:ab:62:
         1a:9e:de:57:b2:63:ee:d7:02:a0:dc:e1:4f:88:d4:7e:24:7b:
         22:89:36:41:24:31:62:03:7f:02:47:65:4e:59:bd:13:9c:47:
         e9:29:bf:60:82:7d:59:cf:2f:d4:36:bf:19:9b:42:cd:8e:e2:
         fe:b4:5d:1b:7e:64:25:53:33:78:d0:ef:0b:9a:cd:1a:9e:ad:
         b3:33:0e:d4:b4:cd:c6:d8:60:a7:25:de:90:60:c1:3c:7e:e3:
         d5:63:10:1a:c5:37:38:34:71:c9:fb:03:98:60:de:41:d2:d5:
         33:e8:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org