Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa
File:                     3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa (raw, json)
Hash identifier:          UIzbODNjojQjLVEpFu9CCnrjaWnb30+KN2K1HeoDGac=
Subject key identifier:   B2:40:F9:D4:83:17:8D:B2:27:03:44:2E:44:75:70:EB:2C:4A:98:3D
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2FD067D89C66078F5BA558C58B87D83BE6B20035
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        200.139.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d0:67:d8:9c:66:07:8f:5b:a5:58:c5:8b:87:d8:3b:e6:b2:00:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:04:03:f4:71:56:90:cd:dc:7a:ab:9f:3c:
                    b8:25:be:70:c1:60:45:c0:da:1f:06:ed:5d:de:83:
                    dd:06:63:75:8c:21:96:7d:ad:0c:7d:40:75:f9:e1:
                    19:d2:2a:e9:3e:76:14:d4:63:ee:0e:d1:5f:ac:1b:
                    22:67:a2:40:6c:97:1d:9e:2d:55:b5:7e:0c:36:88:
                    75:9d:71:0e:69:b8:81:0a:e4:fb:dc:62:66:ba:49:
                    22:14:5c:8d:eb:6e:7c:4e:e4:2d:0c:60:72:fe:1b:
                    10:d4:7d:d7:c9:9e:11:af:49:b7:2d:42:b0:2b:f5:
                    5e:47:25:d5:e0:f2:04:11:b0:b0:6c:3d:7b:25:c0:
                    26:00:29:ff:bc:47:0c:53:61:13:c9:75:1d:9f:bb:
                    f0:8c:7d:16:4e:15:41:a9:82:d4:78:54:0a:0b:3b:
                    c5:f2:6e:05:69:1e:1c:c7:57:39:8d:eb:27:9e:55:
                    18:6e:f4:eb:62:e3:28:98:7d:c3:61:40:ca:48:18:
                    e8:e5:3a:7a:f8:57:57:1e:2f:09:2b:04:7b:23:55:
                    f7:9b:52:d5:8b:84:a6:7b:d3:1d:fd:0c:89:a8:0b:
                    dc:3d:c7:5f:3e:b7:78:c9:8c:65:82:50:2f:a7:d8:
                    3f:09:4f:67:07:de:59:54:c7:10:25:ac:ab:50:a8:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:40:F9:D4:83:17:8D:B2:27:03:44:2E:44:75:70:EB:2C:4A:98:3D
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.139.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:36:5d:ac:bc:15:6b:93:87:f9:43:23:8c:20:ae:c8:72:b4:
         fb:ad:42:1f:92:01:c6:00:fa:8e:15:a4:62:44:7e:3a:bb:61:
         c9:6e:b0:71:5c:68:21:b9:88:1c:b1:11:88:94:ed:60:41:9b:
         40:5f:71:0d:1f:22:fa:47:45:b7:ce:b6:8b:0d:c4:7a:f3:16:
         2c:ec:1a:f5:9c:ba:0e:b4:73:a8:98:22:2b:b2:73:b2:2d:34:
         78:7d:23:7d:59:f3:b2:4f:fe:fb:ed:f2:d7:05:e1:f2:35:81:
         3f:89:73:e6:af:0d:5f:29:57:cd:f8:c3:7e:56:6d:b3:28:bf:
         a6:be:12:12:dc:08:a2:c5:d3:99:42:0a:2e:57:7b:33:0e:78:
         44:c3:d8:f1:36:06:15:22:35:a6:0b:2e:55:b4:7e:75:c8:63:
         70:fc:20:cf:36:7b:ae:c2:9d:56:84:67:dc:2b:90:e4:ff:c3:
         ba:21:b0:0c:e7:fe:75:9b:4b:08:50:b6:23:83:aa:f8:44:d6:
         2f:f6:ed:d3:e7:26:dc:8e:47:8d:c4:cd:44:f4:60:53:b8:ff:
         7b:4e:97:4f:cd:1d:41:e6:7a:59:c0:6f:a4:cc:d1:e8:8f:93:
         c9:41:0e:78:24:4a:b3:93:58:1e:59:48:37:f1:9b:5b:5b:0d:
         2b:c0:63:23
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUL9Bn2JxmB49bpVjFi4fYO+ayADUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDdaFw0yNTA0MDIxODMxMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURFRTA0MDNGNDcxNTY5MENE
REM3QUFCOUYzQ0I4MjVCRTcwQzE2MDQ1QzBEQTFGMDZFRDVEREU4M0REMDY2Mzc1
OEMyMTk2N0RBRDBDN0Q0MDc1RjlFMTE5RDIyQUU5M0U3NjE0RDQ2M0VFMEVEMTVG
QUMxQjIyNjdBMjQwNkM5NzFEOUUyRDU1QjU3RTBDMzY4ODc1OUQ3MTBFNjlCODgx
MEFFNEZCREM2MjY2QkE0OTIyMTQ1QzhERUI2RTdDNEVFNDJEMEM2MDcyRkUxQjEw
RDQ3REQ3Qzk5RTExQUY0OUI3MkQ0MkIwMkJGNTVFNDcyNUQ1RTBGMjA0MTFCMEIw
NkMzRDdCMjVDMDI2MDAyOUZGQkM0NzBDNTM2MTEzQzk3NTFEOUZCQkYwOEM3RDE2
NEUxNTQxQTk4MkQ0Nzg1NDBBMEIzQkM1RjI2RTA1NjkxRTFDQzc1NzM5OERFQjI3
OUU1NTE4NkVGNEVCNjJFMzI4OTg3REMzNjE0MENBNDgxOEU4RTUzQTdBRjg1NzU3
MUUyRjA5MkIwNDdCMjM1NUY3OUI1MkQ1OEI4NEE2N0JEMzFERkQwQzg5QTgwQkRD
M0RDNzVGM0VCNzc4Qzk4QzY1ODI1MDJGQTdEODNGMDk0RjY3MDdERTU5NTRDNzEw
MjVBQ0FCNTBBOENCMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAre4EA/RxVpDN3Hqrnzy4Jb5wwWBFwNofBu1d3oPdBmN1jCGWfa0M
fUB1+eEZ0irpPnYU1GPuDtFfrBsiZ6JAbJcdni1VtX4MNoh1nXEOabiBCuT73GJm
ukkiFFyN6258TuQtDGBy/hsQ1H3XyZ4Rr0m3LUKwK/VeRyXV4PIEEbCwbD17JcAm
ACn/vEcMU2ETyXUdn7vwjH0WThVBqYLUeFQKCzvF8m4FaR4cx1c5jesnnlUYbvTr
YuMomH3DYUDKSBjo5Tp6+FdXHi8JKwR7I1X3m1LVi4Sme9Md/QyJqAvcPcdfPrd4
yYxlglAvp9g/CU9nB95ZVMcQJayrUKjLEQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLJA+dSDF42yJwNELkR1cOssSpg9MB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzEzMzM5MmUzMTM5
MzIyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsiL
wDANBgkqhkiG9w0BAQsFAAOCAQEAeDZdrLwVa5OH+UMjjCCuyHK0+61CH5IBxgD6
jhWkYkR+OrthyW6wcVxoIbmIHLERiJTtYEGbQF9xDR8i+kdFt862iw3EevMWLOwa
9Zy6DrRzqJgiK7Jzsi00eH0jfVnzsk/+++3y1wXh8jWBP4lz5q8NXylXzfjDflZt
syi/pr4SEtwIosXTmUIKLld7Mw54RMPY8TYGFSI1pgsuVbR+dchjcPwgzzZ7rsKd
VoRn3CuQ5P/DuiGwDOf+dZtLCFC2I4Oq+ETWL/bt0+cm3I5HjcTNRPRgU7j/e06X
T80dQeZ6WcBvpMzR6I+TyUEOeCRKs5NYHllIN/GbW1sNK8BjIw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org