Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3136362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          UI4QWMNtuISbJxbenCI2Iq9RdZxZqUtsOaHG3RvjLiA=
Subject key identifier:   28:50:9E:D5:D6:68:37:09:6D:2D:4A:BF:84:3A:3B:22:88:E4:56:8A
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3559382FE0EACC095E508664F4A1873CA56AF850
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     4230
IP address blocks:        200.166.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:38:2f:e0:ea:cc:09:5e:50:86:64:f4:a1:87:3c:a5:6a:f8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:7a:b0:2a:5b:41:8c:27:31:5d:6f:99:eb:
                    c2:71:b8:1f:a0:25:6f:1b:5e:bd:36:0c:48:aa:eb:
                    c1:cb:55:27:c1:00:31:d5:eb:be:51:47:f8:52:3b:
                    8e:48:b9:eb:23:1d:87:c8:41:f1:9d:8c:97:67:70:
                    13:4a:35:21:5f:b5:7c:bb:2b:3f:91:fb:83:aa:26:
                    ee:ff:13:94:fd:f9:97:78:53:d4:f1:b2:92:5c:5b:
                    79:7c:c4:ca:12:42:ac:68:59:fe:7a:f2:3b:95:f8:
                    ff:af:d2:9e:c5:0c:ea:3d:57:11:e5:2b:a9:2e:92:
                    b2:16:f1:51:bc:70:3d:38:0b:15:7b:4f:94:61:77:
                    28:f2:c9:15:29:42:de:65:9a:8c:c4:7c:d3:45:66:
                    0f:ff:d4:51:72:66:5e:4a:4f:29:cb:f8:ee:90:2f:
                    f5:7c:2d:62:4e:b3:da:6c:9a:89:95:43:a6:67:25:
                    24:e3:97:09:ca:c9:b6:30:a0:e1:0d:f5:43:ad:4f:
                    e8:3d:78:38:23:7e:cf:82:f4:dd:c8:1a:b9:d0:11:
                    5b:48:f3:2e:cf:35:64:ea:aa:6f:dc:e5:60:77:6a:
                    0e:6f:a7:23:d2:0a:be:69:1a:23:6e:3e:db:83:70:
                    3f:e5:ca:e8:09:81:4c:7c:59:85:46:77:bd:3b:e1:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:50:9E:D5:D6:68:37:09:6D:2D:4A:BF:84:3A:3B:22:88:E4:56:8A
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:44:88:f2:fa:e0:cd:85:be:af:56:64:2b:c8:35:fd:19:e7:
         11:16:3f:f2:47:de:c9:62:bf:85:24:d9:7d:9b:06:2d:cc:f8:
         01:0b:16:fa:c2:aa:7c:2c:25:db:b4:9d:44:f4:b1:72:a0:e7:
         8b:36:e5:92:37:9d:b8:f2:57:41:07:c7:ab:fc:17:be:d5:0c:
         ef:8a:3b:19:a7:42:0c:bc:fe:a6:81:59:6c:00:06:aa:b7:86:
         d1:de:5d:89:ec:fe:21:ca:f8:1b:14:4e:0d:63:55:70:9a:15:
         82:e5:d7:c7:f9:67:db:10:0a:ca:25:36:4a:86:a1:36:33:28:
         c1:16:8d:29:a2:8a:d6:34:bc:34:ff:82:a9:84:68:14:de:a2:
         d0:5b:3e:70:da:0c:70:a0:ef:1c:88:5f:23:90:27:78:4d:02:
         b4:94:4e:c5:d7:ba:40:10:67:db:79:57:09:2f:65:ed:df:92:
         e6:c9:ec:29:c9:a4:25:2d:9d:04:56:99:7d:b7:fe:3a:e5:83:
         dc:a6:78:96:3e:a3:dc:b1:fd:76:41:9c:ec:e1:42:08:90:84:
         1e:f6:dc:06:20:12:8a:75:1a:f0:ac:8b:77:cc:bf:8e:4b:ab:
         41:38:2f:aa:7a:39:6f:61:61:41:b1:e7:0a:da:51:1a:3b:d2:
         a1:60:25:44
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUNVk4L+DqzAleUIZk9KGHPKVq+FAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MTBaFw0yNTA0MDIxODMxMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzExMDdBQjAyQTVCNDE4QzI3
MzE1RDZGOTlFQkMyNzFCODFGQTAyNTZGMUI1RUJEMzYwQzQ4QUFFQkMxQ0I1NTI3
QzEwMDMxRDVFQkJFNTE0N0Y4NTIzQjhFNDhCOUVCMjMxRDg3Qzg0MUYxOUQ4Qzk3
Njc3MDEzNEEzNTIxNUZCNTdDQkIyQjNGOTFGQjgzQUEyNkVFRkYxMzk0RkRGOTk3
Nzg1M0Q0RjFCMjkyNUM1Qjc5N0NDNENBMTI0MkFDNjg1OUZFN0FGMjNCOTVGOEZG
QUZEMjlFQzUwQ0VBM0Q1NzExRTUyQkE5MkU5MkIyMTZGMTUxQkM3MDNEMzgwQjE1
N0I0Rjk0NjE3NzI4RjJDOTE1Mjk0MkRFNjU5QThDQzQ3Q0QzNDU2NjBGRkZENDUx
NzI2NjVFNEE0RjI5Q0JGOEVFOTAyRkY1N0MyRDYyNEVCM0RBNkM5QTg5OTU0M0E2
NjcyNTI0RTM5NzA5Q0FDOUI2MzBBMEUxMERGNTQzQUQ0RkU4M0Q3ODM4MjM3RUNG
ODJGNEREQzgxQUI5RDAxMTVCNDhGMzJFQ0YzNTY0RUFBQTZGRENFNTYwNzc2QTBF
NkZBNzIzRDIwQUJFNjkxQTIzNkUzRURCODM3MDNGRTVDQUU4MDk4MTRDN0M1OTg1
NDY3N0JEM0JFMTc5RDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwRB6sCpbQYwnMV1vmevCcbgfoCVvG169NgxIquvBy1UnwQAx1eu+
UUf4UjuOSLnrIx2HyEHxnYyXZ3ATSjUhX7V8uys/kfuDqibu/xOU/fmXeFPU8bKS
XFt5fMTKEkKsaFn+evI7lfj/r9KexQzqPVcR5SupLpKyFvFRvHA9OAsVe0+UYXco
8skVKULeZZqMxHzTRWYP/9RRcmZeSk8py/jukC/1fC1iTrPabJqJlUOmZyUk45cJ
ysm2MKDhDfVDrU/oPXg4I37PgvTdyBq50BFbSPMuzzVk6qpv3OVgd2oOb6cj0gq+
aRojbj7bg3A/5croCYFMfFmFRne9O+F50wIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FChQntXWaDcJbS1Kv4Q6OyKI5FaKMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzEzNjM2MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyKYwDQYJ
KoZIhvcNAQELBQADggEBAExEiPL64M2Fvq9WZCvINf0Z5xEWP/JH3sliv4Uk2X2b
Bi3M+AELFvrCqnwsJdu0nUT0sXKg54s25ZI3nbjyV0EHx6v8F77VDO+KOxmnQgy8
/qaBWWwABqq3htHeXYns/iHK+BsUTg1jVXCaFYLl18f5Z9sQCsolNkqGoTYzKMEW
jSmiitY0vDT/gqmEaBTeotBbPnDaDHCg7xyIXyOQJ3hNArSUTsXXukAQZ9t5Vwkv
Ze3fkubJ7CnJpCUtnQRWmX23/jrlg9ymeJY+o9yx/XZBnOzhQgiQhB723AYgEop1
GvCsi3fMv45Lq0E4L6p6OW9hYUGx5wraURo70qFgJUQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org