Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3136372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          XHidtbS8tIuDowT0ThFTssDYo5q1BK4P+SxNwlMZyJI=
Subject key identifier:   2B:1D:7E:DC:B2:80:FF:51:7C:4A:8B:11:10:D5:45:2C:23:A5:59:2B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       4D76A2532947E3BEC85CD952E0E1917A66C7DF8F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     4230
IP address blocks:        200.167.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:76:a2:53:29:47:e3:be:c8:5c:d9:52:e0:e1:91:7a:66:c7:df:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject: CN=3082010A0282010100CAAEB97CF5EE7041014B47D7F00C1F5E62EE38275E0ADF5AC5EA733BCEB2560FD59577F3F96FA96776D3F14D45D3EFDD75D9628A1855E8A12244E407F5245E21D622642703CF8D2F37F7BC36562104ACEC5FC8387AA9F28AEEF691E4E82EB0EB2B3D545604DEB27E466ECA0EAC1238769EFCDB8C7BB907E519199F0666CA09D1FCA5076D75BA7A6B9F5EA36BF85410B238C2073C8B3EFCBD91F06627E04345F76DB4B857F3A5708C798C71540269D4983DF3104AA2394BDBFCD4B808E09DF4062450CADF07E3D352C7D7337429FC4B38240B85FDD9A8FEA310EC46FCE554B6F897A976D55B8DD6615507D4C6F8B984B8D3D511367BD0DAD1794BF4A59FDA84330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:b9:7c:f5:ee:70:41:01:4b:47:d7:f0:0c:
                    1f:5e:62:ee:38:27:5e:0a:df:5a:c5:ea:73:3b:ce:
                    b2:56:0f:d5:95:77:f3:f9:6f:a9:67:76:d3:f1:4d:
                    45:d3:ef:dd:75:d9:62:8a:18:55:e8:a1:22:44:e4:
                    07:f5:24:5e:21:d6:22:64:27:03:cf:8d:2f:37:f7:
                    bc:36:56:21:04:ac:ec:5f:c8:38:7a:a9:f2:8a:ee:
                    f6:91:e4:e8:2e:b0:eb:2b:3d:54:56:04:de:b2:7e:
                    46:6e:ca:0e:ac:12:38:76:9e:fc:db:8c:7b:b9:07:
                    e5:19:19:9f:06:66:ca:09:d1:fc:a5:07:6d:75:ba:
                    7a:6b:9f:5e:a3:6b:f8:54:10:b2:38:c2:07:3c:8b:
                    3e:fc:bd:91:f0:66:27:e0:43:45:f7:6d:b4:b8:57:
                    f3:a5:70:8c:79:8c:71:54:02:69:d4:98:3d:f3:10:
                    4a:a2:39:4b:db:fc:d4:b8:08:e0:9d:f4:06:24:50:
                    ca:df:07:e3:d3:52:c7:d7:33:74:29:fc:4b:38:24:
                    0b:85:fd:d9:a8:fe:a3:10:ec:46:fc:e5:54:b6:f8:
                    97:a9:76:d5:5b:8d:d6:61:55:07:d4:c6:f8:b9:84:
                    b8:d3:d5:11:36:7b:d0:da:d1:79:4b:f4:a5:9f:da:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1D:7E:DC:B2:80:FF:51:7C:4A:8B:11:10:D5:45:2C:23:A5:59:2B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:86:36:b9:ef:ce:81:92:09:fc:36:fa:41:3d:68:f0:ae:cc:
         c4:5c:3b:a9:8a:a5:66:cc:93:5f:6d:d6:2c:bc:d1:49:18:f9:
         03:40:ee:4a:05:3b:84:03:55:53:2a:39:58:e3:6e:12:cf:06:
         3e:f4:d4:f6:b7:df:3c:23:3c:3e:04:f8:ea:98:5b:60:0e:17:
         f8:32:b4:3b:88:91:8f:04:63:cd:a3:65:cc:56:53:cb:31:44:
         84:65:83:9f:48:4d:81:59:1f:8f:31:71:1e:e1:57:2f:c4:c7:
         6f:d9:89:1c:f6:df:c3:8c:db:97:0f:92:66:82:58:6e:4a:63:
         22:6a:ff:6d:d8:40:79:d3:88:2e:2a:20:6e:7c:9a:ea:0f:cb:
         e0:9d:5d:e3:f5:f4:00:c6:af:d7:98:73:97:58:62:b1:9c:ea:
         94:e2:21:12:17:87:f6:87:31:4b:70:f5:31:49:8f:9c:99:f4:
         cf:fc:2f:ad:01:eb:86:6c:f7:7f:89:ed:72:d5:90:53:7e:71:
         b5:24:f9:e5:fa:84:7e:2d:22:fb:ba:18:28:74:dd:de:43:d5:
         dc:ee:58:fc:27:72:39:48:5a:44:94:3d:ff:b9:27:b2:8e:8f:
         b8:f3:09:77:c3:13:09:9e:b8:7e:fb:ae:b9:28:f5:42:ce:27:
         3c:d0:52:f8
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUTXaiUylH477IXNlS4OGRembH348wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDlaFw0yNTA0MDIxODMxMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FBRUI5N0NGNUVFNzA0MTAx
NEI0N0Q3RjAwQzFGNUU2MkVFMzgyNzVFMEFERjVBQzVFQTczM0JDRUIyNTYwRkQ1
OTU3N0YzRjk2RkE5Njc3NkQzRjE0RDQ1RDNFRkRENzVEOTYyOEExODU1RThBMTIy
NDRFNDA3RjUyNDVFMjFENjIyNjQyNzAzQ0Y4RDJGMzdGN0JDMzY1NjIxMDRBQ0VD
NUZDODM4N0FBOUYyOEFFRUY2OTFFNEU4MkVCMEVCMkIzRDU0NTYwNERFQjI3RTQ2
NkVDQTBFQUMxMjM4NzY5RUZDREI4QzdCQjkwN0U1MTkxOTlGMDY2NkNBMDlEMUZD
QTUwNzZENzVCQTdBNkI5RjVFQTM2QkY4NTQxMEIyMzhDMjA3M0M4QjNFRkNCRDkx
RjA2NjI3RTA0MzQ1Rjc2REI0Qjg1N0YzQTU3MDhDNzk4QzcxNTQwMjY5RDQ5ODNE
RjMxMDRBQTIzOTRCREJGQ0Q0QjgwOEUwOURGNDA2MjQ1MENBREYwN0UzRDM1MkM3
RDczMzc0MjlGQzRCMzgyNDBCODVGREQ5QThGRUEzMTBFQzQ2RkNFNTU0QjZGODk3
QTk3NkQ1NUI4REQ2NjE1NTA3RDRDNkY4Qjk4NEI4RDNENTExMzY3QkQwREFEMTc5
NEJGNEE1OUZEQTg0MzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyq65fPXucEEBS0fX8AwfXmLuOCdeCt9axepzO86yVg/VlXfz+W+p
Z3bT8U1F0+/dddliihhV6KEiROQH9SReIdYiZCcDz40vN/e8NlYhBKzsX8g4eqny
iu72keToLrDrKz1UVgTesn5GbsoOrBI4dp7824x7uQflGRmfBmbKCdH8pQdtdbp6
a59eo2v4VBCyOMIHPIs+/L2R8GYn4ENF9220uFfzpXCMeYxxVAJp1Jg98xBKojlL
2/zUuAjgnfQGJFDK3wfj01LH1zN0KfxLOCQLhf3ZqP6jEOxG/OVUtviXqXbVW43W
YVUH1Mb4uYS409URNnvQ2tF5S/Sln9qEMwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FCsdftyygP9RfEqLERDVRSwjpVkrMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzEzNjM3MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyKcwDQYJ
KoZIhvcNAQELBQADggEBAJOGNrnvzoGSCfw2+kE9aPCuzMRcO6mKpWbMk19t1iy8
0UkY+QNA7koFO4QDVVMqOVjjbhLPBj701Pa33zwjPD4E+OqYW2AOF/gytDuIkY8E
Y82jZcxWU8sxRIRlg59ITYFZH48xcR7hVy/Ex2/ZiRz238OM25cPkmaCWG5KYyJq
/23YQHnTiC4qIG58muoPy+CdXeP19ADGr9eYc5dYYrGc6pTiIRIXh/aHMUtw9TFJ
j5yZ9M/8L60B64Zs93+J7XLVkFN+cbUk+eX6hH4tIvu6GCh03d5D1dzuWPwncjlI
WkSUPf+5J7KOj7jzCXfDEwmeuH77rrko9ULOJzzQUvg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org