Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          zLAVCdiaOh6Eh5Kt6Uuux9D3oaceLzVu9K7kGsBHoG8=
Subject key identifier:   B4:B8:B3:57:0B:76:AD:9E:1D:E0:7C:45:12:E0:0D:FC:D1:2E:D6:F9
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       191711548E395FAC60D3C5862DDC3FF183A4F2BE
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     4230
IP address blocks:        200.172.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:17:11:54:8e:39:5f:ac:60:d3:c5:86:2d:dc:3f:f1:83:a4:f2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:da:02:ad:4e:77:19:e6:d1:6b:ef:89:3a:
                    a8:f7:81:cb:f5:70:17:cb:9a:93:d6:17:6a:d0:20:
                    40:41:a6:a2:29:63:3c:6e:cf:a0:a7:57:e1:91:22:
                    1a:a1:9e:68:65:36:13:32:1d:a5:b9:a2:ab:62:5c:
                    f1:97:59:03:7d:70:51:ce:62:8c:66:3c:ac:95:6e:
                    13:83:cd:24:b4:40:4f:14:e6:0b:98:fe:2e:2a:3b:
                    2e:d8:fe:94:ff:a2:1a:af:62:79:ad:00:d6:c7:b8:
                    a6:54:d0:34:15:98:5e:ca:3f:c0:18:63:14:2e:c5:
                    28:73:97:de:ff:64:fd:ec:34:f5:7e:58:c2:20:39:
                    f8:a3:c4:ce:6b:03:f2:8b:9d:47:b6:7d:45:16:92:
                    5a:ab:53:77:21:d2:99:98:10:98:e1:40:79:21:2d:
                    5c:92:60:af:83:40:df:eb:b5:ed:3d:d2:9b:a8:05:
                    67:e6:9a:e6:c1:e0:42:47:d7:ec:cf:4f:16:ad:62:
                    46:b5:f5:ad:08:c9:d3:31:9e:62:f5:a5:03:23:8c:
                    cf:14:22:e8:7e:6f:ed:58:80:83:d9:f7:db:2f:45:
                    18:f9:ae:b6:a9:78:b5:32:1d:02:e4:64:ce:bd:6e:
                    9a:25:9d:d3:28:44:5f:ed:1a:6f:9d:2c:05:01:27:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B8:B3:57:0B:76:AD:9E:1D:E0:7C:45:12:E0:0D:FC:D1:2E:D6:F9
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:e2:c4:89:b7:5c:1a:66:93:2a:41:26:31:39:1d:75:42:
         d2:28:7b:7b:f8:72:45:c2:5d:fa:81:42:18:7f:57:57:4f:09:
         64:08:3f:24:36:2b:8d:a5:30:40:20:e5:3f:30:28:68:82:6b:
         db:42:15:d3:4a:3c:fd:18:eb:0a:a3:bf:f3:75:22:8c:8f:8c:
         e2:7f:c7:0b:f2:21:24:91:d2:80:53:b8:46:5f:eb:23:31:3c:
         b8:b6:06:ef:01:80:b5:63:2c:f0:f4:6e:09:1b:e0:88:80:da:
         02:ad:12:8b:ae:b4:f9:1c:ed:07:eb:91:f3:0d:e4:83:1a:cb:
         44:f2:79:56:30:e4:87:8d:f6:92:6b:74:71:58:8e:9e:91:06:
         f9:f8:4a:29:ab:30:a3:ae:24:17:30:67:a8:2a:2c:c7:e3:89:
         a8:8f:8f:fd:ce:28:66:2f:5e:31:62:60:ca:09:88:69:60:63:
         4c:ae:d7:12:ca:e6:49:e0:61:80:2b:10:d8:38:b2:d5:b6:6b:
         03:90:cc:19:e1:ac:07:22:31:fa:55:15:8f:14:f8:bf:95:02:
         c2:7b:9e:c6:22:30:fa:d3:b2:35:7d:7c:2d:0e:07:32:51:53:
         08:a4:e4:71:96:87:72:7c:a9:f0:9b:d6:bc:32:07:4b:3c:f2:
         7b:d2:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org