Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          lWmwd5Ep8vfhMaQXki26mLKYnEt6gASArCWXGgqUeR0=
Subject key identifier:   48:1E:A5:4E:36:7E:D9:63:92:95:47:9C:93:BE:E0:96:23:52:A8:0A
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       354858F61DA62505EF6A759C45CB17E079505211
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     4230
IP address blocks:        200.178.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:48:58:f6:1d:a6:25:05:ef:6a:75:9c:45:cb:17:e0:79:50:52:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:a4:3b:d9:cb:4a:55:fb:fd:a9:64:fa:26:
                    1a:56:dd:dc:bf:d1:50:08:d8:50:a0:c9:7f:0f:1f:
                    4b:17:54:f4:fd:b6:ef:23:f5:a9:13:60:8a:26:69:
                    82:13:d1:c4:12:e6:ac:9b:5c:ab:66:d5:63:4f:71:
                    e8:e6:e8:b2:e0:5d:d2:2e:25:dc:4b:b0:8f:6d:67:
                    38:61:b9:6c:ac:5a:cd:dc:77:6d:78:cb:ee:13:5c:
                    25:48:34:9f:bb:5c:c0:97:17:fe:0a:6b:ea:44:f3:
                    2c:7f:f0:6e:70:1b:1a:25:6d:07:81:f2:90:10:98:
                    89:06:fe:de:9e:e3:b6:01:5f:8c:57:65:95:75:e8:
                    73:ed:ec:c7:ce:cb:a8:76:a9:73:d1:86:8b:f8:d5:
                    58:cf:4a:d9:e0:9b:8c:78:31:79:a4:71:88:bc:10:
                    14:39:ff:85:44:03:19:8e:12:3b:0f:50:df:1e:7d:
                    7f:d9:a0:57:4b:ed:13:cf:ed:00:ea:7e:36:3d:59:
                    da:97:ee:86:00:b5:3a:2d:4f:e5:32:f5:5f:96:93:
                    7b:5f:ac:f1:02:fe:13:a5:5f:1e:87:05:e1:ae:c2:
                    8f:7e:ac:e4:8c:0b:c2:5a:d3:9d:9c:be:9d:8a:b8:
                    78:05:33:90:57:8a:6d:7b:78:e6:c8:9c:02:e7:5a:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1E:A5:4E:36:7E:D9:63:92:95:47:9C:93:BE:E0:96:23:52:A8:0A
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:c2:48:c5:7b:49:e8:48:6e:a4:28:91:ab:b0:ed:be:16:
         b1:64:d8:bf:9c:dc:e2:3e:b3:11:c6:5b:20:6d:6a:7f:aa:0a:
         2d:40:d0:df:f6:f5:d8:34:cd:a2:6f:51:0d:97:90:12:27:99:
         f2:c9:8d:8c:df:58:88:dc:73:34:b4:ad:6f:1d:e1:a4:ad:db:
         9d:1c:7f:27:c6:31:55:0f:7f:a6:9b:d1:62:06:8d:19:8e:eb:
         d0:0a:a5:51:80:41:d9:ba:f1:86:0a:94:ac:5a:bd:1e:44:f2:
         c9:ad:74:09:58:0c:97:f1:5c:c3:c8:53:0b:5a:ad:d9:82:7d:
         b5:ba:b4:dd:de:d4:99:dd:4c:22:01:50:59:5d:5a:33:a8:69:
         9a:d1:90:ce:58:61:f4:fd:27:16:3e:1a:41:4c:2b:fb:50:53:
         18:25:af:cd:a8:a2:35:56:94:8b:6a:10:a0:d9:1e:7f:26:5a:
         32:28:c3:84:89:f6:38:b5:8a:54:42:6f:5a:8e:61:e7:5e:3d:
         c3:a2:9b:81:54:b1:0f:01:3c:ba:71:60:ee:73:b6:ac:0a:a3:
         56:86:b0:eb:8f:a4:9e:f1:20:33:2c:ad:c6:66:9d:9d:ba:0d:
         a2:8f:f1:39:4d:da:2d:8b:cf:75:ea:d2:74:2d:78:c3:f6:c6:
         15:b0:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org