Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          0r788lcNBcTXYASbkLGFhuHmNHWx3ckMpMhQHgL7uDE=
Subject key identifier:   E8:AA:B2:CC:1E:D4:4C:8F:C6:33:70:6C:9D:B8:90:5A:6C:53:49:1F
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       226EB7E7AF1FF5234B01C9157E80554DE3DAB2BE
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     4230
IP address blocks:        200.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6e:b7:e7:af:1f:f5:23:4b:01:c9:15:7e:80:55:4d:e3:da:b2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:25:82:48:b5:8e:80:e0:03:b8:a7:54:0d:
                    88:28:50:e5:fd:05:82:c5:2c:8f:80:87:af:d0:c6:
                    94:17:af:50:fe:a1:c9:44:76:14:1d:92:a3:45:db:
                    46:40:ae:84:33:5e:c5:25:8b:06:a8:0d:01:94:4a:
                    32:3e:b6:bf:0e:ff:b7:a8:d2:7c:48:07:24:3e:52:
                    ce:e3:0d:f9:d1:24:0b:7d:77:65:bc:d7:ed:c8:69:
                    ee:87:02:c1:7c:a5:d3:11:58:b0:5d:ec:4d:2b:02:
                    80:5e:a7:0e:c8:51:6e:21:6b:de:f5:3f:d3:bc:d5:
                    ef:97:39:d3:29:de:49:85:8a:1d:e2:f3:d5:80:ae:
                    4f:c0:c4:dc:79:e1:d5:3f:ba:b6:ac:92:2d:54:71:
                    f2:18:26:5f:65:a8:a1:04:8e:02:03:f2:9d:0c:61:
                    2f:b8:92:e1:a8:0b:78:88:cc:69:09:d8:1d:20:ed:
                    80:ae:23:63:f6:fc:53:97:35:03:40:29:a7:6e:d7:
                    40:5e:33:7d:f5:8a:5b:87:ad:11:66:54:0b:bb:c3:
                    db:ea:e6:36:b0:22:19:33:1e:f1:54:72:43:7a:2d:
                    3c:f2:1f:7b:78:52:97:c1:5d:2a:f9:68:ba:c0:41:
                    12:a5:b6:5c:22:b0:d7:14:26:f8:28:9c:7f:a1:34:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:B2:CC:1E:D4:4C:8F:C6:33:70:6C:9D:B8:90:5A:6C:53:49:1F
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:2f:6b:e9:23:df:47:27:e8:36:05:4e:81:b5:10:46:d8:
         6b:57:b2:7d:c8:ed:86:c0:92:ad:76:2c:f7:f7:90:b6:c4:a1:
         10:6e:80:2b:e4:c3:a2:d8:c6:ae:6f:a5:ed:45:af:96:9a:89:
         73:19:7e:0a:07:93:6a:b4:69:d3:3a:4a:37:30:e4:7c:53:c9:
         79:33:42:4f:d8:99:70:41:94:23:cb:3a:5d:ab:52:07:3d:1d:
         d6:5d:69:d2:ca:35:8a:8e:eb:33:3a:fd:ec:51:d6:8d:bb:d3:
         6f:db:25:ce:41:2d:cd:35:2e:3e:5f:82:3c:b3:23:0f:98:44:
         db:94:6a:ce:af:fc:ac:d0:ca:f2:dc:90:68:b9:85:0b:67:3e:
         df:40:dd:c7:a5:3e:95:27:a9:4b:5e:60:91:a9:7e:78:00:6b:
         1a:4e:9b:e2:a5:e1:c4:8c:88:2d:95:2d:ae:82:0a:19:2b:4d:
         51:ec:d9:d9:5c:16:76:8f:0e:2f:e9:0d:8c:20:63:d1:a5:a6:
         3b:f6:57:6e:6c:a7:cc:be:14:ec:4b:6a:e3:a0:3c:a8:11:21:
         4a:51:75:05:0f:4e:9d:cb:64:05:e1:71:c0:6e:98:58:f3:b5:
         93:af:3c:7b:89:2d:3a:88:11:c4:89:91:77:20:73:b8:76:5e:
         67:f3:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:58:00 2025 by rpki-client