Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3138322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          8r+7N47n65Q1/HTW/10aKrAX/gkOwW6RVMygfChrOCc=
Subject key identifier:   D6:A3:54:0F:24:04:A5:04:BA:44:6B:BF:5C:67:60:29:8E:52:7F:C4
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       04273064BA619D18A146E69A3B027CBA07DF8EEB
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     4230
IP address blocks:        200.182.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:30:64:ba:61:9d:18:a1:46:e6:9a:3b:02:7c:ba:07:df:8e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:36:35:dd:81:97:21:5b:05:07:67:6e:94:
                    25:15:f8:fb:43:2d:3d:35:05:5d:16:3c:2e:d0:42:
                    65:57:0a:75:cf:e4:81:f2:3a:ff:88:03:43:bc:49:
                    32:fd:ca:89:4b:2b:40:68:db:ba:36:e9:56:9a:3f:
                    b4:96:ee:96:d9:64:95:b4:75:7a:03:0d:2a:64:5a:
                    1d:46:31:19:68:d4:74:05:fa:05:8b:c8:50:7c:93:
                    de:0b:9b:cf:49:2c:c4:b9:dd:0e:04:6d:da:c8:ab:
                    e7:cc:4f:a1:dc:74:69:40:e2:c4:44:50:d1:43:7e:
                    12:5f:f4:cc:41:7a:c8:09:99:3d:b6:50:26:ee:f9:
                    44:59:62:a1:ce:89:37:7c:37:0f:3e:0a:f2:c5:65:
                    69:d6:ae:f3:92:bd:9f:3d:88:ed:84:76:b8:06:01:
                    eb:c0:0f:6d:e3:4d:ba:f0:4e:4b:2d:c4:7e:aa:5c:
                    97:38:b2:8a:29:63:9d:89:08:e6:16:5c:1b:81:49:
                    d8:5e:e4:5d:3f:1c:4b:11:eb:1d:b5:01:e3:d7:cb:
                    84:9f:b5:46:40:f6:04:f5:e4:b3:21:ec:ff:60:c5:
                    5b:bf:89:67:e8:de:ef:6f:fe:fb:d7:77:b1:c3:64:
                    f7:12:58:03:f5:13:75:cf:1e:7b:ea:ac:6a:d7:f3:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:54:0F:24:04:A5:04:BA:44:6B:BF:5C:67:60:29:8E:52:7F:C4
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:57:b9:61:39:fd:74:c2:05:82:1e:f0:ed:7a:5b:c0:32:
         48:78:16:f2:da:e0:b7:cc:76:ac:08:2b:f0:07:24:21:e3:07:
         d7:6c:27:be:32:f9:77:aa:b1:e1:d4:4d:2d:9c:81:da:47:24:
         fc:7d:97:f2:6e:8b:22:54:d5:96:56:f5:7c:67:01:87:c3:8e:
         f9:62:b2:28:a7:ba:1b:68:ae:42:18:93:27:b7:46:75:0d:86:
         84:da:3f:30:b5:06:7c:39:0b:98:0d:f1:fc:c7:de:21:25:de:
         e8:86:54:7a:8a:26:96:d9:df:ba:dc:dd:3e:97:b3:d3:a6:d0:
         fe:5d:14:b3:2a:d1:c1:b5:80:30:27:c7:58:95:3f:5e:6a:4a:
         19:f9:3e:41:c1:4f:c1:d8:80:fc:64:c0:b7:d2:27:8c:ca:b2:
         fc:b5:b8:08:c5:94:a1:9e:c3:ed:84:40:cf:2f:f2:1a:af:62:
         a8:f4:75:6a:50:6c:1d:1d:de:e3:de:47:d1:47:61:18:6d:78:
         ca:13:98:31:8b:46:db:61:1e:82:19:8d:c4:05:1a:08:5d:39:
         f5:4c:6d:3b:73:c0:4d:cd:fa:0d:76:25:db:e2:97:22:5e:01:
         78:1a:15:20:c3:ec:08:30:f0:f2:4d:99:d0:bf:ec:66:2f:f1:
         18:bb:d0:0d
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUBCcwZLphnRihRuaaOwJ8ugffjuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MTNaFw0yNTA0MDIxODMxMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzgyRTM2MzVERDgxOTcyMTVC
MDUwNzY3NkU5NDI1MTVGOEZCNDMyRDNEMzUwNTVEMTYzQzJFRDA0MjY1NTcwQTc1
Q0ZFNDgxRjIzQUZGODgwMzQzQkM0OTMyRkRDQTg5NEIyQjQwNjhEQkJBMzZFOTU2
OUEzRkI0OTZFRTk2RDk2NDk1QjQ3NTdBMDMwRDJBNjQ1QTFENDYzMTE5NjhENDc0
MDVGQTA1OEJDODUwN0M5M0RFMEI5QkNGNDkyQ0M0QjlERDBFMDQ2RERBQzhBQkU3
Q0M0RkExREM3NDY5NDBFMkM0NDQ1MEQxNDM3RTEyNUZGNENDNDE3QUM4MDk5OTNE
QjY1MDI2RUVGOTQ0NTk2MkExQ0U4OTM3N0MzNzBGM0UwQUYyQzU2NTY5RDZBRUYz
OTJCRDlGM0Q4OEVEODQ3NkI4MDYwMUVCQzAwRjZERTM0REJBRjA0RTRCMkRDNDdF
QUE1Qzk3MzhCMjhBMjk2MzlEODkwOEU2MTY1QzFCODE0OUQ4NUVFNDVEM0YxQzRC
MTFFQjFEQjUwMUUzRDdDQjg0OUZCNTQ2NDBGNjA0RjVFNEIzMjFFQ0ZGNjBDNTVC
QkY4OTY3RThERUVGNkZGRUZCRDc3N0IxQzM2NEY3MTI1ODAzRjUxMzc1Q0YxRTdC
RUFBQzZBRDdGMzcwNzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyC42Nd2BlyFbBQdnbpQlFfj7Qy09NQVdFjwu0EJlVwp1z+SB8jr/
iANDvEky/cqJSytAaNu6NulWmj+0lu6W2WSVtHV6Aw0qZFodRjEZaNR0BfoFi8hQ
fJPeC5vPSSzEud0OBG3ayKvnzE+h3HRpQOLERFDRQ34SX/TMQXrICZk9tlAm7vlE
WWKhzok3fDcPPgryxWVp1q7zkr2fPYjthHa4BgHrwA9t40268E5LLcR+qlyXOLKK
KWOdiQjmFlwbgUnYXuRdPxxLEesdtQHj18uEn7VGQPYE9eSzIez/YMVbv4ln6N7v
b/7713exw2T3ElgD9RN1zx576qxq1/NweQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FNajVA8kBKUEukRrv1xnYCmOUn/EMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzEzODMyMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyLYwDQYJ
KoZIhvcNAQELBQADggEBAFO3V7lhOf10wgWCHvDtelvAMkh4FvLa4LfMdqwIK/AH
JCHjB9dsJ74y+XeqseHUTS2cgdpHJPx9l/JuiyJU1ZZW9XxnAYfDjvlisiinuhto
rkIYkye3RnUNhoTaPzC1Bnw5C5gN8fzH3iEl3uiGVHqKJpbZ37rc3T6Xs9Om0P5d
FLMq0cG1gDAnx1iVP15qShn5PkHBT8HYgPxkwLfSJ4zKsvy1uAjFlKGew+2EQM8v
8hqvYqj0dWpQbB0d3uPeR9FHYRhteMoTmDGLRtthHoIZjcQFGghdOfVMbTtzwE3N
+g12JdvilyJeAXgaFSDD7Agw8PJNmdC/7GYv8Ri70A0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org