Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3138332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ZB3uc+kSHUbAScj48bV3juMEXWAl+mlQMjwWn2rwGlo=
Subject key identifier:   0F:6E:99:18:37:D8:86:E0:37:B1:3E:95:82:94:BC:21:5F:8A:1E:2E
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1C4A2155CAD68DDBA8A6E1C6E72412F14B9587EE
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     4230
IP address blocks:        200.183.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4a:21:55:ca:d6:8d:db:a8:a6:e1:c6:e7:24:12:f1:4b:95:87:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=3082010A0282010100D176DA996889921A5914DADF930474571A8F1912884EFFDF05583979C280FDBC6ADDFE11F70580251C741951C2643BC34E36914006F4BD005A51CFD7F508089ED8E535AD65B678FD603F626D22B42971010A48B359534DADFBE7A6516873F9562E2868643C744459267AB9BFFE184067FE3F139476476A9D1A061D389B0628ED5A0E280BCFE355CA6BFD6A300791B24EB2ED96A632E7B0BEDE03E589BDEBB2B6B58652DD5CC07A28669B2C36956EE06CBE42B3071A5F1571A546B2ECC48D1D51D8623A575E62F036F037229FA385EA229F6FE2083C89246F59E066280661B66E7248837971D52A477E3D18DC4AD74AE73D79C9A4F9FAFA2D1AACB60B804FC9C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:76:da:99:68:89:92:1a:59:14:da:df:93:04:
                    74:57:1a:8f:19:12:88:4e:ff:df:05:58:39:79:c2:
                    80:fd:bc:6a:dd:fe:11:f7:05:80:25:1c:74:19:51:
                    c2:64:3b:c3:4e:36:91:40:06:f4:bd:00:5a:51:cf:
                    d7:f5:08:08:9e:d8:e5:35:ad:65:b6:78:fd:60:3f:
                    62:6d:22:b4:29:71:01:0a:48:b3:59:53:4d:ad:fb:
                    e7:a6:51:68:73:f9:56:2e:28:68:64:3c:74:44:59:
                    26:7a:b9:bf:fe:18:40:67:fe:3f:13:94:76:47:6a:
                    9d:1a:06:1d:38:9b:06:28:ed:5a:0e:28:0b:cf:e3:
                    55:ca:6b:fd:6a:30:07:91:b2:4e:b2:ed:96:a6:32:
                    e7:b0:be:de:03:e5:89:bd:eb:b2:b6:b5:86:52:dd:
                    5c:c0:7a:28:66:9b:2c:36:95:6e:e0:6c:be:42:b3:
                    07:1a:5f:15:71:a5:46:b2:ec:c4:8d:1d:51:d8:62:
                    3a:57:5e:62:f0:36:f0:37:22:9f:a3:85:ea:22:9f:
                    6f:e2:08:3c:89:24:6f:59:e0:66:28:06:61:b6:6e:
                    72:48:83:79:71:d5:2a:47:7e:3d:18:dc:4a:d7:4a:
                    e7:3d:79:c9:a4:f9:fa:fa:2d:1a:ac:b6:0b:80:4f:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6E:99:18:37:D8:86:E0:37:B1:3E:95:82:94:BC:21:5F:8A:1E:2E
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:86:78:cb:e6:83:5f:3d:a3:87:9d:d3:e3:c5:f4:88:34:61:
         3b:e5:e5:c2:90:7b:6d:6a:9d:f3:a8:c3:d6:2f:93:0d:48:1a:
         f0:21:4d:56:4c:11:59:3d:82:2e:2a:62:f5:83:49:69:e4:3b:
         47:e3:18:15:5d:66:e9:ae:77:c6:f7:c0:82:4a:27:69:54:b3:
         a3:17:8e:a0:f6:cb:2b:e0:4f:17:53:9f:32:ad:76:5d:23:92:
         ed:3b:82:ea:98:c1:c2:e2:ff:a6:12:95:bf:71:92:84:cf:18:
         81:cf:64:67:1f:4e:aa:9e:ea:49:54:e2:93:3a:c8:4e:27:68:
         4a:ee:cc:e2:90:be:9b:b3:ed:ee:b5:e6:97:52:60:a2:a6:2d:
         a5:c9:2d:68:06:ac:49:6f:11:e3:92:28:e6:12:bb:91:29:62:
         ea:b2:3a:85:49:08:4c:2a:0a:4d:ce:dd:e8:1c:58:63:99:f4:
         89:56:b1:cc:e0:91:b2:d0:88:20:70:f8:bd:0b:42:d6:ef:50:
         67:04:7e:50:fe:02:1b:a8:85:f7:37:26:c8:25:a0:74:2b:48:
         03:05:b6:c2:e0:b2:a2:8b:1e:ee:a5:c5:02:66:c3:26:83:65:
         d7:83:92:c7:20:80:60:35:4a:a2:b1:b2:20:a8:47:1c:65:7c:
         3b:80:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:57:52 2025 by rpki-client