Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3139302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          /R5GK8ftxk8rTtUigzhP2XfnA0rtl5GZ/s1uou2/85A=
Subject key identifier:   76:97:1A:C4:19:B2:79:1C:FD:B1:D3:6C:5E:E1:14:89:90:D4:24:07
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       0251B6D5F6D25EFD43C807D24E4391D27EA936DE
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     4230
IP address blocks:        200.190.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:51:b6:d5:f6:d2:5e:fd:43:c8:07:d2:4e:43:91:d2:7e:a9:36:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:cb:6a:d7:81:ad:4e:cb:01:ab:72:49:d9:
                    e9:67:15:64:9a:b9:15:fb:2d:29:57:15:02:f5:65:
                    ab:2d:c8:36:d2:0e:df:f9:36:c2:1d:20:b4:f6:e3:
                    80:bc:e5:9e:c8:aa:8d:05:cf:cd:fb:1a:79:e6:5a:
                    0a:d7:5c:52:1d:2e:cc:c0:bc:e1:30:29:c4:c6:72:
                    ab:dd:cc:34:2c:d9:9f:41:bb:38:b7:ed:4b:70:27:
                    1f:ce:dd:63:4b:fc:9b:24:81:88:ff:7e:f0:1b:a4:
                    db:c7:e9:b5:82:7e:e9:60:fc:96:c0:df:54:f9:76:
                    50:bf:2b:bd:28:fc:92:99:fe:aa:ef:b4:98:ce:10:
                    4c:ed:ed:0d:b1:bd:f9:cc:95:cf:c9:48:f8:14:4c:
                    e5:d7:90:61:40:e7:8d:63:9f:12:30:71:21:70:69:
                    37:72:7e:4c:fa:50:3e:0c:b5:76:7e:cd:9c:5d:5a:
                    a1:17:44:e0:b7:4b:c5:63:6a:6b:f4:93:09:79:ba:
                    d3:3c:36:19:c5:1d:e2:21:6e:71:21:56:c3:27:55:
                    25:0a:a6:0d:63:3d:05:71:be:91:33:fb:48:b1:64:
                    90:31:a2:0d:7b:26:57:75:54:ed:fc:2a:2c:4a:7a:
                    22:91:18:41:44:eb:ef:0d:b4:c5:48:6f:96:26:95:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:1A:C4:19:B2:79:1C:FD:B1:D3:6C:5E:E1:14:89:90:D4:24:07
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:0a:da:f8:46:49:4d:57:4c:90:cc:8d:6c:7e:6a:2a:6f:
         b9:72:f9:7d:00:93:23:8c:93:5d:d8:df:6d:d2:be:c3:e0:92:
         e3:86:0a:0e:39:43:1d:6f:82:4f:95:b1:dc:d1:9e:a0:b6:a1:
         f8:28:da:7d:44:5e:e3:b6:4c:1c:3f:82:9e:53:08:aa:07:fd:
         c9:51:57:81:6e:71:62:f5:56:f8:d0:ad:19:d8:2b:22:56:c6:
         c6:6a:0b:86:94:6d:53:87:4a:4e:b3:6e:99:83:e6:db:de:a0:
         8b:95:da:04:6c:64:10:fd:1a:24:bf:9e:33:f4:2f:96:eb:e8:
         0c:33:a9:1c:44:65:33:22:75:63:df:40:e8:31:ac:ba:f5:bc:
         11:59:22:8e:da:25:eb:6b:d9:ff:05:58:13:2e:3f:c0:fd:07:
         84:8b:9d:db:bc:d9:9f:8f:28:25:f7:cf:a5:96:52:4e:04:2f:
         c2:f9:f7:1f:61:79:75:61:48:42:5b:c3:08:4c:db:2a:b5:1f:
         16:62:f4:ff:9d:67:a3:68:6b:3f:fd:f3:18:05:fc:be:a7:2e:
         5f:63:46:dd:1f:3f:e2:e7:3c:08:ce:7c:9a:d3:d9:c0:af:a9:
         1c:dc:b6:e8:fa:31:2c:92:33:a0:b6:00:c6:7e:b0:16:11:3a:
         94:48:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org