Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3139312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          0xRWAiwMr73PFfH8CHa+BGmSZtgIFYJunH+BRssqAbA=
Subject key identifier:   67:63:75:5F:0C:96:B6:84:68:AE:05:7F:F5:3A:FD:22:C0:22:DA:32
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       4181FE6799E31C55993F6681A6FC87BB58185872
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     4230
IP address blocks:        200.191.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:fe:67:99:e3:1c:55:99:3f:66:81:a6:fc:87:bb:58:18:58:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:c6:44:88:5c:81:a7:57:b0:13:d4:96:55:
                    ef:65:d8:8f:74:e8:3d:96:ca:93:c5:e5:87:5c:0c:
                    7e:83:7c:4a:fa:23:43:e3:b5:ef:87:1c:d3:d9:f8:
                    0d:46:34:0a:0b:79:77:83:64:ac:53:5e:59:18:8b:
                    9b:f3:a6:ef:53:68:37:a0:25:f5:e1:95:83:e8:8a:
                    2e:61:75:c3:ef:bd:7f:1e:fe:01:e2:f8:88:f5:4a:
                    35:ed:a4:15:56:3b:d0:b8:3f:1b:46:53:75:36:c8:
                    83:08:c1:f3:c4:2c:bc:cd:6a:75:65:77:a3:3b:13:
                    82:24:d7:7a:c6:76:5f:6c:13:52:e9:03:94:2e:e5:
                    e0:b4:18:37:59:5c:9a:91:dd:c8:cc:44:8c:2c:6b:
                    21:d0:a7:d6:05:39:2b:76:bf:ab:62:58:08:fb:3d:
                    7b:4a:fb:a1:aa:32:42:92:6d:c1:c3:a7:27:f9:3c:
                    a4:a0:9f:85:85:4c:69:21:0f:e9:95:18:1c:75:33:
                    e0:79:aa:46:de:d0:5f:04:ba:06:e6:b6:a6:b0:04:
                    a7:f3:88:75:ea:fb:64:07:c0:97:e1:de:59:12:17:
                    44:fd:f6:06:db:7b:ae:a5:d1:93:08:57:f0:ad:b8:
                    02:73:16:0a:a1:d6:f7:22:2f:ca:5b:9b:0c:df:c1:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:75:5F:0C:96:B6:84:68:AE:05:7F:F5:3A:FD:22:C0:22:DA:32
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:7b:a9:83:46:2b:01:fd:1b:f5:f7:f1:ab:07:cd:33:9d:f7:
         20:0f:c9:b9:7a:8d:e4:18:a2:bb:36:3e:ce:0e:b9:9f:a2:6f:
         0b:ed:62:01:e5:b2:82:ae:8a:31:1c:00:9d:35:47:d8:0b:5a:
         d8:26:5e:86:51:36:e6:e7:9f:4a:bb:e4:c2:a0:c3:5b:2c:11:
         e4:41:e7:c5:06:b2:7a:5e:fe:19:4e:d2:cc:22:4e:fd:b8:03:
         6c:ee:31:9a:df:f1:72:84:84:e7:90:16:c1:b0:48:a6:5f:fb:
         52:e6:fe:3c:34:0b:24:15:cb:8a:a7:01:1a:84:a3:66:51:36:
         9d:f6:eb:83:16:0a:3c:7f:db:47:cb:0c:a6:d6:f4:3b:d7:0d:
         d9:0e:d0:50:ae:3f:12:51:bd:df:f6:ac:31:66:e3:00:04:2c:
         6c:14:e5:aa:ef:27:09:0b:1f:46:10:be:fc:ad:b9:c2:2a:c4:
         ef:55:a0:80:9e:f0:c3:2c:9e:46:63:fb:ac:4a:13:74:c2:c1:
         76:56:98:de:1e:e9:05:28:d7:3f:d9:54:8a:99:d9:9b:0a:ff:
         44:f8:58:cf:92:c2:81:ce:92:fe:c6:8f:46:94:82:9b:bc:40:
         a3:0e:b9:63:36:dd:9b:8d:78:36:84:2b:5c:85:32:ea:d9:39:
         2a:34:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:55:02 2025 by rpki-client