Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3139312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          UwxzlLuP2SY4uxGy6ArYSosnG0G1GxKo+opj9EttO58=
Subject key identifier:   73:64:A0:DC:D9:71:58:B7:1D:6A:8C:1F:8C:07:E1:5E:11:64:70:14
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       19D2D490745EC35558D558788FD567AC6EB8E028
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     4230
IP address blocks:        200.191.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d2:d4:90:74:5e:c3:55:58:d5:58:78:8f:d5:67:ac:6e:b8:e0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:f8:74:6a:80:f3:a3:b8:b2:f7:37:d2:09:
                    5e:38:54:31:46:f9:d5:ee:e9:3e:60:c4:77:9b:22:
                    f6:45:66:d8:65:ad:65:3d:00:0a:ac:e4:d5:7f:09:
                    4b:1f:d0:db:e2:64:e0:49:46:dc:26:6c:62:41:cc:
                    d9:05:ce:4b:a3:01:18:69:cb:52:cc:40:05:a8:01:
                    61:89:a1:3e:e2:74:36:c6:70:db:35:0f:b9:a2:a2:
                    6a:23:f4:7c:a3:39:57:bd:7b:64:c4:c5:ae:87:03:
                    5b:7f:bc:64:65:ee:8e:71:83:80:02:a2:95:d0:05:
                    0d:c4:24:60:78:f8:10:ef:50:20:b2:21:c5:28:c9:
                    52:50:3d:53:b1:b3:d0:71:06:ef:02:c8:12:bd:5c:
                    b2:bc:47:6b:e4:b2:52:88:b6:98:78:81:a1:58:82:
                    cc:c7:63:58:41:78:01:58:f7:bf:fb:2e:b4:38:3a:
                    dc:db:b5:2f:86:fa:cc:61:b0:45:1c:4f:9e:20:a6:
                    d0:45:e5:28:05:47:ea:2f:38:2b:9a:f3:1e:6f:de:
                    2d:98:cf:c4:54:d6:b9:c6:45:e2:d0:63:c5:fc:da:
                    7c:03:b2:1a:f5:c6:54:bb:35:81:90:e6:8d:0d:ca:
                    20:26:99:a3:07:cb:70:ba:e3:db:04:f0:27:3b:4d:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:A0:DC:D9:71:58:B7:1D:6A:8C:1F:8C:07:E1:5E:11:64:70:14
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:e3:3d:e1:aa:de:bf:1d:af:2f:07:36:70:87:51:53:2a:47:
         be:a2:5c:88:30:12:1d:89:0d:95:92:45:a8:b6:e4:57:f5:c5:
         a6:11:f1:0e:d1:8b:9b:06:72:d0:8c:7f:99:d1:b9:27:65:2f:
         44:fd:98:9c:e1:80:16:c0:5a:c3:75:05:36:3f:2c:35:ca:c7:
         f5:01:d5:13:26:2f:54:03:f1:55:20:07:81:da:71:53:40:76:
         56:fa:8a:95:65:e4:ee:67:fc:3c:60:14:09:ae:da:2f:36:2c:
         50:d9:45:5f:9f:f0:d4:75:fa:6b:46:bc:5e:1d:e5:d1:42:94:
         7f:60:00:34:6b:4b:b9:c6:44:0e:04:b6:73:9e:12:10:c4:78:
         17:a9:91:c1:4f:3e:47:e2:69:3c:f4:42:c6:f4:a0:b0:bb:36:
         e2:ec:ee:3a:71:0c:73:1a:18:18:30:aa:64:c7:07:f3:45:db:
         d6:c2:85:5b:22:4d:6f:50:c6:80:ac:4a:22:d2:4d:aa:7c:4e:
         c6:42:55:53:b5:62:f8:52:2a:0f:c5:94:8a:c9:5d:af:32:94:
         21:94:52:0a:ef:f6:f8:6a:87:46:a8:21:6d:77:08:ac:18:c1:
         8a:5f:07:e0:f8:25:07:b7:92:c6:7a:3e:0a:bf:21:27:e5:94:
         88:a8:06:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org