Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
File:                     3230302e3139322e302e302f31382d3138203d3e2034323330.roa (raw, json)
Hash identifier:          syvCe+BLIT+9WDkkqMxfKwoLiRyy7BvJDrqAtSr9bjE=
Subject key identifier:   84:A3:D9:AD:42:F1:75:06:07:9B:3F:44:7A:4C:04:22:0F:E9:F5:93
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       294AC7FA4573258E5AA7253E2F9309FF8A85F36A
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        200.192.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4a:c7:fa:45:73:25:8e:5a:a7:25:3e:2f:93:09:ff:8a:85:f3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:79:69:50:ec:82:2c:72:21:db:1a:9c:0f:
                    9c:53:a7:21:19:71:d6:73:55:b8:bf:17:ac:88:a7:
                    9b:5d:9d:f8:0f:fc:2f:e3:8d:bc:ba:6f:15:0f:dd:
                    d2:f1:f7:4e:7a:66:bb:fb:ab:a3:97:33:63:81:4f:
                    10:89:28:fe:b1:bd:ed:24:7d:b1:1f:ad:36:5e:b2:
                    b4:70:5b:7d:1d:05:5a:2c:ed:d9:9b:2f:85:0a:e0:
                    bf:05:ec:9e:ee:39:99:dd:40:3c:8f:02:ca:72:99:
                    c5:17:18:75:2d:31:f3:6c:13:f4:2e:d2:17:74:65:
                    0b:d9:91:05:4d:44:46:78:48:a7:59:34:b0:0d:ee:
                    62:97:77:d8:37:6f:e5:0c:88:4c:0f:03:32:6b:93:
                    f3:8b:ba:3c:fe:5a:3f:87:37:da:4b:ec:04:62:95:
                    96:ff:df:c2:72:16:a0:cf:dd:bc:13:b3:0c:ae:62:
                    ac:eb:a7:b1:2d:f5:49:50:f9:6e:f1:66:b4:cc:95:
                    0c:5d:20:af:dd:d7:32:4c:bf:57:40:23:9e:1f:55:
                    3e:d4:17:74:76:53:d9:84:16:ed:9a:3e:02:e7:b2:
                    ae:9a:a4:0c:cc:20:bc:86:2f:d9:15:78:ed:48:f7:
                    2c:8e:81:68:bd:2b:b7:48:64:c5:c5:35:0f:1a:f4:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:D9:AD:42:F1:75:06:07:9B:3F:44:7A:4C:04:22:0F:E9:F5:93
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:85:f5:69:65:7a:bb:93:6a:74:df:98:c7:72:be:eb:13:
         0f:77:1a:75:6d:52:35:d2:74:74:16:c6:e2:98:e5:54:d2:1c:
         bf:a1:1c:46:b7:35:b0:fe:5f:06:4c:84:00:4a:92:78:f0:ab:
         5e:ba:c9:be:2d:cb:16:73:85:05:0f:ca:ad:47:80:b1:f7:1e:
         f2:3e:f1:f4:19:37:82:fe:38:d4:fc:be:45:6d:5a:37:a5:bf:
         de:c4:f8:df:b1:de:cd:d2:72:d5:5e:2e:0d:0b:5b:c9:f8:cf:
         c5:62:75:5c:41:7c:a4:e5:7a:56:5f:9e:ee:ce:36:7a:86:08:
         07:8a:fa:f0:07:cc:92:28:6b:27:4b:04:da:01:00:13:57:01:
         d7:42:1c:92:2c:40:41:a8:97:4c:6f:30:8d:13:9c:d6:95:25:
         e2:b6:71:71:00:52:c2:19:bb:8e:ff:72:b3:ed:66:36:db:a8:
         21:2a:d3:24:38:be:fe:a9:cd:8c:82:10:28:7b:c3:0d:66:ec:
         2a:5e:9c:9b:33:85:2c:a4:b4:68:8c:84:fa:5a:ca:3a:05:56:
         62:e1:24:b3:90:a6:af:61:ba:bb:2f:08:02:e3:16:65:27:5e:
         4e:2e:02:82:15:49:de:56:21:18:f8:8c:9a:5e:2e:f7:e4:19:
         65:aa:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org