Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
File:                     3230302e3139322e302e302f31382d3138203d3e2034323330.roa (raw, json)
Hash identifier:          FR0LMbYfaMAs2nsaqo9Rk9sB+zPXjwDemtaeSVoloRs=
Subject key identifier:   95:97:DD:FC:04:C1:0A:94:3B:F1:BB:EB:3E:4B:CC:93:82:32:FF:B7
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       44F19F6C108C229C9C8B670F6079331B4946998C
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     4230
IP address blocks:        200.192.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f1:9f:6c:10:8c:22:9c:9c:8b:67:0f:60:79:33:1b:49:46:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:1c:23:e1:e0:0a:de:a6:07:1b:b6:96:a2:
                    83:89:f2:67:4e:fe:94:cc:75:5b:a8:34:0e:61:8d:
                    7c:87:f5:99:59:d7:81:3c:77:4c:7f:23:26:4d:2a:
                    df:fc:0c:77:b7:a9:6f:62:52:60:bb:40:0a:d7:ad:
                    66:64:52:5a:d0:4d:c0:db:75:7f:5b:86:64:95:06:
                    88:69:67:0d:ff:b0:1b:5d:a7:a0:64:bc:cd:05:65:
                    22:41:1b:ef:0d:48:d9:d7:06:65:5c:bb:45:ee:bb:
                    83:3a:b5:e3:93:b2:e0:b3:86:0e:9d:2f:28:c9:0c:
                    f3:d2:2c:c9:af:89:a5:be:3a:75:ed:18:41:3e:79:
                    7c:e9:6e:4a:d6:21:63:5d:ff:df:15:ed:cb:a9:6a:
                    ef:51:8a:40:bb:27:ee:46:d6:7f:67:7f:78:fa:6d:
                    cc:df:b9:dd:25:4d:d5:47:90:e7:5e:99:21:cf:a2:
                    02:18:5d:ba:80:c3:41:63:ba:e6:bf:3a:7a:f8:6a:
                    75:74:77:59:03:2d:a2:81:b7:60:ec:15:76:41:6e:
                    13:fe:d8:f4:0b:a4:bb:7f:e7:5f:3b:af:2e:f4:b6:
                    ab:16:84:d6:48:fb:07:52:bc:25:0d:3a:ea:a8:d4:
                    11:d7:48:a9:19:fe:e7:30:b2:ad:75:0e:fd:df:8f:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:97:DD:FC:04:C1:0A:94:3B:F1:BB:EB:3E:4B:CC:93:82:32:FF:B7
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3139322e302e302f31382d3138203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:0c:31:df:f2:0e:0b:0b:66:62:3c:b5:29:52:c3:74:86:38:
         24:7d:2f:2a:be:7b:08:a8:d6:2d:83:4d:c2:83:e6:08:e8:47:
         77:4c:c7:cf:75:ae:4f:82:90:01:4d:66:1a:7d:6c:03:85:62:
         ff:02:06:47:b7:14:b8:73:4c:61:8b:14:22:fb:58:96:78:e0:
         18:8d:6e:af:f9:ce:82:ba:3e:47:23:0f:45:77:84:72:2e:47:
         03:51:0b:ee:4b:38:1a:97:cc:f2:d7:6f:38:cc:9c:01:7a:50:
         81:91:92:ef:c5:1d:14:82:9f:05:d3:4c:0b:f1:b0:68:c4:09:
         f2:63:9d:9b:1e:bf:8b:5a:0c:d6:f5:6a:15:fb:f5:ed:eb:f7:
         35:31:b2:87:e7:63:32:92:d6:b1:41:51:a3:85:dc:b7:3d:51:
         54:f7:2b:f3:0c:f0:32:89:b1:91:58:ca:37:d2:3c:cd:f3:60:
         dd:80:f1:00:0a:ab:16:13:f8:a8:01:13:02:5e:0e:d0:bf:28:
         66:96:15:28:6c:da:df:26:cc:28:29:7f:fc:d8:75:ca:9a:b0:
         f6:6e:2a:0a:ab:5c:ac:37:94:3a:b9:20:98:07:60:4b:9d:9d:
         44:3a:ec:a1:2b:90:b8:76:21:9b:5a:8e:ad:b9:50:5b:9a:cc:
         29:2e:bd:fa
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIURPGfbBCMIpyci2cPYHkzG0lGmYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDNaFw0yNjAzMDQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREU0NTFDMjNFMUUwMEFERUE2
MDcxQkI2OTZBMjgzODlGMjY3NEVGRTk0Q0M3NTVCQTgzNDBFNjE4RDdDODdGNTk5
NTlENzgxM0M3NzRDN0YyMzI2NEQyQURGRkMwQzc3QjdBOTZGNjI1MjYwQkI0MDBB
RDdBRDY2NjQ1MjVBRDA0REMwREI3NTdGNUI4NjY0OTUwNjg4Njk2NzBERkZCMDFC
NURBN0EwNjRCQ0NEMDU2NTIyNDExQkVGMEQ0OEQ5RDcwNjY1NUNCQjQ1RUVCQjgz
M0FCNUUzOTNCMkUwQjM4NjBFOUQyRjI4QzkwQ0YzRDIyQ0M5QUY4OUE1QkUzQTc1
RUQxODQxM0U3OTdDRTk2RTRBRDYyMTYzNURGRkRGMTVFRENCQTk2QUVGNTE4QTQw
QkIyN0VFNDZENjdGNjc3Rjc4RkE2RENDREZCOUREMjU0REQ1NDc5MEU3NUU5OTIx
Q0ZBMjAyMTg1REJBODBDMzQxNjNCQUU2QkYzQTdBRjg2QTc1NzQ3NzU5MDMyREEy
ODFCNzYwRUMxNTc2NDE2RTEzRkVEOEY0MEJBNEJCN0ZFNzVGM0JBRjJFRjRCNkFC
MTY4NEQ2NDhGQjA3NTJCQzI1MEQzQUVBQThENDExRDc0OEE5MTlGRUU3MzBCMkFE
NzUwRUZEREY4RkU5MDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3kUcI+HgCt6mBxu2lqKDifJnTv6UzHVbqDQOYY18h/WZWdeBPHdM
fyMmTSrf/Ax3t6lvYlJgu0AK161mZFJa0E3A23V/W4ZklQaIaWcN/7AbXaegZLzN
BWUiQRvvDUjZ1wZlXLtF7ruDOrXjk7Lgs4YOnS8oyQzz0izJr4mlvjp17RhBPnl8
6W5K1iFjXf/fFe3LqWrvUYpAuyfuRtZ/Z394+m3M37ndJU3VR5DnXpkhz6ICGF26
gMNBY7rmvzp6+Gp1dHdZAy2igbdg7BV2QW4T/tj0C6S7f+dfO68u9LarFoTWSPsH
UrwlDTrqqNQR10ipGf7nMLKtdQ7934/pBwIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FJWX3fwEwQqUO/G76z5LzJOCMv+3MB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzEzOTMyMmUzMDJl
MzAyZjMxMzgyZDMxMzgyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyMAAMA0G
CSqGSIb3DQEBCwUAA4IBAQAZDDHf8g4LC2ZiPLUpUsN0hjgkfS8qvnsIqNYtg03C
g+YI6Ed3TMfPda5PgpABTWYafWwDhWL/AgZHtxS4c0xhixQi+1iWeOAYjW6v+c6C
uj5HIw9Fd4RyLkcDUQvuSzgal8zy1284zJwBelCBkZLvxR0Ugp8F00wL8bBoxAny
Y52bHr+LWgzW9WoV+/Xt6/c1MbKH52MyktaxQVGjhdy3PVFU9yvzDPAyibGRWMo3
0jzN82DdgPEACqsWE/ioARMCXg7QvyhmlhUobNrfJswoKX/82HXKmrD2bioKq1ys
N5Q6uSCYB2BLnZ1EOuyhK5C4diGbWo6tuVBbmswpLr36
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:13 2025 by rpki-client