Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          8u+FTHM7iQ5iJ9FmfxoGf4iR68P0Vlx9tOpq68xcv1E=
Subject key identifier:   86:96:87:F5:BB:AF:7F:66:D0:0F:F0:EF:59:24:A6:E0:D2:12:21:82
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       78E92FD934E260E48490024022424487D95827F8
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     4230
IP address blocks:        200.208.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e9:2f:d9:34:e2:60:e4:84:90:02:40:22:42:44:87:d9:58:27:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:cf:11:3b:c6:9b:5f:95:74:0b:8a:87:a6:
                    c2:23:07:95:81:09:a6:d1:fa:0c:42:8d:59:4a:e4:
                    92:32:e6:d9:36:a3:a4:75:4c:c9:5b:49:5c:9b:06:
                    05:e1:22:e4:b1:8d:ee:44:de:14:b4:38:e3:5e:f5:
                    a2:81:2b:c2:46:d4:a3:d3:19:b9:89:d5:88:27:74:
                    dc:14:73:0a:13:ac:ce:95:dd:f2:ed:8b:64:82:92:
                    96:fe:ae:29:1a:d4:8d:83:1f:72:58:cc:88:11:27:
                    e3:83:31:ad:c3:6b:57:84:ad:92:c7:7e:83:48:62:
                    cd:5b:76:6e:35:74:76:66:74:bb:0e:b8:c4:9d:63:
                    8f:25:2e:d0:32:54:6b:7f:b1:33:b3:ef:e3:7b:42:
                    b7:b0:52:bd:c5:c9:cc:ed:04:c5:20:d0:13:1b:6c:
                    9e:ce:83:34:a2:96:dd:0e:c4:50:fd:a3:98:0a:d9:
                    a7:3a:81:f9:6c:fd:4f:7b:8e:f8:35:4a:f1:cd:06:
                    b8:69:de:63:21:2e:e3:fd:e7:b9:45:53:6b:3c:8f:
                    5d:24:5b:e9:82:49:b6:4a:ed:26:89:11:0e:ab:0f:
                    81:0e:2b:67:3f:43:e3:46:ab:18:18:9a:42:e7:f6:
                    f6:95:88:c6:3e:b3:fe:5c:13:48:81:ff:7a:e3:d2:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:87:F5:BB:AF:7F:66:D0:0F:F0:EF:59:24:A6:E0:D2:12:21:82
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:88:41:a7:2f:c8:44:dc:0d:d1:91:89:63:b4:e8:e6:f2:
         05:c9:c6:f2:49:fa:17:f9:80:25:70:b4:0f:de:c0:c9:5a:2d:
         43:19:c4:d1:49:13:70:af:dc:94:5a:cf:ab:36:b6:07:ee:6e:
         7b:32:72:dd:af:57:5a:3d:53:65:cd:6c:1a:a5:4c:3b:d3:19:
         81:0d:04:a1:36:e9:fd:e8:80:cf:d3:0c:f7:ee:d1:8d:2a:33:
         76:ce:b2:00:e3:7f:87:e5:7b:93:5b:9e:7b:ea:29:3c:83:7a:
         78:ad:9e:a6:2f:86:57:29:5a:dd:ab:ea:42:0d:53:a1:8d:92:
         ec:5d:15:f7:e9:09:f5:f1:c8:56:09:3e:1b:dc:3e:94:33:a1:
         3f:e6:16:0b:70:81:d6:e2:ea:21:a4:c1:1d:7c:ba:a9:07:ba:
         d8:63:0e:69:b1:89:51:4a:28:7f:8d:19:5a:b1:67:cb:9a:37:
         c0:c8:0d:cc:aa:85:ae:9b:89:c0:13:8c:71:5b:92:85:68:fa:
         e8:99:3a:11:83:1b:d4:e2:39:43:50:01:74:d0:9c:f0:2b:a4:
         ec:fa:fb:cb:18:ac:bb:a0:17:9b:36:4c:bc:df:2a:ae:54:e9:
         5d:bb:cd:5c:c6:32:99:5c:86:80:eb:22:f9:6a:a1:6f:6e:1a:
         13:09:6c:31
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUeOkv2TTiYOSEkAJAIkJEh9lYJ/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MTJaFw0yNTA0MDIxODMxMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUZGNUNGMTEzQkM2OUI1Rjk1
NzQwQjhBODdBNkMyMjMwNzk1ODEwOUE2RDFGQTBDNDI4RDU5NEFFNDkyMzJFNkQ5
MzZBM0E0NzU0Q0M5NUI0OTVDOUIwNjA1RTEyMkU0QjE4REVFNDRERTE0QjQzOEUz
NUVGNUEyODEyQkMyNDZENEEzRDMxOUI5ODlENTg4Mjc3NERDMTQ3MzBBMTNBQ0NF
OTVEREYyRUQ4QjY0ODI5Mjk2RkVBRTI5MUFENDhEODMxRjcyNThDQzg4MTEyN0Uz
ODMzMUFEQzM2QjU3ODRBRDkyQzc3RTgzNDg2MkNENUI3NjZFMzU3NDc2NjY3NEJC
MEVCOEM0OUQ2MzhGMjUyRUQwMzI1NDZCN0ZCMTMzQjNFRkUzN0I0MkI3QjA1MkJE
QzVDOUNDRUQwNEM1MjBEMDEzMUI2QzlFQ0U4MzM0QTI5NkREMEVDNDUwRkRBMzk4
MEFEOUE3M0E4MUY5NkNGRDRGN0I4RUY4MzU0QUYxQ0QwNkI4NjlERTYzMjEyRUUz
RkRFN0I5NDU1MzZCM0M4RjVEMjQ1QkU5ODI0OUI2NEFFRDI2ODkxMTBFQUIwRjgx
MEUyQjY3M0Y0M0UzNDZBQjE4MTg5QTQyRTdGNkY2OTU4OEM2M0VCM0ZFNUMxMzQ4
ODFGRjdBRTNEMjg3NzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn/XPETvGm1+VdAuKh6bCIweVgQmm0foMQo1ZSuSSMubZNqOkdUzJ
W0lcmwYF4SLksY3uRN4UtDjjXvWigSvCRtSj0xm5idWIJ3TcFHMKE6zOld3y7Ytk
gpKW/q4pGtSNgx9yWMyIESfjgzGtw2tXhK2Sx36DSGLNW3ZuNXR2ZnS7DrjEnWOP
JS7QMlRrf7Ezs+/je0K3sFK9xcnM7QTFINATG2yezoM0opbdDsRQ/aOYCtmnOoH5
bP1Pe474NUrxzQa4ad5jIS7j/ee5RVNrPI9dJFvpgkm2Su0miREOqw+BDitnP0Pj
RqsYGJpC5/b2lYjGPrP+XBNIgf9649KHcwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FIaWh/W7r39m0A/w71kkpuDSEiGCMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzMDM4MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyNAwDQYJ
KoZIhvcNAQELBQADggEBAEvbiEGnL8hE3A3RkYljtOjm8gXJxvJJ+hf5gCVwtA/e
wMlaLUMZxNFJE3Cv3JRaz6s2tgfubnsyct2vV1o9U2XNbBqlTDvTGYENBKE26f3o
gM/TDPfu0Y0qM3bOsgDjf4fle5NbnnvqKTyDenitnqYvhlcpWt2r6kINU6GNkuxd
FffpCfXxyFYJPhvcPpQzoT/mFgtwgdbi6iGkwR18uqkHuthjDmmxiVFKKH+NGVqx
Z8uaN8DIDcyqha6bicATjHFbkoVo+uiZOhGDG9TiOUNQAXTQnPArpOz6+8sYrLug
F5s2TLzfKq5U6V27zVzGMplchoDrIvlqoW9uGhMJbDE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org