Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          WIJtgURbGDmaoOFVJuctBOD8V/sB8ABbVJRF5fldNdc=
Subject key identifier:   15:B4:27:85:B5:B1:86:97:3C:59:E9:8C:F4:A8:09:60:81:E3:4E:FF
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       094BEDA333088245115D9232DD3A16F75140C491
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     4230
IP address blocks:        200.209.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4b:ed:a3:33:08:82:45:11:5d:92:32:dd:3a:16:f7:51:40:c4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:89:a9:2f:d7:2f:c4:71:a9:1b:74:e2:ac:
                    09:86:97:f7:8b:57:34:d3:b7:92:01:53:0a:1a:50:
                    8e:59:eb:27:9b:48:61:fe:14:e1:dd:6f:5c:3e:46:
                    5a:01:ec:d3:61:8f:d6:83:7a:0a:42:5c:d0:88:3f:
                    28:b6:36:d1:46:53:a1:92:bf:7f:eb:78:e2:be:11:
                    49:68:b6:7e:3e:c7:0a:cd:15:1f:21:79:f8:31:22:
                    7c:98:b5:72:04:58:a5:a0:8e:ac:d1:ac:70:e8:c3:
                    79:f1:40:5a:df:bb:f3:91:58:c1:ab:ce:2b:1b:ea:
                    73:78:73:22:57:56:e3:a6:a9:1e:69:61:e1:ee:7f:
                    86:0e:a8:75:12:c5:09:f2:7b:4c:4d:1a:e4:ff:56:
                    97:1d:95:34:26:45:72:25:8c:06:44:36:c8:50:db:
                    12:1f:fa:77:10:ac:49:d2:17:c2:5e:7a:98:44:19:
                    02:41:cd:c0:89:71:ea:1e:e7:5f:3b:b5:dd:52:01:
                    33:71:70:30:15:60:3a:97:19:5a:3b:48:f2:73:22:
                    d7:eb:e6:ba:f1:b4:95:03:b6:cd:85:ad:60:ea:49:
                    87:1d:bc:0f:1e:61:b5:d9:42:06:74:6f:a1:82:56:
                    b1:2e:30:53:a4:d1:8b:02:9c:3e:d5:d6:e8:de:60:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B4:27:85:B5:B1:86:97:3C:59:E9:8C:F4:A8:09:60:81:E3:4E:FF
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:9d:f1:ea:c5:d2:16:db:e6:58:d8:c7:c2:57:7b:e2:5e:79:
         0d:5d:d9:f8:ae:8d:88:63:e3:a2:b7:be:ae:c3:ca:a7:6e:f3:
         3b:ca:27:dc:8f:0f:35:2e:53:89:ab:0c:24:89:f5:13:10:0e:
         6e:7f:36:28:96:32:25:56:3f:aa:1b:09:d3:da:4f:42:40:ae:
         a4:42:69:a0:64:f5:81:1d:be:d5:f8:b4:b4:31:5e:ab:f5:2e:
         69:eb:f0:5a:5c:55:07:c9:47:d0:20:d9:c8:6e:87:1c:d0:74:
         be:3f:c8:21:cd:92:ab:c1:0d:fc:12:10:62:cd:b9:59:04:f8:
         0e:73:cb:3a:e5:7a:5c:50:29:dc:4e:cc:05:55:2c:25:7c:8e:
         22:90:a1:a5:c0:7e:89:d1:2e:4b:b5:40:9e:72:bb:42:bc:e7:
         0d:c9:0b:f4:a9:f2:11:c5:2c:c4:ee:f9:ea:0d:9e:ec:d1:bd:
         80:53:5f:85:e8:19:75:2c:77:d5:13:b1:b8:ef:5d:90:01:90:
         4a:0c:b8:b4:2c:38:f4:af:84:04:57:6a:69:54:16:34:cf:fa:
         0f:a1:f7:23:6d:ba:14:75:96:16:2a:e3:8c:55:0e:02:e8:bb:
         84:0d:c1:d3:65:40:3d:38:c2:7c:f0:f3:7a:40:20:ec:3e:cb:
         d7:34:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org