Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Cwvml/tnyBKPI1eypzThuS1HxINQQuEcXb1K4VWTSuQ=
Subject key identifier:   FB:16:BF:1A:19:76:C5:95:9C:6C:1F:1E:04:BF:38:0F:2F:B7:B4:03
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       191D99DE770CAC2B9A3D9809683778F5036E594B
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:05 +0000
ROA not before:           Wed 03 Apr 2024 18:26:05 +0000
ROA not after:            Wed 02 Apr 2025 18:31:05 +0000
asID:                     4230
IP address blocks:        200.212.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1d:99:de:77:0c:ac:2b:9a:3d:98:09:68:37:78:f5:03:6e:59:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:3c:30:b7:de:90:df:fd:e2:ec:7e:f9:e0:
                    6f:f1:ae:8a:1f:1a:65:a2:e8:b9:22:de:1f:92:9a:
                    91:bc:4b:8e:2f:b0:4f:e4:05:5f:b6:70:5a:6d:8d:
                    c4:a7:9c:08:53:7f:a4:7d:92:52:71:cd:02:61:a2:
                    2a:9b:59:e6:3a:b1:12:e3:f3:82:ea:f9:a2:24:fb:
                    a1:6c:11:4a:b7:48:09:2f:ac:93:08:b7:dc:51:ce:
                    07:66:6f:3f:e9:80:be:f0:47:d5:9c:f2:0f:45:aa:
                    f8:e2:b5:25:41:fa:c2:27:a4:f6:64:89:35:e0:7a:
                    b3:4f:8b:f3:a4:66:cb:db:2e:b4:f3:21:05:82:f1:
                    d0:c7:1b:2a:58:fa:57:ef:71:53:2f:4e:05:27:c9:
                    f0:d6:8b:c4:9b:52:8a:2d:52:29:fc:b8:dc:22:ed:
                    da:69:89:61:4a:47:f7:3a:89:47:47:6c:15:9c:65:
                    0c:8d:63:0a:3d:5d:bb:f4:27:0d:c5:56:1b:e3:89:
                    6c:3d:fc:60:f7:a8:12:30:e7:f5:ee:91:e7:36:f8:
                    c2:54:70:d4:ac:20:74:8a:8c:39:cb:56:4c:c4:5a:
                    73:3a:33:15:07:d0:35:38:ac:05:43:5a:fd:d9:fd:
                    a6:e4:c7:48:cd:67:1c:c7:0d:3a:99:fd:f4:11:8f:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:16:BF:1A:19:76:C5:95:9C:6C:1F:1E:04:BF:38:0F:2F:B7:B4:03
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:41:cd:f1:0d:80:94:a2:42:01:1b:94:cc:b4:a7:72:96:
         0f:d5:53:41:bf:7a:b8:24:a2:76:c7:23:f7:de:57:82:2f:ee:
         ab:76:aa:31:ce:d9:af:80:46:c1:e9:79:4e:b8:ca:ae:6e:8a:
         f0:9e:86:5d:e9:da:78:82:bf:e7:79:6c:07:c7:dc:42:69:85:
         b2:6e:b1:33:8f:ba:e7:62:e6:05:62:d9:09:b6:32:ea:54:2b:
         0d:d0:7f:0d:2f:db:ce:2b:ae:9a:ab:2c:1c:0e:5a:22:95:27:
         7a:25:53:03:01:71:1e:86:90:23:69:84:fa:41:7d:7a:9e:6a:
         ec:9d:1e:34:6b:15:4d:76:aa:1f:df:1f:23:28:77:a0:90:07:
         75:ea:20:85:ae:a9:f0:58:e2:89:03:db:fd:8a:94:21:68:bd:
         db:bd:ab:b5:d3:bb:54:ec:4c:8f:a9:83:75:87:2b:7b:26:b0:
         54:d0:00:32:88:57:6c:e1:8d:f2:59:5b:73:25:12:59:61:27:
         e7:e2:03:dc:81:59:2d:75:d2:b3:5f:cd:e1:6e:f4:fe:66:5a:
         5a:f8:6e:a1:12:01:83:03:34:3c:ea:66:f5:1d:8a:d7:6e:a6:
         1d:29:af:3c:5e:c3:9b:2c:fb:a5:0f:57:bf:61:21:d7:8e:69:
         97:5b:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org