Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          MOsqkdfmgKF+f6an5E+Y8UQvzJZXOlJ3l/QrCEpJfIA=
Subject key identifier:   0D:9A:FF:69:5E:61:A7:59:A8:B3:29:A1:BB:5D:AB:41:0C:E7:10:80
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5D3ACD23961F8CB3DF04E57D19CDD1DFC8EF4397
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     4230
IP address blocks:        200.213.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3a:cd:23:96:1f:8c:b3:df:04:e5:7d:19:cd:d1:df:c8:ef:43:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:52:f1:3a:a7:44:6d:50:11:d3:65:6b:6c:
                    21:83:97:23:32:a9:cb:76:ea:11:79:21:00:d7:f4:
                    9f:6b:73:39:63:f6:bd:9f:86:49:b4:5b:35:de:38:
                    14:46:06:ac:f5:7f:b6:d6:37:4a:18:a1:d2:71:10:
                    53:2c:75:33:28:73:af:ec:bb:7d:9d:ad:f3:f5:4a:
                    e9:0c:87:e1:0f:9d:11:ed:f9:0b:3c:16:98:ca:5d:
                    a7:f5:6e:f9:e1:90:5a:a6:b5:2c:2a:3c:3f:25:9e:
                    ab:4f:47:da:6e:bd:dc:57:75:83:30:67:8f:2f:b4:
                    e6:49:f4:ca:55:d4:20:ad:bb:20:64:23:cf:18:2b:
                    8b:61:70:4a:6d:36:ee:77:90:d1:31:58:de:b9:5c:
                    90:27:4e:b5:cc:ab:c6:a1:98:7a:92:8f:d4:44:f3:
                    bd:09:4a:77:13:06:fb:73:88:00:b9:20:94:3b:43:
                    78:47:40:aa:a9:a7:ec:66:d1:64:fc:c4:7f:a7:ae:
                    3b:63:f1:9b:e7:60:65:00:06:21:0a:c2:96:b0:8e:
                    a2:d8:7a:a6:b1:f5:ec:eb:79:20:97:03:ea:b2:f6:
                    4b:3a:4e:93:cc:b5:24:67:0e:d5:b6:ef:16:d0:60:
                    a8:7e:15:9a:0f:46:7f:27:3f:f8:82:a9:07:d6:95:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9A:FF:69:5E:61:A7:59:A8:B3:29:A1:BB:5D:AB:41:0C:E7:10:80
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:1b:e4:cc:97:8a:01:4f:ed:62:12:bb:f5:01:fb:8c:4f:63:
         c0:ee:67:54:5d:24:54:b1:1d:6b:6e:b1:f5:41:a1:10:4d:0c:
         4a:fa:77:a0:ce:61:e0:4f:16:e3:93:01:ac:22:91:1d:c1:cd:
         92:aa:7b:f1:be:f4:79:c2:d1:d9:f4:3c:16:9c:af:9a:df:93:
         c1:04:a2:12:33:e4:d6:8c:e1:79:7a:16:36:9c:76:38:fd:6a:
         2f:0a:80:39:80:37:cd:20:a8:c0:67:77:85:8b:2b:93:5c:77:
         3e:cf:ad:c7:ef:b3:d4:9a:e0:26:c6:30:6f:0f:e6:85:69:4a:
         85:24:99:7d:10:a4:4f:8f:fc:44:20:75:7a:3d:ae:e2:9e:58:
         db:b6:49:9e:3f:6c:71:8f:29:6a:22:e3:fa:29:aa:fb:a0:78:
         d5:8a:16:55:04:98:05:29:cd:6c:6d:cd:42:22:5b:fb:1d:a5:
         4b:8a:a0:b8:f7:fd:1c:ee:59:ba:fb:a0:d1:fe:2a:90:41:47:
         8d:01:bc:aa:8e:83:5f:da:b1:cb:ae:3e:41:77:90:1b:ce:50:
         3c:42:52:50:6b:c7:a9:0e:77:77:b4:20:97:28:ba:eb:9a:aa:
         15:dc:e8:00:b0:56:bb:fd:65:f0:95:bc:8f:cb:47:17:72:13:
         77:70:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:39:09 2025 by rpki-client