Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          bh7F1tcETPVVM7I0VscpyY/Jd9mybEhaACmLbGim/aE=
Subject key identifier:   8D:08:8D:43:F3:A4:A3:39:4C:97:A0:C5:50:98:22:0F:03:10:9C:11
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6F48B12AB4A8D41968AC0A7754FBCE572C12F856
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     4230
IP address blocks:        200.213.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:48:b1:2a:b4:a8:d4:19:68:ac:0a:77:54:fb:ce:57:2c:12:f8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:da:9c:a4:c7:aa:57:c0:66:27:a2:30:92:
                    cd:ed:75:1f:4d:cf:a2:78:a1:83:ef:2e:a0:07:c0:
                    82:04:30:0e:55:20:e2:5f:c2:38:55:6a:b1:63:7a:
                    7c:bc:f3:06:d3:1c:91:dd:49:66:31:cc:fd:07:dd:
                    39:60:af:ea:69:f0:f5:c1:79:fe:0d:8d:19:42:50:
                    3c:75:7f:9e:7f:79:6a:1a:6b:d8:6f:6f:a8:0b:7e:
                    47:1b:6f:6a:cf:70:8e:53:bf:22:e8:cd:35:eb:9f:
                    04:75:33:82:49:1b:cd:b5:90:be:66:a2:3b:0f:1f:
                    11:35:82:9e:d2:ad:9d:e3:53:cd:63:49:2d:33:52:
                    c1:93:47:14:35:8f:88:eb:f2:5b:c0:6b:1b:b5:a0:
                    86:4d:0f:8a:8f:3f:4f:dc:74:5b:0a:aa:ad:0d:6f:
                    36:15:4e:c8:d4:52:d7:8d:0a:cb:dc:0f:3a:7e:cd:
                    e2:82:1b:ed:e5:61:39:44:a6:c1:79:65:32:7d:e0:
                    93:69:d4:ba:80:00:b2:15:b7:d6:79:97:14:fa:8e:
                    1f:27:28:ad:7a:cd:c2:09:84:30:f9:1f:23:49:41:
                    d2:86:af:a8:5b:45:cb:e6:39:bc:ba:a0:f7:d4:81:
                    bf:e7:6a:ca:6d:1f:1f:3b:11:dd:fb:bc:80:ce:f2:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:8D:43:F3:A4:A3:39:4C:97:A0:C5:50:98:22:0F:03:10:9C:11
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:73:df:70:25:65:c0:ca:6f:0d:82:69:f5:a3:7e:40:ea:c0:
         3f:84:c6:fb:5a:09:cb:99:29:e8:70:ec:37:f6:26:53:f4:80:
         32:54:85:9e:b6:41:10:eb:9a:85:f8:3e:b5:5a:7d:f5:b5:c2:
         31:c4:96:f9:6e:68:bb:f1:11:84:a2:09:b8:3c:b8:ea:20:cc:
         29:11:d9:f7:28:29:ca:e5:ca:7c:bd:13:5b:94:69:cd:e9:c7:
         ad:03:03:f5:fd:f3:6f:c6:7b:8b:93:f4:87:19:62:1c:25:ae:
         34:30:33:72:3b:2f:21:1b:f3:14:1c:5a:d0:e3:23:ae:eb:56:
         b3:eb:fe:a5:e0:2b:94:f6:68:0a:60:ee:68:3c:3e:70:c5:45:
         48:6b:c3:fe:4b:f7:cb:16:a4:d5:34:e2:95:b6:ba:79:5e:c7:
         30:0e:0c:21:f4:56:f2:a1:d0:f5:30:42:e2:dc:ec:15:a0:5c:
         ed:54:a6:3e:ab:63:76:0a:b7:f6:04:dc:6d:67:45:dd:12:20:
         04:99:06:53:79:2d:2d:4c:bf:c8:c3:c8:ce:e8:e0:45:60:a1:
         f0:a9:aa:40:45:8d:b0:53:23:fd:4a:98:30:9e:fc:b9:ac:37:
         7a:60:64:b5:09:2a:df:05:20:bc:af:41:cc:06:f1:a1:f3:55:
         bf:70:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:53 2024 by rpki-client on console-fra.rpki-client.org