Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          aFiPMHZ9OXRT9I3xTQ/oS7n0pCMchgEPZQsuGcQd2ZA=
Subject key identifier:   E7:F1:13:E5:3D:11:99:5A:DC:07:4A:71:FA:A0:99:95:84:6C:4D:9F
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       0A0ADB91204B3D8040477946A1E54E63A84D3B7C
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     4230
IP address blocks:        200.214.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0a:db:91:20:4b:3d:80:40:47:79:46:a1:e5:4e:63:a8:4d:3b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:9f:7d:d7:31:f9:39:ca:78:fc:4e:a1:05:
                    f8:4e:33:84:5b:e5:f0:f4:b9:61:dd:c2:8e:ec:3a:
                    ee:3f:9c:e8:09:7f:65:41:30:03:92:18:5f:c1:35:
                    e0:3b:32:1c:c0:1b:f8:48:fb:cf:71:94:f4:0e:1d:
                    dc:a8:eb:d8:8c:0a:e1:ae:06:a8:d8:d3:63:15:84:
                    72:e0:3c:44:f7:6b:ee:d7:cc:20:a9:67:4d:b2:1e:
                    fc:7b:38:13:20:f8:f2:cc:14:49:72:22:0b:9d:db:
                    91:c0:0f:6c:09:a7:b9:9b:31:02:98:0a:97:9e:4a:
                    9b:c6:99:08:84:b2:69:fc:27:21:a6:bb:f9:f6:17:
                    6a:54:59:dd:67:71:fb:4a:2f:ce:43:12:9e:61:12:
                    6d:77:19:6d:2a:1e:43:e3:36:f9:61:a0:0d:4d:d6:
                    8f:f5:0e:9b:85:e7:3d:31:94:28:dc:03:9e:3a:8a:
                    fd:3b:3b:40:fe:9a:bb:08:a2:69:a4:b2:83:cd:ae:
                    76:7d:19:fa:4c:18:cc:59:02:39:e4:89:22:ef:bd:
                    1d:77:e2:b1:84:b8:73:87:b8:25:8a:79:af:f2:90:
                    96:ec:41:8e:38:01:10:cb:c7:73:2e:2b:6d:bd:72:
                    95:fb:1e:fa:9f:72:df:0a:0e:82:4d:19:00:c8:d4:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F1:13:E5:3D:11:99:5A:DC:07:4A:71:FA:A0:99:95:84:6C:4D:9F
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:58:06:74:97:50:7c:3a:ea:6f:df:24:47:97:82:1c:32:
         cf:cc:81:0c:5c:aa:8e:4b:7f:6a:43:a9:50:e9:48:0d:82:57:
         6d:b2:21:10:2c:b2:b4:ce:52:1c:3d:b1:44:85:6d:e6:08:c9:
         8f:d6:a2:f9:b0:6c:6b:1f:0c:e8:7e:74:cf:01:b7:e1:78:d3:
         9e:e8:80:bf:4f:7e:90:62:b2:43:c8:3f:5e:70:f2:1e:75:07:
         99:13:bd:ec:ef:1f:4c:bc:f2:b1:d0:bd:b3:a9:e4:94:c1:34:
         67:f6:07:c8:3d:78:c3:12:01:d6:72:6d:4a:45:06:a8:17:70:
         26:87:61:94:21:b9:1c:a0:fb:d5:2e:65:ed:28:0a:46:28:62:
         ff:1f:6d:14:fb:90:62:fc:f4:24:53:59:fa:32:85:96:8e:76:
         38:56:29:83:ed:01:61:9d:b0:7f:82:02:24:44:46:0d:83:34:
         04:6d:7f:60:a9:7d:af:46:0e:50:9a:d1:13:c6:57:9a:1e:77:
         aa:55:51:20:69:2e:c5:f3:2a:6d:fa:b3:65:b0:80:29:a1:ca:
         c6:be:70:0e:66:26:3e:0b:cf:25:f5:65:51:be:af:04:b0:74:
         65:89:34:8a:c0:6e:d1:34:5c:da:8f:4a:dc:bd:47:ce:75:3f:
         88:8b:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:53 2024 by rpki-client on console-fra.rpki-client.org