Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3232372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          BeqrL4nlCgVBJukbLkP71Z97s2QzK5N7mWXBimrqbx0=
Subject key identifier:   65:B8:49:07:84:BC:63:E6:7D:B6:CD:1A:40:DA:A0:73:49:5D:D7:AC
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       24617646FAF876439849D2BCC15AA08E906F30B5
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     4230
IP address blocks:        200.227.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:61:76:46:fa:f8:76:43:98:49:d2:bc:c1:5a:a0:8e:90:6f:30:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:b8:fa:1a:b8:f6:14:16:4d:de:51:50:97:
                    74:ca:fc:ba:a2:bb:82:03:97:ae:49:80:86:a4:99:
                    93:71:43:d2:6a:49:6f:fc:f6:5d:f4:0f:ab:e6:db:
                    33:05:9a:45:07:c9:d2:a1:b5:67:96:67:1a:34:9d:
                    8e:af:7f:14:3f:21:f2:00:4b:42:38:d7:76:f4:04:
                    07:81:6b:fb:f7:0d:2d:e0:c7:8e:bc:ac:ec:51:4e:
                    3e:72:a0:dd:66:56:49:5c:b2:78:29:ca:5d:1b:ce:
                    d9:bc:0f:f9:32:06:0c:ac:15:65:4c:ee:99:5e:15:
                    1c:45:fb:e2:8e:04:45:4f:f3:0e:0d:ca:ee:f3:95:
                    97:25:ab:94:57:6d:ab:fc:94:a3:1b:a5:0b:4d:ac:
                    00:a5:eb:fe:1f:e8:cc:de:49:0f:80:2d:d4:62:8a:
                    fd:82:56:80:59:4f:8f:55:89:04:fc:1a:38:fc:9f:
                    b8:6e:a4:57:88:ea:e5:b0:15:7b:39:03:ee:2b:2e:
                    dd:85:b2:0e:7c:4d:b7:d6:97:4b:27:28:d2:e1:95:
                    ce:b3:0c:6f:98:b0:a2:b0:ab:24:15:5f:c7:2b:c2:
                    b2:de:8c:4e:a5:cf:87:e0:ed:bd:f7:99:53:ba:2b:
                    9f:74:9f:f4:0c:1c:cf:1e:47:af:33:3b:f5:fb:63:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B8:49:07:84:BC:63:E6:7D:B6:CD:1A:40:DA:A0:73:49:5D:D7:AC
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:b8:10:d1:62:49:d1:97:5e:14:10:ad:63:38:b1:4a:dc:41:
         24:4c:ce:51:f7:f1:f2:57:a8:f5:42:86:c9:75:a3:9e:28:9f:
         96:16:fd:a6:27:89:46:e2:cd:f0:04:1b:5c:96:4b:c0:be:7a:
         d6:bb:30:b5:f8:24:44:60:7b:96:48:53:02:23:09:b7:23:ad:
         b3:e0:e5:d2:00:57:12:07:f8:57:89:b3:0f:5b:e6:b8:09:de:
         76:aa:c6:17:42:17:68:20:a8:d0:3a:ff:94:77:de:6b:b3:1e:
         96:99:c4:74:84:0d:50:68:67:5d:d0:3e:9f:97:5d:bc:dc:7a:
         24:fe:ff:f1:3a:c5:d2:15:cd:dd:db:db:85:70:2a:19:73:33:
         7e:e8:41:3d:51:f5:4a:06:fe:ed:93:c6:1c:2b:af:31:43:7f:
         4f:33:c4:21:0c:64:51:4e:b9:20:76:a5:96:85:c9:f5:82:e1:
         c0:51:b7:de:f5:ef:eb:10:8a:02:26:fe:09:ab:d2:57:f0:dc:
         88:17:dd:4c:a8:04:b6:1b:12:38:8d:23:7e:24:c3:79:43:60:
         d9:56:76:f4:5c:ae:88:db:e9:a8:72:15:ef:eb:79:e7:e2:70:
         bb:3a:d8:d5:5f:c6:73:5f:5b:ca:d6:9b:4c:40:f2:24:81:f9:
         49:be:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org