Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3232372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          0Cv31ydDoNLhTygMxWQCHF9bBgKlHSywfpTbJbf34pg=
Subject key identifier:   B4:25:94:F0:E2:08:00:AC:41:42:80:36:89:42:A6:53:32:43:83:91
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       0F9B5951C79A73DEE31E53D80240EED951D3F7F7
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     4230
IP address blocks:        200.227.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9b:59:51:c7:9a:73:de:e3:1e:53:d8:02:40:ee:d9:51:d3:f7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:19:f6:1d:3e:63:62:29:60:89:c8:53:c7:
                    43:d4:ed:17:ed:50:96:45:00:ac:28:88:a0:2c:1d:
                    46:f0:82:45:25:92:3f:f5:02:1e:dc:15:2e:46:f1:
                    90:3d:6b:cd:a4:68:19:be:96:e0:4d:2b:91:db:32:
                    97:d9:69:b1:f4:ff:a4:10:67:5e:c7:fe:9b:b2:0e:
                    19:84:53:44:ec:d2:66:23:d1:82:13:8c:f5:fd:12:
                    20:8e:b3:e4:c5:40:4c:0d:0b:49:92:52:c7:d0:4d:
                    de:d3:e5:f3:c7:2d:e4:30:dd:38:61:cb:7c:93:1a:
                    52:3c:0b:ff:55:de:3e:47:3f:52:42:db:1b:5e:e3:
                    6d:7f:45:0a:ee:6b:ab:5c:e2:34:fe:5d:d1:64:c5:
                    f8:0f:1b:7f:7b:15:63:91:f3:5e:70:ad:71:8b:d4:
                    f2:5e:f4:d9:47:c9:c9:12:5f:3b:31:80:ef:a6:b8:
                    13:87:a2:ba:1d:50:46:3c:c3:ca:9e:a1:0b:a6:ae:
                    40:39:b9:4c:7b:26:3f:e4:f4:0b:53:1b:fd:70:3f:
                    53:81:af:fb:d4:bc:0f:6f:68:7b:b7:85:f0:0d:46:
                    21:5d:d3:40:87:dd:e7:79:79:2f:2a:64:c5:17:ac:
                    ee:0d:ec:d1:bf:0c:a5:7e:ea:c1:1d:02:7e:ea:23:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:94:F0:E2:08:00:AC:41:42:80:36:89:42:A6:53:32:43:83:91
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:a8:62:48:60:ee:a7:e1:45:5a:7c:70:46:5e:c0:eb:5a:
         36:14:88:31:48:63:1c:37:37:11:25:ed:6a:a1:46:07:1f:8f:
         2d:a5:16:64:6d:67:da:49:d2:c6:fe:25:f3:35:d0:6a:ce:30:
         0c:22:a6:43:95:f7:bf:ed:eb:98:9f:cb:58:2b:b9:7a:ee:29:
         ca:30:05:38:ec:f8:40:43:79:c2:bc:dd:96:0d:f3:7c:c2:3f:
         41:2c:a2:46:5a:af:10:8d:be:34:e2:2e:79:15:ec:ad:59:f5:
         b5:f9:81:cc:f9:21:2c:5b:13:fc:1e:e4:61:48:6f:8b:38:23:
         a0:34:3b:da:94:f5:8a:df:44:94:d2:a7:38:29:05:cc:62:71:
         01:df:b3:ee:56:be:50:87:1f:e8:08:ad:54:29:cf:21:85:27:
         8f:0a:33:01:09:3f:e2:7c:cc:31:2f:2a:4b:b2:a0:04:5a:71:
         c3:2f:bb:30:5d:0c:c8:bc:27:88:d4:ca:6e:77:34:93:6e:d2:
         2a:87:11:f2:73:5d:67:08:ec:42:b0:23:86:5d:74:6a:c0:de:
         96:28:d0:c1:11:bb:35:b4:5e:fe:e8:b5:c7:76:9b:93:95:8c:
         13:da:7b:a9:6e:ca:e0:66:eb:a9:5c:37:19:1e:89:06:6c:fe:
         00:0d:59:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:58:28 2025 by rpki-client