Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3232382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          WfqVI9nl6ZbdiqjXcdNy/DkTj5x9y975kPA4J/+x21c=
Subject key identifier:   CA:00:B6:68:96:80:1D:12:A0:BA:AE:DB:A1:BB:D1:A7:E4:1D:AB:6B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       535CB063BBDCA95094FE74D0FB3444B2AEF8E559
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     4230
IP address blocks:        200.228.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5c:b0:63:bb:dc:a9:50:94:fe:74:d0:fb:34:44:b2:ae:f8:e5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=3082010A0282010100B8CFC9D65E5ACB28F8430D29BA89A9F212C8417170AFB36AD2955188728FBC503A3FFFD4AC46B99B6194AB5440D69FD2CBFDAD33C985B75FDB8110B42A41D7FAC2783705B6BB10F51F68B8353CA7237042689003CDE099D7C1C5A1B8151AEC59E0A9ED6AEB9E1638B84089D19EFBBC008A2D2E8BC39D7797DED78D79128D54A515FF85F24C9DF49166664260A62852E33CBF6044705DAD7BEA38B50E69F6E92EA00FEFE5B288D7B3C0A5DB3E66214BB4B34503E4EE33B061C71FAE15EBA51E6D71CD1402D06C42CE8283AC07E58A734F68F3D03F324DA2BF7A6181BBD8E337C97F6D55E81ACB28D5052CBC95516124E77C7E7BA26741EEFD7A2AAECE07F2EC5B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:c9:d6:5e:5a:cb:28:f8:43:0d:29:ba:89:
                    a9:f2:12:c8:41:71:70:af:b3:6a:d2:95:51:88:72:
                    8f:bc:50:3a:3f:ff:d4:ac:46:b9:9b:61:94:ab:54:
                    40:d6:9f:d2:cb:fd:ad:33:c9:85:b7:5f:db:81:10:
                    b4:2a:41:d7:fa:c2:78:37:05:b6:bb:10:f5:1f:68:
                    b8:35:3c:a7:23:70:42:68:90:03:cd:e0:99:d7:c1:
                    c5:a1:b8:15:1a:ec:59:e0:a9:ed:6a:eb:9e:16:38:
                    b8:40:89:d1:9e:fb:bc:00:8a:2d:2e:8b:c3:9d:77:
                    97:de:d7:8d:79:12:8d:54:a5:15:ff:85:f2:4c:9d:
                    f4:91:66:66:42:60:a6:28:52:e3:3c:bf:60:44:70:
                    5d:ad:7b:ea:38:b5:0e:69:f6:e9:2e:a0:0f:ef:e5:
                    b2:88:d7:b3:c0:a5:db:3e:66:21:4b:b4:b3:45:03:
                    e4:ee:33:b0:61:c7:1f:ae:15:eb:a5:1e:6d:71:cd:
                    14:02:d0:6c:42:ce:82:83:ac:07:e5:8a:73:4f:68:
                    f3:d0:3f:32:4d:a2:bf:7a:61:81:bb:d8:e3:37:c9:
                    7f:6d:55:e8:1a:cb:28:d5:05:2c:bc:95:51:61:24:
                    e7:7c:7e:7b:a2:67:41:ee:fd:7a:2a:ae:ce:07:f2:
                    ec:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:B6:68:96:80:1D:12:A0:BA:AE:DB:A1:BB:D1:A7:E4:1D:AB:6B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3232382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.228.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:7c:e6:24:71:6e:f7:5c:ef:12:3c:3a:8a:b0:c2:db:91:
         5a:86:b1:d5:5e:db:45:63:82:b1:0c:87:72:cc:96:81:1d:95:
         24:47:bb:db:d8:33:fc:de:ae:f6:8d:9d:9e:5c:14:4a:fb:5c:
         6c:b4:89:4b:55:0d:19:0d:28:af:f7:dc:44:be:d5:d4:b9:5f:
         33:81:93:f3:98:5a:88:c4:4f:e7:85:c7:9c:34:d1:ab:8c:37:
         e1:c3:14:7e:08:47:96:44:8b:38:ac:3e:b1:08:de:ee:70:ce:
         c8:31:17:02:39:ba:11:ec:82:b8:f8:52:cb:cb:67:d9:07:3a:
         42:ce:b6:0b:a3:64:a1:b8:cc:02:16:14:a2:c4:2f:70:48:40:
         8b:56:5e:3b:37:15:ba:d8:1d:19:28:17:50:ad:24:35:08:e6:
         b6:9f:a8:35:73:4c:60:8e:44:65:d7:c5:38:17:75:4c:d6:5f:
         ba:54:31:7c:45:9a:f6:7f:aa:89:cc:44:f5:61:b5:24:1d:aa:
         ef:66:bc:16:e7:cf:31:0e:1e:e0:21:26:52:47:52:a4:b0:2c:
         7d:93:9c:95:08:ce:e3:53:d3:e8:44:59:16:08:e0:84:12:c5:
         b9:4c:bf:a3:98:84:5f:d1:f3:16:bd:65:34:5a:46:be:cf:5d:
         8d:e9:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org