Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3233302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          pxmgF/C7cliaeSvJG4Qm1fKbwX8DlbzS3/N7VtXF/MA=
Subject key identifier:   A6:48:53:D6:6F:5C:93:DE:14:F7:F8:1D:8F:6A:04:B2:C9:2F:CE:74
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2F65BB0BF3D1610AAC4F8BA6BA902111E8344458
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     4230
IP address blocks:        200.230.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:65:bb:0b:f3:d1:61:0a:ac:4f:8b:a6:ba:90:21:11:e8:34:44:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:25:10:89:43:5e:e1:5f:28:02:0d:56:43:
                    7e:a7:f9:ef:54:c3:bd:a6:f6:6e:05:b5:59:85:fc:
                    bc:ba:2d:aa:52:c1:4f:60:9e:20:a6:f7:45:fb:8b:
                    75:44:df:32:ee:9c:1d:08:25:30:ef:92:3e:23:a8:
                    1f:48:31:0d:ef:77:b2:37:46:bc:16:5e:15:57:13:
                    e0:a9:50:93:59:7a:ac:12:4c:8e:48:88:b3:cf:89:
                    95:aa:86:ab:5e:65:68:49:1d:06:6c:96:59:c8:d6:
                    cb:3c:47:e6:dd:45:ab:00:f1:ad:89:86:d7:fb:ed:
                    06:9d:56:61:23:f5:dd:04:5c:34:5f:f9:b2:73:30:
                    a1:64:3f:7c:09:b4:a5:58:aa:fa:9c:c1:d0:48:d2:
                    a3:61:08:d8:12:1a:ac:08:e8:eb:b8:2f:dc:33:a0:
                    08:7e:fb:0e:5c:7c:5e:04:c6:1a:d3:ce:cf:cc:af:
                    2d:67:2c:b1:72:7b:06:af:82:3a:84:e4:1d:6d:22:
                    56:4a:d2:cc:35:cc:cd:7e:2c:4d:81:95:73:16:a2:
                    ce:4b:0c:a2:6b:64:85:58:54:6c:73:29:3b:08:e6:
                    ac:0e:d3:ba:3f:5c:73:9f:b9:73:b1:73:ec:b8:e5:
                    00:80:3c:8d:1f:da:73:f5:24:51:d3:66:d3:00:ca:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:53:D6:6F:5C:93:DE:14:F7:F8:1D:8F:6A:04:B2:C9:2F:CE:74
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:b9:79:6e:19:66:7b:ef:ed:55:23:6b:6e:b4:d1:24:69:
         0c:9d:c2:e3:b0:81:6d:49:87:cb:e1:e1:4b:f3:ad:f5:67:9e:
         bc:de:c2:60:70:b0:aa:50:21:61:cd:b3:57:8c:cb:3e:fb:2f:
         8e:9a:16:7d:2c:e2:f7:f4:77:e6:72:e5:5e:d2:dd:7f:74:6d:
         0d:4d:42:a9:05:30:9b:cc:00:62:f2:00:f5:f5:57:9c:2e:90:
         61:fe:b2:33:ff:98:37:54:34:1b:a4:b5:d4:30:4d:cd:9c:2c:
         55:91:9b:65:15:31:89:31:93:a4:16:07:83:ee:92:d0:3a:03:
         24:a3:b0:45:d9:d3:08:c6:20:09:2b:ee:3d:35:8c:cc:fb:fb:
         69:d4:2a:6e:f2:48:67:d8:22:ef:21:c9:d2:6d:88:2b:d8:15:
         1d:4d:ef:36:99:12:21:0d:f6:fc:30:6a:72:df:21:42:3f:6d:
         65:9e:87:fd:ee:54:7b:b7:0a:68:25:a3:a4:1f:24:77:9d:ab:
         27:30:f1:c4:2d:c3:07:83:82:3c:5c:38:1e:8c:ba:54:22:a8:
         41:06:db:9f:60:22:9c:ca:72:c1:ac:72:fb:f0:d9:8a:38:5f:
         df:89:d9:30:b0:08:0c:d8:e6:c9:e0:2b:fd:7e:5f:73:26:dc:
         e9:bd:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org