Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3233302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          9YW61JR2tydUAsdu6Jz/5ryAp+emHIZnTX5+YWehQTI=
Subject key identifier:   EA:3E:CE:BB:B2:23:9F:E8:98:12:12:5B:6E:73:19:AE:63:E6:F2:7B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6150CA6D4139A9A26A69722680946D157970C6CC
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     4230
IP address blocks:        200.230.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:50:ca:6d:41:39:a9:a2:6a:69:72:26:80:94:6d:15:79:70:c6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100B69956B39C5145A86897782A66B7DB43F628085F824F9B44EE4E767D60D00063986E385BF5C6EFBA188088007A8641094E6D9A9E4A13F179D33DE5F77A54D81BE5A904A45244575D6E2FEEF497998F0DBA638C014DE0AA7001F860D25B6BB3828D199C73C43F8B0569EA406EC02CE73317DC3F05BBB0320E366C81A3B1408055582414A16A472567EB3593CBF9CBF82A4A63748B764B1278B563D9B70ACF224124D865CB669583EBC5C3FC3E115968ADFB14AB06148E1E52F21C9B236079F530ABF5CC8AABB9EFAD6DFAD788B4D02F1C6EF127B51BD051D4AC0B73B622BFE891D40E1DCE99A1C739444FCBE64FD2DEF21C80FF10AC7B4879217FB2F668CA9DDF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:56:b3:9c:51:45:a8:68:97:78:2a:66:b7:
                    db:43:f6:28:08:5f:82:4f:9b:44:ee:4e:76:7d:60:
                    d0:00:63:98:6e:38:5b:f5:c6:ef:ba:18:80:88:00:
                    7a:86:41:09:4e:6d:9a:9e:4a:13:f1:79:d3:3d:e5:
                    f7:7a:54:d8:1b:e5:a9:04:a4:52:44:57:5d:6e:2f:
                    ee:f4:97:99:8f:0d:ba:63:8c:01:4d:e0:aa:70:01:
                    f8:60:d2:5b:6b:b3:82:8d:19:9c:73:c4:3f:8b:05:
                    69:ea:40:6e:c0:2c:e7:33:17:dc:3f:05:bb:b0:32:
                    0e:36:6c:81:a3:b1:40:80:55:58:24:14:a1:6a:47:
                    25:67:eb:35:93:cb:f9:cb:f8:2a:4a:63:74:8b:76:
                    4b:12:78:b5:63:d9:b7:0a:cf:22:41:24:d8:65:cb:
                    66:95:83:eb:c5:c3:fc:3e:11:59:68:ad:fb:14:ab:
                    06:14:8e:1e:52:f2:1c:9b:23:60:79:f5:30:ab:f5:
                    cc:8a:ab:b9:ef:ad:6d:fa:d7:88:b4:d0:2f:1c:6e:
                    f1:27:b5:1b:d0:51:d4:ac:0b:73:b6:22:bf:e8:91:
                    d4:0e:1d:ce:99:a1:c7:39:44:4f:cb:e6:4f:d2:de:
                    f2:1c:80:ff:10:ac:7b:48:79:21:7f:b2:f6:68:ca:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3E:CE:BB:B2:23:9F:E8:98:12:12:5B:6E:73:19:AE:63:E6:F2:7B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:51:fc:39:ee:44:9e:1d:a8:40:f4:fb:a7:39:2e:1f:06:
         38:af:45:b6:c7:5b:54:33:0c:23:b8:7d:93:05:3a:fd:ec:ee:
         e5:88:dc:1d:3e:e3:52:44:aa:0c:0b:78:ab:06:36:09:bb:d7:
         af:dc:d7:72:b4:48:c4:43:ea:1a:d1:84:34:66:59:07:36:3e:
         16:d5:7a:6f:12:75:16:1f:f0:c3:f3:71:3b:ae:4f:ee:6e:65:
         6f:a5:4d:d5:42:06:86:30:0b:f0:65:11:75:d4:17:76:03:14:
         02:aa:d2:45:79:75:79:51:1b:26:17:3a:d5:5f:0b:09:08:b1:
         d2:39:d7:00:31:18:21:81:c4:24:ca:d6:44:49:c4:ea:e5:d0:
         9d:93:e3:c8:ee:ba:24:eb:86:5a:6a:ec:da:1e:c3:7d:2d:32:
         3f:e7:d8:d5:fc:a5:7a:47:f6:75:29:cd:d8:c7:1c:e6:2b:63:
         8b:63:19:d4:e7:ab:8a:ae:b0:ba:8d:b9:f1:a0:50:7f:d4:8f:
         de:a3:34:09:1b:1e:7b:70:ce:b1:f2:44:f0:74:60:3f:e7:e0:
         30:f9:bb:03:01:39:bf:64:30:0c:8b:aa:af:f9:7a:34:1d:06:
         5f:7e:45:2d:28:61:2c:fb:c6:18:fb:ee:58:ec:70:8f:7e:0b:
         a5:eb:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:47 2025 by rpki-client