Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          d56OjuM5D0pH0kOrK9c+TdG+RxsS2thkWiKdyypfr6o=
Subject key identifier:   FB:4D:B9:2B:3C:A4:38:0D:4D:AB:C9:9E:05:2B:04:62:FD:7F:A7:1A
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       135ADC31199647DCDA5A4699C96A9B5F2E78EF3C
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     4230
IP address blocks:        200.241.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5a:dc:31:19:96:47:dc:da:5a:46:99:c9:6a:9b:5f:2e:78:ef:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject: CN=3082010A0282010100BC6F3678238575474851B400AEE4D8B3011F8DA5F1F76BF65F5751C2470ED2CE8299277DB106A7D64C6DA2A7450DFDB98C3BD8DAEFF3531D6EEA98FB9D2F9F5B97EFB59BDADACC6E6C475E496D7A3E11E378B0794AE53D9625F71E7588371877F9B46A232BE76502515299407AA6494F911CD74AE4863363297B4374232F84658B8BF09A00D7795864B09AA92629E5231B593A64A80C1E27430424CB6E9E2FF7D4061D39529898FE8C9E37A0551223A5972E618B33C6706E7810E5BEDDA0033FBD76EB5059C0758F0E19645D980C3CA4A071B52756640A99AA4B28F6F0FD56A7EA86F81686FCF291092A238A41E20339ECE91CE84A6A72457D32DF17FA5A2E7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:36:78:23:85:75:47:48:51:b4:00:ae:e4:
                    d8:b3:01:1f:8d:a5:f1:f7:6b:f6:5f:57:51:c2:47:
                    0e:d2:ce:82:99:27:7d:b1:06:a7:d6:4c:6d:a2:a7:
                    45:0d:fd:b9:8c:3b:d8:da:ef:f3:53:1d:6e:ea:98:
                    fb:9d:2f:9f:5b:97:ef:b5:9b:da:da:cc:6e:6c:47:
                    5e:49:6d:7a:3e:11:e3:78:b0:79:4a:e5:3d:96:25:
                    f7:1e:75:88:37:18:77:f9:b4:6a:23:2b:e7:65:02:
                    51:52:99:40:7a:a6:49:4f:91:1c:d7:4a:e4:86:33:
                    63:29:7b:43:74:23:2f:84:65:8b:8b:f0:9a:00:d7:
                    79:58:64:b0:9a:a9:26:29:e5:23:1b:59:3a:64:a8:
                    0c:1e:27:43:04:24:cb:6e:9e:2f:f7:d4:06:1d:39:
                    52:98:98:fe:8c:9e:37:a0:55:12:23:a5:97:2e:61:
                    8b:33:c6:70:6e:78:10:e5:be:dd:a0:03:3f:bd:76:
                    eb:50:59:c0:75:8f:0e:19:64:5d:98:0c:3c:a4:a0:
                    71:b5:27:56:64:0a:99:aa:4b:28:f6:f0:fd:56:a7:
                    ea:86:f8:16:86:fc:f2:91:09:2a:23:8a:41:e2:03:
                    39:ec:e9:1c:e8:4a:6a:72:45:7d:32:df:17:fa:5a:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4D:B9:2B:3C:A4:38:0D:4D:AB:C9:9E:05:2B:04:62:FD:7F:A7:1A
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:dd:49:9a:ee:b5:ab:8a:2e:09:a9:5b:7f:6c:9e:c9:90:
         42:4f:09:fe:3b:d6:f8:ab:ad:8b:52:fa:98:4d:09:1d:bd:58:
         b9:ca:4e:c6:b7:49:f2:bc:1c:a3:d6:cd:7d:95:b8:39:97:e9:
         ba:c1:4a:19:ec:8d:1d:bc:dc:b6:71:26:2a:b0:b5:c0:7c:8c:
         d8:cf:2c:a9:bc:7d:6b:38:60:f0:55:53:03:7e:24:84:8c:6a:
         9f:97:8d:a9:f3:ac:9d:92:90:46:7f:54:69:2f:ac:5c:3c:7d:
         28:d6:61:be:db:60:91:11:5a:a8:81:fd:d5:f2:b9:48:5c:28:
         0b:72:6d:63:f7:1a:97:e7:4b:54:17:0c:29:2f:8b:68:fc:95:
         a6:a0:d8:23:3a:75:36:51:24:bd:0a:ab:15:0d:37:93:a1:06:
         dc:18:7b:b4:ac:7e:62:d9:7e:9b:ca:26:fd:38:fc:d3:22:cd:
         cb:22:3c:06:6d:ad:c8:7f:79:47:92:da:59:40:db:ce:ff:1f:
         6b:e5:73:cb:90:b9:d8:43:9b:ab:cb:83:5e:c0:99:41:6b:0d:
         bb:d2:28:aa:03:52:cb:bc:cb:30:84:ca:d9:ff:7c:36:df:f2:
         d5:1f:bd:60:2f:52:69:f1:8d:0a:1c:37:c0:ac:c0:53:09:8f:
         ac:01:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org