Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          oKHJHLdKitHVhVM+60e/Azwh+EwTU34X90RS4l2xC9M=
Subject key identifier:   56:18:1B:21:E1:C8:91:7B:95:DC:66:E8:FD:64:6D:3E:89:3D:CD:A7
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       540AA3557CCBB706D150BCFEFEFE9714839690FC
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     4230
IP address blocks:        200.242.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0a:a3:55:7c:cb:b7:06:d1:50:bc:fe:fe:fe:97:14:83:96:90:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:09:ee:59:e9:ae:00:6e:5e:0a:ea:96:85:
                    11:aa:7b:f7:bb:db:26:05:f4:f7:77:3f:e8:e3:a9:
                    97:cc:bb:be:4c:7a:25:02:1c:bc:77:5d:06:62:6d:
                    46:05:3b:de:23:92:37:22:12:8b:87:87:39:4b:ae:
                    98:77:d6:a1:d3:13:c6:f5:5d:0a:d0:8f:93:75:f5:
                    99:2b:03:f6:a7:92:51:23:82:1e:89:67:b4:ae:91:
                    71:a9:60:42:3d:4d:e0:7f:00:70:c4:cb:48:92:11:
                    cd:f7:13:ed:2f:27:b1:d0:0f:fd:8a:2e:fd:46:27:
                    28:51:0c:42:16:dc:72:3c:74:50:51:e5:36:13:57:
                    78:ce:ce:f5:49:63:49:d7:13:b4:1f:68:86:cf:72:
                    57:dc:b5:23:10:77:58:4c:33:d7:11:a8:b9:db:9a:
                    93:3a:86:ea:64:53:59:7a:0d:20:2a:1c:78:28:3e:
                    87:dc:73:f8:06:ea:cf:aa:b0:a6:eb:a8:03:81:35:
                    6f:24:43:c7:d0:96:94:c6:0b:6f:83:b8:6a:e0:99:
                    93:dd:26:9b:0f:04:2a:b9:02:79:60:e4:1f:f6:35:
                    5e:b6:3c:9b:a1:b1:b5:ad:cf:82:54:57:d2:1c:ac:
                    5b:7f:59:d1:fc:fc:15:42:43:0d:28:87:b9:4e:17:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:1B:21:E1:C8:91:7B:95:DC:66:E8:FD:64:6D:3E:89:3D:CD:A7
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:73:1e:9c:f9:f0:64:9c:7c:59:5a:83:8b:15:1a:62:c7:71:
         4c:a1:7e:d4:03:14:be:a8:69:5a:e2:9f:95:71:dd:8d:7f:40:
         ca:3b:2c:24:40:25:f5:7c:ba:76:02:a0:5d:ad:1f:84:82:e5:
         62:98:cb:b0:34:38:a6:1c:b0:d1:d6:f6:ad:67:ff:a2:fa:d0:
         e3:e0:11:02:f9:c0:c5:33:a3:8b:7f:0e:17:89:42:28:47:f7:
         e2:39:e9:89:05:55:af:43:bd:ef:59:a5:bf:3a:03:c2:0c:7e:
         b4:75:de:01:cb:b2:73:76:ce:35:8c:58:8b:23:eb:27:f0:7a:
         01:26:5d:b5:71:11:58:63:d8:fd:6c:9b:9b:ac:6e:ea:ec:b0:
         24:86:99:bd:0f:65:31:5d:a6:5f:3c:b8:8d:ce:26:cc:52:e5:
         20:52:d7:b9:53:1e:42:60:5f:da:93:df:2c:9e:af:38:21:e4:
         15:e2:a6:16:cb:df:a3:2a:46:b1:75:21:f8:91:27:b5:33:88:
         b6:02:6b:12:e2:7f:8d:47:fb:3c:b7:10:c6:d5:46:3e:45:b2:
         53:28:6b:06:9b:b7:38:b4:b8:7a:fe:84:07:30:f4:bf:a9:93:
         5b:d1:ba:53:d8:c3:00:b6:ad:b1:b6:74:24:72:42:18:a8:94:
         6d:b7:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org