Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          OLYmlvtsmTHL+8TEo0JwvbeZmw24iZmf14ERyreal5k=
Subject key identifier:   EE:2D:0B:EC:B7:B7:6B:8A:AD:62:F3:09:8A:76:79:B6:44:F9:CE:77
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       7D862AD4E3A547791C37EBC252C34A87992278C9
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     4230
IP address blocks:        200.243.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:2a:d4:e3:a5:47:79:1c:37:eb:c2:52:c3:4a:87:99:22:78:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject: CN=3082010A0282010100CDA56E16F4662AB3946D048C351856BCEB6CA78F17BA9C0C983F20A24CA1C62D654FF7EE0779185E6B4FA9FBC4F12CD8E664FB642B37632D1AE9590E5E7DFA831DB1C1E61A03BAB9AC84641F1407180163D3BB0B1D033BAAC0D1327A9D7FB09C760FCB7A5A8B8153303508C2BE33E62E1A8CF8A523106B534949F628F95DBC9E4BFB63012421FD86964DDD7BC5495B39A58620C0A67E8BEF5A4F61EB3BE9B67E76E780C848BD2CEDD8750E735BE5CA7A851AE455FCB93FA690BF1F994D4D9C7A056F677F68E33AC18911790D1DA0F09C889AD71BE4F8B4543C8ED4FB12032DC5935B83A5667728972AFD3BFC051115872585E3841E2595343B9169FE97D995DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:6e:16:f4:66:2a:b3:94:6d:04:8c:35:18:
                    56:bc:eb:6c:a7:8f:17:ba:9c:0c:98:3f:20:a2:4c:
                    a1:c6:2d:65:4f:f7:ee:07:79:18:5e:6b:4f:a9:fb:
                    c4:f1:2c:d8:e6:64:fb:64:2b:37:63:2d:1a:e9:59:
                    0e:5e:7d:fa:83:1d:b1:c1:e6:1a:03:ba:b9:ac:84:
                    64:1f:14:07:18:01:63:d3:bb:0b:1d:03:3b:aa:c0:
                    d1:32:7a:9d:7f:b0:9c:76:0f:cb:7a:5a:8b:81:53:
                    30:35:08:c2:be:33:e6:2e:1a:8c:f8:a5:23:10:6b:
                    53:49:49:f6:28:f9:5d:bc:9e:4b:fb:63:01:24:21:
                    fd:86:96:4d:dd:7b:c5:49:5b:39:a5:86:20:c0:a6:
                    7e:8b:ef:5a:4f:61:eb:3b:e9:b6:7e:76:e7:80:c8:
                    48:bd:2c:ed:d8:75:0e:73:5b:e5:ca:7a:85:1a:e4:
                    55:fc:b9:3f:a6:90:bf:1f:99:4d:4d:9c:7a:05:6f:
                    67:7f:68:e3:3a:c1:89:11:79:0d:1d:a0:f0:9c:88:
                    9a:d7:1b:e4:f8:b4:54:3c:8e:d4:fb:12:03:2d:c5:
                    93:5b:83:a5:66:77:28:97:2a:fd:3b:fc:05:11:15:
                    87:25:85:e3:84:1e:25:95:34:3b:91:69:fe:97:d9:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:0B:EC:B7:B7:6B:8A:AD:62:F3:09:8A:76:79:B6:44:F9:CE:77
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:5a:06:5a:ef:e4:b2:18:08:88:97:4a:b5:2a:09:bb:2b:45:
         05:63:4e:31:6d:cd:bd:0d:c5:e7:1f:20:68:57:b3:f5:5a:ca:
         c0:18:d3:49:c7:4e:a1:0e:52:c6:d8:d3:ae:43:c8:06:be:f2:
         e1:20:b6:b1:e5:5d:6d:1b:11:5a:d0:87:1b:8d:00:71:47:88:
         e5:68:97:b7:85:d1:54:2c:2a:4c:80:8c:ae:5e:19:02:05:14:
         a2:ce:d8:52:77:ae:ab:c0:79:a9:90:00:c0:59:91:8f:e0:68:
         4f:78:83:a3:a8:57:9b:31:49:e0:9a:6a:99:4b:a6:88:a8:48:
         da:a9:53:8b:9e:aa:49:91:05:7f:2a:cb:c9:06:df:c2:fb:3c:
         c3:55:64:b5:6a:20:d6:1c:55:52:37:6a:50:bb:0c:0b:9a:bf:
         94:5c:f5:47:c5:f6:94:8c:e0:e1:5c:b5:7a:a7:05:8e:9a:04:
         74:1c:75:ef:77:71:b2:cd:e7:7f:90:45:1d:fe:20:04:ef:03:
         15:20:d6:9b:1a:09:11:ea:24:b5:b9:45:33:62:d1:b9:51:d2:
         4e:82:f6:69:af:d8:6d:9f:33:01:27:da:e4:2f:76:39:99:01:
         bb:1e:b8:02:80:a5:4a:d6:eb:3b:59:9b:f8:75:9a:c9:a6:ef:
         18:92:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:53 2024 by rpki-client on console-fra.rpki-client.org