Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          aVVGLSJR2lK6RkpW8ft3DnpRPxKaypQAzXvM6itt6KM=
Subject key identifier:   4E:B4:74:0C:1E:FA:ED:72:49:A7:99:AE:CB:F7:53:2B:09:C3:8C:56
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       60787B43B8D45E61A2F14D6A48FFD025085BBEC9
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     4230
IP address blocks:        200.244.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:78:7b:43:b8:d4:5e:61:a2:f1:4d:6a:48:ff:d0:25:08:5b:be:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:cf:67:c9:c7:bc:6d:59:15:c6:ed:77:4e:
                    21:56:df:a4:ee:b4:d1:9b:fb:44:ae:ba:8a:f8:f5:
                    66:d0:84:69:87:24:54:bf:aa:ce:94:2c:79:82:37:
                    1e:f6:ea:f3:35:83:e7:b9:83:94:59:e7:91:2f:cd:
                    a2:2e:a0:3b:a5:89:6f:0d:70:97:9a:fe:70:d0:fd:
                    9b:2b:39:ec:1c:aa:f5:0e:52:e1:02:d8:1e:f7:67:
                    93:c6:cd:2d:7d:ba:9f:3e:5c:fd:9c:e3:d1:f8:6e:
                    d9:b2:f9:82:f7:59:2e:50:af:b6:21:83:6a:a7:ea:
                    aa:ca:b0:ca:a9:52:cc:9d:15:d7:ba:93:f9:5a:ed:
                    ad:8a:52:e1:cf:a2:fd:26:81:56:75:53:e3:32:41:
                    2f:5b:57:1d:aa:5b:c1:d5:f4:fb:e1:bb:4f:b5:fa:
                    1e:28:4a:c7:42:ef:5c:21:be:f5:8e:f4:49:73:e9:
                    f3:fa:82:62:f8:9a:fe:4a:84:c8:43:c8:cd:34:2a:
                    ec:4d:21:dc:a6:77:88:e8:e5:9d:cb:85:87:8f:ce:
                    64:ca:4c:bc:9f:c1:6a:3d:09:57:7a:1c:2c:f4:2c:
                    6b:72:40:46:7d:53:4a:7f:23:7c:36:06:7b:34:26:
                    d4:45:f0:eb:c9:53:c1:59:be:e0:e0:ed:f2:f0:a6:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B4:74:0C:1E:FA:ED:72:49:A7:99:AE:CB:F7:53:2B:09:C3:8C:56
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:75:52:59:56:8e:10:f4:77:8e:de:ff:ba:da:9d:34:88:
         df:c9:dc:24:01:d0:65:e2:68:c9:f5:02:d1:24:c0:a6:18:e2:
         8a:d8:ec:59:11:dc:1f:c5:82:5e:2f:ac:65:28:32:e9:af:f9:
         8c:73:83:7d:07:5e:ce:a8:02:c1:bb:bf:09:64:6f:f5:3a:8f:
         7d:92:05:a8:ec:59:9b:9f:bd:fa:a8:82:b2:b0:8a:4c:e8:4f:
         67:ec:0a:bb:55:f2:ca:79:41:0a:c9:af:14:65:8a:70:a5:c8:
         46:c5:d9:ca:54:4f:3f:71:96:ff:48:16:2a:88:d2:04:87:d7:
         b6:00:4c:f2:15:77:7e:bc:39:ef:3f:d3:f5:ec:29:79:bf:e8:
         ec:a7:3a:40:8c:90:65:81:7f:eb:1b:b0:a2:2d:f0:5f:9e:22:
         65:30:54:54:1e:53:38:37:6c:92:6f:55:cd:18:dc:c8:45:48:
         c9:d6:0c:e6:15:f2:c8:21:54:b5:a5:22:7c:dd:e1:37:ac:9d:
         89:a1:ce:97:a1:fd:2a:bd:8a:2f:d9:f2:d1:4d:e0:51:b3:36:
         17:73:ea:b2:d3:35:aa:d2:7d:43:c8:bc:58:d8:88:21:b6:c9:
         21:b7:64:4b:3c:55:27:c3:ca:51:66:9a:15:e5:1f:71:60:cf:
         f1:0d:68:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:57 2024 by rpki-client on console-ams.rpki-client.org