Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          yJl52I13Q9ZQSsedm+Jz5nZ23v+Pv52+3ReKOXLKsTk=
Subject key identifier:   63:79:14:4A:CF:69:47:4F:BF:BC:D2:1D:F7:33:C4:09:AE:ED:AE:C6
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       367534F1ECE8BB980EBF1C14B7EE4E08D0D62DE6
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     4230
IP address blocks:        200.244.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:75:34:f1:ec:e8:bb:98:0e:bf:1c:14:b7:ee:4e:08:d0:d6:2d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:6e:9c:43:fc:d0:b9:5e:b8:e6:7c:4a:9f:
                    60:27:ad:e2:36:6f:d8:ff:77:ac:66:e7:79:93:b7:
                    dc:e2:5d:33:31:18:38:82:cd:61:3c:18:c6:f8:0f:
                    9b:85:26:da:ae:c3:ea:b3:68:97:98:c1:eb:67:ae:
                    1a:69:fe:89:19:b4:b3:32:3a:ca:4d:3b:1d:35:65:
                    9c:21:a7:5e:38:ea:ed:7a:29:80:67:ba:f2:85:c3:
                    62:23:b8:a4:4b:d6:64:8a:13:4d:23:f0:4a:c2:90:
                    7b:03:c0:39:1b:a1:d4:90:cf:db:03:b0:ab:88:ec:
                    c6:df:1f:dd:db:c4:e1:f8:d5:ee:20:0a:88:28:88:
                    cf:89:d5:2d:81:5d:2a:2a:9e:da:98:a5:cd:f8:57:
                    c7:e8:da:c1:d9:08:e4:64:86:cd:50:0c:bc:cb:5c:
                    fd:c0:5a:a4:2b:61:cf:8c:e1:d9:74:b4:9f:26:b8:
                    4f:46:d8:ab:fb:22:07:49:ae:f2:82:e1:eb:13:e3:
                    bd:e3:c4:45:52:70:c5:77:ba:b5:18:af:55:79:24:
                    1c:a8:5b:df:8e:56:59:3a:fd:ff:22:9c:9a:a3:58:
                    79:81:cf:e0:27:80:ea:b4:86:b5:65:a5:b4:8c:b3:
                    0c:d7:e3:dc:b7:8c:04:b0:50:a4:e6:6f:84:aa:43:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:79:14:4A:CF:69:47:4F:BF:BC:D2:1D:F7:33:C4:09:AE:ED:AE:C6
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:b1:98:c5:a6:eb:72:6d:78:4c:6d:cf:69:a9:c8:1c:1e:ea:
         12:81:f3:13:ed:af:55:88:d3:6f:ac:fc:0a:5a:38:fa:ad:d1:
         8e:0f:6b:ac:f8:91:fa:93:db:be:3b:f0:45:8c:9e:6b:8d:d3:
         58:3f:8f:17:bd:81:bd:6a:d7:0d:df:d6:98:92:9a:a8:f7:bc:
         66:7a:82:a6:f8:b5:40:b1:a0:df:d9:25:3d:6c:e4:49:94:23:
         3c:95:ca:ec:86:01:53:56:1e:9f:7e:65:4a:0c:8d:38:08:d0:
         73:f3:dd:62:c8:60:d6:5a:64:5e:92:c5:69:c4:09:33:e4:39:
         cc:c2:96:5f:dd:b5:22:c4:e4:73:96:95:81:16:15:d6:38:6f:
         bc:a3:27:92:14:f7:3e:49:c2:d9:1c:8f:48:be:6d:c0:77:ff:
         f6:f7:cd:0b:1a:6d:8a:97:63:31:e1:12:99:51:4f:9b:81:06:
         7b:5e:58:ca:24:85:2c:f8:b3:f5:0f:e3:54:b0:5a:9f:74:56:
         07:f3:19:1c:6e:dd:59:62:bb:8a:ba:f8:6d:57:6b:29:fe:e1:
         2f:c8:ee:52:5f:d9:3a:5d:6f:56:62:48:14:28:6f:0f:37:2e:
         16:27:57:ca:9f:30:a7:d1:62:31:ea:d3:a6:e4:23:af:68:5e:
         1e:06:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:17 2025 by rpki-client