Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234352e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          UFPdNpreBT0P5/aJAOifMf/vsZodV0J2hyuKejzhwbc=
Subject key identifier:   6A:75:36:BF:12:95:37:2E:FC:E5:C6:FE:08:B0:93:2D:E1:B2:30:57
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       19FEFEB1503802F8B71FD84E481AA92D52FC31DB
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        200.245.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fe:fe:b1:50:38:02:f8:b7:1f:d8:4e:48:1a:a9:2d:52:fc:31:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:3f:9d:28:39:37:46:16:d1:f7:ea:19:cc:
                    e5:d2:f9:91:b8:92:4d:fb:31:60:80:78:fc:de:70:
                    fe:78:fd:3a:71:16:11:8e:e8:cf:05:88:66:be:04:
                    27:d1:d6:a0:1f:aa:b1:46:f7:d8:5e:bf:ac:9b:05:
                    55:06:bc:33:1d:d9:d1:cc:33:de:be:0d:cb:38:63:
                    36:4a:6e:1c:d4:98:73:59:c3:64:12:c5:f6:9b:fd:
                    e6:46:64:89:d4:56:fd:1c:ba:af:60:68:e8:e0:2f:
                    48:0d:f2:25:17:d8:b3:ee:09:a2:06:61:9a:b3:5b:
                    d8:52:48:4c:a0:1a:16:60:04:09:3c:61:ab:23:54:
                    a9:5a:8b:72:45:22:4f:e1:04:d1:ab:82:a8:be:a3:
                    3a:15:72:2a:b3:1c:37:b2:9d:7a:db:23:df:e2:22:
                    13:5d:f6:ba:76:b1:39:81:c2:13:90:aa:8b:88:a8:
                    91:a1:e1:0e:2c:d5:93:b5:50:8b:1c:65:f5:e7:ad:
                    0c:4c:af:ab:70:29:d0:d0:7e:a3:15:94:29:1c:a3:
                    a2:16:30:93:d9:10:bd:d7:3a:28:52:89:b1:09:99:
                    bb:15:91:ef:01:f2:fd:87:5e:28:a6:2b:a0:d5:e3:
                    0c:53:d3:7e:34:10:fd:d2:b1:d0:61:7b:92:8a:6c:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:75:36:BF:12:95:37:2E:FC:E5:C6:FE:08:B0:93:2D:E1:B2:30:57
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:a7:0a:f0:43:bb:4c:a8:2a:ca:3e:3a:27:a2:17:a6:7a:
         32:88:60:cf:fb:a3:e4:a8:db:bf:94:37:fc:27:c1:a5:00:ad:
         1f:b4:6e:81:6c:08:da:35:66:b2:bd:44:8b:d8:7b:b4:3a:c9:
         86:ba:e7:be:a9:c2:33:40:61:92:83:8b:dc:30:d6:a7:16:a4:
         11:40:5d:0f:f3:19:2e:f0:e0:f5:ce:ad:ad:ce:46:8f:5e:18:
         ff:d6:cf:c6:20:81:47:0d:6a:bf:39:7a:21:94:8b:ab:2c:e7:
         7e:94:ae:3a:61:08:ae:8c:92:5b:55:36:46:0c:35:9b:5a:00:
         67:42:68:ec:1b:5c:3c:33:cd:96:95:0d:ce:49:c7:29:d5:1d:
         28:af:04:80:a0:90:36:5e:2d:15:14:6c:d8:08:7e:16:15:4e:
         3a:3a:84:b8:74:11:d9:15:ad:9e:e0:b5:e2:69:5c:54:53:0c:
         86:af:80:05:9c:b2:81:cd:9d:b9:b5:bf:c7:e6:20:0e:2b:a3:
         4f:35:8b:75:d2:f0:87:36:d8:d3:28:cd:32:b5:67:b0:6c:cd:
         3b:28:3c:26:16:fd:93:6b:08:11:b4:9b:f9:c9:31:bd:5e:fc:
         d9:7a:1c:90:a9:2a:4c:d4:8f:37:0f:f1:e7:f0:d9:be:6a:ab:
         fe:5f:81:86
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUGf7+sVA4Avi3H9hOSBqpLVL8MdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDdaFw0yNTA0MDIxODMxMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE5QzNGOUQyODM5Mzc0NjE2
RDFGN0VBMTlDQ0U1RDJGOTkxQjg5MjRERkIzMTYwODA3OEZDREU3MEZFNzhGRDNB
NzExNjExOEVFOENGMDU4ODY2QkUwNDI3RDFENkEwMUZBQUIxNDZGN0Q4NUVCRkFD
OUIwNTU1MDZCQzMzMUREOUQxQ0MzM0RFQkUwRENCMzg2MzM2NEE2RTFDRDQ5ODcz
NTlDMzY0MTJDNUY2OUJGREU2NDY2NDg5RDQ1NkZEMUNCQUFGNjA2OEU4RTAyRjQ4
MERGMjI1MTdEOEIzRUUwOUEyMDY2MTlBQjM1QkQ4NTI0ODRDQTAxQTE2NjAwNDA5
M0M2MUFCMjM1NEE5NUE4QjcyNDUyMjRGRTEwNEQxQUI4MkE4QkVBMzNBMTU3MjJB
QjMxQzM3QjI5RDdBREIyM0RGRTIyMjEzNURGNkJBNzZCMTM5ODFDMjEzOTBBQThC
ODhBODkxQTFFMTBFMkNENTkzQjU1MDhCMUM2NUY1RTdBRDBDNENBRkFCNzAyOUQw
RDA3RUEzMTU5NDI5MUNBM0EyMTYzMDkzRDkxMEJERDczQTI4NTI4OUIxMDk5OUJC
MTU5MUVGMDFGMkZEODc1RTI4QTYyQkEwRDVFMzBDNTNEMzdFMzQxMEZERDJCMUQw
NjE3QjkyOEE2QzlGMkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAupw/nSg5N0YW0ffqGczl0vmRuJJN+zFggHj83nD+eP06cRYRjujP
BYhmvgQn0dagH6qxRvfYXr+smwVVBrwzHdnRzDPevg3LOGM2Sm4c1JhzWcNkEsX2
m/3mRmSJ1Fb9HLqvYGjo4C9IDfIlF9iz7gmiBmGas1vYUkhMoBoWYAQJPGGrI1Sp
WotyRSJP4QTRq4KovqM6FXIqsxw3sp162yPf4iITXfa6drE5gcITkKqLiKiRoeEO
LNWTtVCLHGX1560MTK+rcCnQ0H6jFZQpHKOiFjCT2RC91zooUomxCZm7FZHvAfL9
h14opiug1eMMU9N+NBD90rHQYXuSimyfLwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FGp1Nr8SlTcu/OXG/giwky3hsjBXMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNDM1MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPUwDQYJ
KoZIhvcNAQELBQADggEBADjHpwrwQ7tMqCrKPjonohemejKIYM/7o+So27+UN/wn
waUArR+0boFsCNo1ZrK9RIvYe7Q6yYa6576pwjNAYZKDi9ww1qcWpBFAXQ/zGS7w
4PXOra3ORo9eGP/Wz8YggUcNar85eiGUi6ss536UrjphCK6MkltVNkYMNZtaAGdC
aOwbXDwzzZaVDc5JxynVHSivBICgkDZeLRUUbNgIfhYVTjo6hLh0EdkVrZ7gteJp
XFRTDIavgAWcsoHNnbm1v8fmIA4ro081i3XS8Ic22NMozTK1Z7BszTsoPCYW/ZNr
CBG0m/nJMb1e/Nl6HJCpKkzUjzcP8efw2b5qq/5fgYY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org