Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          zJplk/qJnm9/kYdldWJ4jP2A1v293LtYKJY5CROuCq8=
Subject key identifier:   03:66:9C:9E:6B:89:7F:24:9A:25:A0:33:EE:A8:34:8E:C6:15:3E:42
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       E68A5424EF0E762B261D08E2D8DE69DD9668A9
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     4230
IP address blocks:        200.246.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e6:8a:54:24:ef:0e:76:2b:26:1d:08:e2:d8:de:69:dd:96:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject: CN=3082010A0282010100F3C95C69AE122BED515D9FDA16D2AF934B50D845BCD66E9CBAA4A41A6D5547E675AC06440FEF4E4E4A83D289E558AF0B38F3519DB9B9AEE86B444520B94578D4477600628901901C4DDD181AB050A1DEDAC597D3557E7A9EB282B9799DCDE439F2BFE112656BC7A1A23420AEDC884BA00FEBA7D064E08A8A027BC03B358F90BE38374254E8D6BFF210666F67DD96278324812AE52619C78F161DFF47BDC3690839FAA1B00BAD8187C7A0929131E82B68F4C7DA36CB4B9DF817770169E611D4A90050EDC4553E1FCD3C1CD9092987551009BC03545266B3238FC1C7CF90A1935DD0303635E0DA7C1500A75B1AF8953FF9057AD935E9482CED50EC582B82006AA70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c9:5c:69:ae:12:2b:ed:51:5d:9f:da:16:d2:
                    af:93:4b:50:d8:45:bc:d6:6e:9c:ba:a4:a4:1a:6d:
                    55:47:e6:75:ac:06:44:0f:ef:4e:4e:4a:83:d2:89:
                    e5:58:af:0b:38:f3:51:9d:b9:b9:ae:e8:6b:44:45:
                    20:b9:45:78:d4:47:76:00:62:89:01:90:1c:4d:dd:
                    18:1a:b0:50:a1:de:da:c5:97:d3:55:7e:7a:9e:b2:
                    82:b9:79:9d:cd:e4:39:f2:bf:e1:12:65:6b:c7:a1:
                    a2:34:20:ae:dc:88:4b:a0:0f:eb:a7:d0:64:e0:8a:
                    8a:02:7b:c0:3b:35:8f:90:be:38:37:42:54:e8:d6:
                    bf:f2:10:66:6f:67:dd:96:27:83:24:81:2a:e5:26:
                    19:c7:8f:16:1d:ff:47:bd:c3:69:08:39:fa:a1:b0:
                    0b:ad:81:87:c7:a0:92:91:31:e8:2b:68:f4:c7:da:
                    36:cb:4b:9d:f8:17:77:01:69:e6:11:d4:a9:00:50:
                    ed:c4:55:3e:1f:cd:3c:1c:d9:09:29:87:55:10:09:
                    bc:03:54:52:66:b3:23:8f:c1:c7:cf:90:a1:93:5d:
                    d0:30:36:35:e0:da:7c:15:00:a7:5b:1a:f8:95:3f:
                    f9:05:7a:d9:35:e9:48:2c:ed:50:ec:58:2b:82:00:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:9C:9E:6B:89:7F:24:9A:25:A0:33:EE:A8:34:8E:C6:15:3E:42
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:25:4b:10:61:60:b0:56:cb:dc:eb:42:56:50:67:1b:81:c1:
         6b:4f:c7:1b:3e:85:06:37:30:ad:14:6f:48:a4:49:73:3e:18:
         18:4e:07:e9:ed:6a:15:2c:f4:0d:bc:f4:73:c7:ab:18:69:dc:
         1a:f4:b0:67:14:7d:d1:1a:61:87:3e:45:f7:08:7f:00:8f:03:
         61:3d:47:61:33:1f:3e:22:5f:99:83:91:d3:dd:2b:ed:28:a1:
         1a:50:b2:d4:51:a9:73:2d:e5:1a:4f:03:c2:84:50:78:34:a3:
         d4:27:70:0a:95:1d:20:94:6c:db:35:a4:63:0e:77:43:25:ae:
         fb:63:d2:9b:88:d3:db:4e:36:93:82:34:a5:94:ef:26:3d:a5:
         23:cf:29:2c:e4:bd:3c:77:0c:fa:a4:1f:32:a5:5b:98:00:6b:
         08:91:e2:9e:06:47:c7:99:4b:a9:94:cd:08:af:ef:36:fb:d6:
         c5:61:cf:91:4a:b4:c7:72:9b:62:f0:07:8d:1f:6c:99:0a:d4:
         91:d0:a2:e5:14:b1:8e:06:03:68:1a:17:79:be:b7:e3:4b:6b:
         d5:7f:65:3b:71:05:be:a9:8e:58:5a:75:ef:75:3e:84:96:90:
         3f:14:85:20:f2:b7:cc:f7:da:db:d3:6c:4f:05:ca:12:7c:93:
         ff:9a:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org