Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          FOqV3luTEyeXHhkT0cTIkqL/vmrLUwv0lIOsSveIczE=
Subject key identifier:   1E:B3:C1:0A:3C:72:CD:3F:5A:30:F1:F5:8F:32:74:11:4F:B2:7E:49
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3C525D9C8324EA7F30D6140725C27B08E1786C4E
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     4230
IP address blocks:        200.248.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:52:5d:9c:83:24:ea:7f:30:d6:14:07:25:c2:7b:08:e1:78:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:c5:c1:43:e6:b0:67:6a:db:d8:20:46:e3:
                    6e:f8:8a:80:87:4b:67:a3:f3:b6:6e:7e:a7:88:b1:
                    ff:30:bb:e4:19:fe:57:27:56:7d:b2:eb:71:36:26:
                    2f:fe:de:2d:1c:af:7b:4e:62:db:fd:f1:96:5e:d2:
                    19:68:11:cf:a6:60:27:a5:a1:14:03:27:db:0d:23:
                    27:3c:84:69:cb:da:61:11:51:dd:a2:23:04:a6:85:
                    89:49:07:95:dd:26:7b:42:45:3a:bd:92:c4:c5:c2:
                    b7:25:e1:62:84:12:3c:62:bd:69:4d:cf:a8:18:82:
                    28:4c:76:3d:e3:af:60:ac:34:16:4e:55:5b:95:30:
                    1b:0d:5a:c2:77:50:6d:f2:2c:6f:dc:b7:32:04:b1:
                    f8:13:9a:ae:b6:5d:18:bb:1d:ea:27:5d:54:9f:b7:
                    3e:e0:83:4e:2a:54:7b:6b:a1:4d:5a:63:ce:31:ef:
                    06:7e:ff:e4:ff:86:be:6b:92:16:d9:81:82:73:34:
                    31:60:16:a2:ac:e4:ef:d0:55:7e:af:db:02:f9:9b:
                    58:96:af:e1:99:61:7a:93:67:bd:7f:ce:57:01:13:
                    b2:7c:3c:e2:c9:af:e7:37:10:a2:46:b9:b2:ee:e2:
                    58:81:5d:f8:52:94:f7:6f:e9:d6:bf:57:a9:37:d0:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B3:C1:0A:3C:72:CD:3F:5A:30:F1:F5:8F:32:74:11:4F:B2:7E:49
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:7a:bb:d5:e0:37:06:c2:17:bc:10:7d:b2:2b:c7:8c:c3:a1:
         4a:30:5e:d6:69:d0:5a:90:b0:ad:ae:a6:fb:a8:20:e2:12:83:
         3a:1c:f5:80:dc:70:eb:41:84:ef:41:be:70:f4:74:ba:33:8b:
         e7:76:08:6b:27:55:0f:ef:93:ab:e7:e6:df:99:fa:1d:e2:db:
         cc:88:50:e5:07:0e:6e:7a:81:80:f0:78:e2:63:87:31:e9:de:
         47:fc:3c:42:cc:71:b9:6a:ce:3e:5d:cc:4b:a2:30:5f:28:45:
         06:67:16:b6:17:86:3f:47:ae:65:5c:07:18:d6:f2:95:87:f6:
         f6:8e:8e:4f:5d:ff:1a:bd:11:e4:63:f9:07:17:82:09:50:6d:
         88:75:a9:4c:4b:77:dd:25:73:21:34:cb:54:01:17:54:a5:85:
         23:e3:58:f6:03:d6:81:b0:89:e3:86:e2:9b:e5:24:28:6e:07:
         74:73:e0:19:1f:69:82:9d:4d:e1:91:40:81:ce:d9:39:72:b8:
         5d:d8:9e:4a:5f:a2:cd:c1:c8:d4:f7:ac:ad:1f:0b:31:80:3e:
         64:e7:11:00:42:36:59:d0:68:95:0b:8c:fa:26:ce:55:c3:2a:
         e3:49:8e:0b:df:fd:74:7d:c5:1b:26:be:0f:f2:fd:da:6f:24:
         cb:87:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org