Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          iSAq2e69AVc9PhvbB//s7gIn0IcNDXGkoydf0tcXvqs=
Subject key identifier:   D8:ED:3C:25:F3:F9:26:61:93:83:95:00:77:6A:FF:48:2F:59:20:6A
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       59CD2304D90CA18CE7BA2A4BDDFBEA115A9EECDE
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     4230
IP address blocks:        200.249.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cd:23:04:d9:0c:a1:8c:e7:ba:2a:4b:dd:fb:ea:11:5a:9e:ec:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:34:28:8c:38:29:e6:d1:c7:15:56:68:e6:
                    56:55:61:c3:64:52:6a:60:bd:dd:7d:d4:25:55:c9:
                    8f:e4:98:fe:dc:15:92:51:cf:88:77:9e:4f:25:d8:
                    bf:51:6c:d6:c6:51:f2:46:b2:a8:5a:bf:46:a7:e4:
                    71:a8:5c:a8:dd:a7:7d:4e:64:1b:8c:3f:aa:9d:18:
                    b0:82:d0:f8:3e:3e:b1:4c:43:8d:3e:85:09:f0:01:
                    db:46:f2:d5:ff:f5:29:8f:62:b8:7d:3d:2d:a5:d3:
                    30:03:d1:88:95:1b:e0:34:0f:8b:4c:28:94:3c:51:
                    e1:33:98:96:f3:cc:0c:64:46:d2:52:83:23:8c:d3:
                    f2:19:52:e7:b7:8e:4a:9b:55:97:09:bb:9f:d4:84:
                    0d:cc:73:b7:b8:83:5b:47:ec:bd:bb:2a:a8:f8:78:
                    cf:c9:4a:43:4f:2d:bb:1a:ff:98:33:ae:55:98:fb:
                    5e:fd:c0:e3:e9:77:87:9c:ef:18:14:50:25:1b:e6:
                    87:3f:30:a7:38:29:7a:ca:67:3c:4a:71:a3:90:b3:
                    17:a3:a8:64:54:c4:13:86:4b:a7:15:f1:0f:5f:aa:
                    f8:ed:0b:bd:bb:fd:28:dc:a4:7f:50:8c:fe:85:d9:
                    de:00:c8:82:61:8b:d8:29:18:bf:1d:af:f0:fe:90:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:3C:25:F3:F9:26:61:93:83:95:00:77:6A:FF:48:2F:59:20:6A
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:a5:ff:f8:09:e2:0b:0e:ff:cf:a3:14:89:a8:be:2c:65:
         a8:02:2b:42:5a:92:78:c1:0d:90:e7:5b:73:33:ee:20:98:86:
         9b:7a:22:88:35:b0:b2:ea:50:c4:dd:06:66:a5:21:c6:1e:1e:
         af:52:ef:9a:ca:d2:ac:8b:ba:75:22:c1:8c:79:67:b9:c8:c1:
         4d:46:55:7b:55:8e:89:d6:b8:fc:50:98:f8:0e:e1:61:de:a5:
         49:ee:98:d6:2c:79:a5:2d:a5:34:32:ae:66:24:c9:ea:2e:32:
         fc:42:8d:b4:4f:77:74:87:46:30:2b:d2:d1:44:14:93:b5:3f:
         26:ff:eb:09:7c:a7:0c:a9:6a:f7:dd:cd:7c:e4:e7:95:61:6a:
         a9:75:7b:a6:0d:c1:3b:15:14:45:34:6c:91:4a:a5:42:33:aa:
         df:70:f5:35:83:f9:6a:e9:07:01:15:26:6a:8f:4a:bd:0b:c8:
         f4:5a:ae:78:39:98:7f:56:10:9d:fd:8a:0a:ad:8c:6d:97:fd:
         30:69:93:db:cd:23:98:e5:fc:4f:64:23:56:85:a5:6b:78:ed:
         c2:16:5d:4a:72:e5:ee:18:8e:70:9a:de:a6:88:d3:f5:64:af:
         fa:2b:78:9b:e0:a9:80:e8:8d:03:66:6a:c7:03:c8:6e:6a:db:
         3a:d8:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:48 2025 by rpki-client