Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          FTrKlFBzO1RgLUP73WgasZS2A9DWw1QIS4S5PzMjzEY=
Subject key identifier:   E7:40:86:CB:36:6A:A9:5A:D1:4E:94:22:35:29:C5:A6:99:3D:08:7B
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       67E36CC33F58CB1D988778A0406BC223E2139853
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     4230
IP address blocks:        200.250.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e3:6c:c3:3f:58:cb:1d:98:87:78:a0:40:6b:c2:23:e2:13:98:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject: CN=3082010A02820101009BCF6869800370CB2E8B20E60D56F4E3165CFD24BEB5AC6AC6107C876F9319266510C43ED1E2ACC0F1C3ADDB5B8993A0261D733964E4DD0DB05E6156EFD3F13875199F38C560EFF993BCC66222B252987363945A27DB4B55BFB98369C8474F6ED5CD8D660FE6837D42A93C9114EC1A7DAE5B10DEB3F198C11ABD37188A824E970D252E8DE2E974AE008470C037E7A583CD9C87CA194A5AA3B72339EC7924B98C42D8BB48599D253B4BAE2A59E3DB40C9BAEE7E11380B8F92C6021EF43B9E530BA3B6DA558AEE99F52415E65F0100EE01D60EC50FD4BD38CC23537920E88F05F7357FD73B5E0AF070A6FFEBE063775D92B7B6614BFEE28E732D9E95566181D5830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:68:69:80:03:70:cb:2e:8b:20:e6:0d:56:
                    f4:e3:16:5c:fd:24:be:b5:ac:6a:c6:10:7c:87:6f:
                    93:19:26:65:10:c4:3e:d1:e2:ac:c0:f1:c3:ad:db:
                    5b:89:93:a0:26:1d:73:39:64:e4:dd:0d:b0:5e:61:
                    56:ef:d3:f1:38:75:19:9f:38:c5:60:ef:f9:93:bc:
                    c6:62:22:b2:52:98:73:63:94:5a:27:db:4b:55:bf:
                    b9:83:69:c8:47:4f:6e:d5:cd:8d:66:0f:e6:83:7d:
                    42:a9:3c:91:14:ec:1a:7d:ae:5b:10:de:b3:f1:98:
                    c1:1a:bd:37:18:8a:82:4e:97:0d:25:2e:8d:e2:e9:
                    74:ae:00:84:70:c0:37:e7:a5:83:cd:9c:87:ca:19:
                    4a:5a:a3:b7:23:39:ec:79:24:b9:8c:42:d8:bb:48:
                    59:9d:25:3b:4b:ae:2a:59:e3:db:40:c9:ba:ee:7e:
                    11:38:0b:8f:92:c6:02:1e:f4:3b:9e:53:0b:a3:b6:
                    da:55:8a:ee:99:f5:24:15:e6:5f:01:00:ee:01:d6:
                    0e:c5:0f:d4:bd:38:cc:23:53:79:20:e8:8f:05:f7:
                    35:7f:d7:3b:5e:0a:f0:70:a6:ff:eb:e0:63:77:5d:
                    92:b7:b6:61:4b:fe:e2:8e:73:2d:9e:95:56:61:81:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:40:86:CB:36:6A:A9:5A:D1:4E:94:22:35:29:C5:A6:99:3D:08:7B
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:82:1e:d8:63:8b:59:5f:4f:78:2c:7c:ea:79:53:9f:d4:28:
         a3:55:92:10:04:88:72:ec:13:f9:17:bd:61:b1:4d:ac:33:ac:
         69:f5:dd:08:eb:5b:7c:9f:64:95:45:5c:6f:ba:17:f8:c5:12:
         f8:11:0c:06:dc:4d:27:ca:5d:3e:8c:e4:b8:01:af:cc:88:bd:
         d0:ad:1e:45:b5:37:e1:2b:94:a5:18:1d:bb:ac:14:65:16:52:
         48:2d:5e:96:35:87:01:9c:17:d8:08:88:5e:44:2c:0a:37:98:
         cb:0d:d6:d2:88:e1:62:a2:d6:62:07:b9:bc:a1:67:69:d2:e4:
         73:8d:ed:36:c6:e9:dc:e8:cc:8c:40:30:79:15:4b:30:b0:1b:
         7f:43:21:8d:51:ee:48:a2:b5:ea:a0:d4:c8:08:5b:be:2c:14:
         87:2f:74:e8:e5:b1:fa:32:cd:4b:e9:89:5d:4b:38:cd:23:26:
         d9:1f:2d:10:50:e1:e1:0e:a5:54:f7:86:c0:f0:3a:3f:20:fc:
         82:25:bb:95:09:e7:e9:bb:0f:be:f5:2a:db:e7:0e:90:44:77:
         06:66:3b:5d:2f:48:39:13:d6:af:b5:38:18:6f:4c:88:3a:90:
         48:68:72:8d:90:ca:1a:e1:b9:88:8a:83:fa:3a:4b:86:50:53:
         39:03:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org