Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Hzhvlf/EIjgGOG7LZArfVU3R5a1u5SaZ1nbVTqDS7sA=
Subject key identifier:   A6:A8:92:1B:F2:70:F5:47:63:D3:FF:D7:80:7E:A2:45:1C:1C:61:55
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       4D294223417D256D6F8014E8D7D9AAB43F80CDB3
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     4230
IP address blocks:        200.251.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:29:42:23:41:7d:25:6d:6f:80:14:e8:d7:d9:aa:b4:3f:80:cd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=3082010A0282010100BE404D6340D9F33E9859F597791933075656E68BDE436F1D2A550ADC4724FC84F9E1CB149166A7F356DD83E789F1D1EB6E13EDC8E8C0036B8D7737AB5BA9CCCD1E450F55CE533F3267E388C8168E31728EE918747EA373776475D71E6A962114D2E13E0A5BEF609454B44C536EC0F99FE0FF34769F55D7EB38D3E3818753942C5BE4CD301B56263A8B2A0A4016E95F99F1DBF880406DE573789EE6DA9D7E16C51762402C55CBE24C8FB8BB05346C8A3FA21419A4FDE5BE00B99CDF920366B4B7F43C76C7B6EEADF495A21589DF200FD8F0B8FB0106522540A58AF6B3DD43C2BA4094648A6AB1FE2B72E8045AC5147D21BC58C2C31E5CFD3062F627F797D600650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:4d:63:40:d9:f3:3e:98:59:f5:97:79:19:
                    33:07:56:56:e6:8b:de:43:6f:1d:2a:55:0a:dc:47:
                    24:fc:84:f9:e1:cb:14:91:66:a7:f3:56:dd:83:e7:
                    89:f1:d1:eb:6e:13:ed:c8:e8:c0:03:6b:8d:77:37:
                    ab:5b:a9:cc:cd:1e:45:0f:55:ce:53:3f:32:67:e3:
                    88:c8:16:8e:31:72:8e:e9:18:74:7e:a3:73:77:64:
                    75:d7:1e:6a:96:21:14:d2:e1:3e:0a:5b:ef:60:94:
                    54:b4:4c:53:6e:c0:f9:9f:e0:ff:34:76:9f:55:d7:
                    eb:38:d3:e3:81:87:53:94:2c:5b:e4:cd:30:1b:56:
                    26:3a:8b:2a:0a:40:16:e9:5f:99:f1:db:f8:80:40:
                    6d:e5:73:78:9e:e6:da:9d:7e:16:c5:17:62:40:2c:
                    55:cb:e2:4c:8f:b8:bb:05:34:6c:8a:3f:a2:14:19:
                    a4:fd:e5:be:00:b9:9c:df:92:03:66:b4:b7:f4:3c:
                    76:c7:b6:ee:ad:f4:95:a2:15:89:df:20:0f:d8:f0:
                    b8:fb:01:06:52:25:40:a5:8a:f6:b3:dd:43:c2:ba:
                    40:94:64:8a:6a:b1:fe:2b:72:e8:04:5a:c5:14:7d:
                    21:bc:58:c2:c3:1e:5c:fd:30:62:f6:27:f7:97:d6:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:92:1B:F2:70:F5:47:63:D3:FF:D7:80:7E:A2:45:1C:1C:61:55
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:db:54:33:7a:dc:d6:f5:6f:c6:dc:92:54:49:c0:14:04:
         a9:55:78:68:94:5f:d9:17:a3:e4:b4:97:63:d8:b2:c7:56:2e:
         32:a9:6e:ae:f6:67:f0:1e:94:63:af:6c:cf:b1:be:95:f6:eb:
         c2:ac:d2:1f:9e:56:50:51:93:03:a2:96:8e:92:fd:e3:fa:c5:
         57:49:ce:52:38:5c:42:67:18:9e:5c:01:50:88:09:1c:60:db:
         10:cf:76:9a:52:2b:e4:2b:80:13:c0:82:64:32:bb:9c:31:03:
         42:dd:c5:2c:09:e5:60:53:75:7f:78:4b:20:57:e9:30:17:a5:
         42:35:6b:93:84:15:59:1b:e4:8b:d6:d2:57:0c:1a:9a:1d:2a:
         dd:94:cb:91:9a:a2:d0:42:e0:31:72:97:fb:7d:e7:9c:c5:e4:
         83:30:f7:b9:63:82:b2:4c:4d:66:48:93:fe:6a:fa:59:7b:87:
         65:20:67:34:fa:17:76:23:f7:5f:22:ed:af:36:17:90:36:93:
         b8:0c:3f:d7:5d:cd:69:d6:14:7e:ba:60:ca:eb:e9:be:62:47:
         4e:ee:b0:66:4a:64:42:0d:0b:8d:21:5d:79:95:43:ca:4c:11:
         82:27:ee:ec:9a:09:b7:e0:8b:50:94:67:9c:82:0b:5e:b9:03:
         dd:db:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org