Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          TULFqgnGGkUR53J5OSMKnGW8QsU4Mht2swM85/EQ/m0=
Subject key identifier:   FE:83:34:97:EF:79:89:6A:95:C6:CA:B0:A8:EF:95:50:7C:E7:F9:08
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       47F3BEE4992E8D0698341C4A644A3C07F03BE4DC
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     4230
IP address blocks:        200.252.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f3:be:e4:99:2e:8d:06:98:34:1c:4a:64:4a:3c:07:f0:3b:e4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject: CN=3082010A0282010100B7E5C7A2F35F762B39A452B28910D7A75644FE793AE0D19A2FC652EAF18737C821C5D148EDD313F28616D2317C63DAAA70C42B830780DC4F2FED96FB15F5A746D5EFAF1D992BB28A8BC4D186049F53B2A39A40258ED949ACC0B2690FB433C12665E581F59F96B195F2C5659FDA4A570E5D22BD05A299D805083245E9A012E3BE0702859E43E956FEBD8529968C2302D512EA8A127D446F2BD08C342E0D2B0FF802C61BA04A20799DFC9B47631F5D8AA0AD715D4260668B30B13A4759D6EFB28560551CCA600039DA1655A5D12F8850187E2765F3577640DFC8C7AC724A45AE0C2ABA95D5710347548F398506BB2E12ED493193EE2BD1A56BEBC73495A7F6A91B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:c7:a2:f3:5f:76:2b:39:a4:52:b2:89:10:
                    d7:a7:56:44:fe:79:3a:e0:d1:9a:2f:c6:52:ea:f1:
                    87:37:c8:21:c5:d1:48:ed:d3:13:f2:86:16:d2:31:
                    7c:63:da:aa:70:c4:2b:83:07:80:dc:4f:2f:ed:96:
                    fb:15:f5:a7:46:d5:ef:af:1d:99:2b:b2:8a:8b:c4:
                    d1:86:04:9f:53:b2:a3:9a:40:25:8e:d9:49:ac:c0:
                    b2:69:0f:b4:33:c1:26:65:e5:81:f5:9f:96:b1:95:
                    f2:c5:65:9f:da:4a:57:0e:5d:22:bd:05:a2:99:d8:
                    05:08:32:45:e9:a0:12:e3:be:07:02:85:9e:43:e9:
                    56:fe:bd:85:29:96:8c:23:02:d5:12:ea:8a:12:7d:
                    44:6f:2b:d0:8c:34:2e:0d:2b:0f:f8:02:c6:1b:a0:
                    4a:20:79:9d:fc:9b:47:63:1f:5d:8a:a0:ad:71:5d:
                    42:60:66:8b:30:b1:3a:47:59:d6:ef:b2:85:60:55:
                    1c:ca:60:00:39:da:16:55:a5:d1:2f:88:50:18:7e:
                    27:65:f3:57:76:40:df:c8:c7:ac:72:4a:45:ae:0c:
                    2a:ba:95:d5:71:03:47:54:8f:39:85:06:bb:2e:12:
                    ed:49:31:93:ee:2b:d1:a5:6b:eb:c7:34:95:a7:f6:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:34:97:EF:79:89:6A:95:C6:CA:B0:A8:EF:95:50:7C:E7:F9:08
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:d3:10:27:d6:1e:11:73:a8:54:b7:02:f6:bd:ff:37:e7:c2:
         a7:21:d4:02:ae:78:60:44:78:bc:8f:eb:63:78:be:93:ef:64:
         2b:21:7a:79:88:b3:53:88:b4:b8:c5:57:6d:f0:a4:59:e9:5b:
         31:b1:48:8c:cc:02:4e:61:4c:4e:6e:c7:e4:fc:2c:53:d4:bc:
         21:e5:a6:8a:57:b0:23:f8:1e:f1:1b:c2:d9:21:77:3a:da:57:
         a6:bf:21:05:fd:f1:da:72:62:0a:9c:ca:c1:3a:24:0b:84:23:
         93:fe:94:30:47:f4:b3:eb:76:b7:42:66:97:65:6c:2a:be:c3:
         24:1c:08:86:1a:98:a6:a7:b9:c0:a8:f1:70:13:ca:5e:a0:e4:
         9b:3a:85:74:98:c5:50:b0:92:da:e2:51:91:58:ff:12:2b:72:
         3a:26:0f:bb:95:03:a9:39:7b:77:58:8f:be:f1:38:ed:7e:70:
         cc:ee:af:1b:7e:35:ae:c5:fd:39:36:58:09:c0:bf:10:cf:b6:
         36:57:9d:72:f5:25:14:5e:65:f9:05:93:c9:33:6a:b6:15:9c:
         cd:9a:cc:78:60:15:a7:3c:67:20:8b:fc:c0:0b:46:c8:a7:68:
         22:22:e2:24:23:7f:8e:8e:28:cc:b6:3a:39:51:ca:cf:21:7f:
         ea:4e:be:38
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUR/O+5JkujQaYNBxKZEo8B/A75NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MTJaFw0yNTA0MDIxODMxMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdFNUM3QTJGMzVGNzYyQjM5
QTQ1MkIyODkxMEQ3QTc1NjQ0RkU3OTNBRTBEMTlBMkZDNjUyRUFGMTg3MzdDODIx
QzVEMTQ4RUREMzEzRjI4NjE2RDIzMTdDNjNEQUFBNzBDNDJCODMwNzgwREM0RjJG
RUQ5NkZCMTVGNUE3NDZENUVGQUYxRDk5MkJCMjhBOEJDNEQxODYwNDlGNTNCMkEz
OUE0MDI1OEVEOTQ5QUNDMEIyNjkwRkI0MzNDMTI2NjVFNTgxRjU5Rjk2QjE5NUYy
QzU2NTlGREE0QTU3MEU1RDIyQkQwNUEyOTlEODA1MDgzMjQ1RTlBMDEyRTNCRTA3
MDI4NTlFNDNFOTU2RkVCRDg1Mjk5NjhDMjMwMkQ1MTJFQThBMTI3RDQ0NkYyQkQw
OEMzNDJFMEQyQjBGRjgwMkM2MUJBMDRBMjA3OTlERkM5QjQ3NjMxRjVEOEFBMEFE
NzE1RDQyNjA2NjhCMzBCMTNBNDc1OUQ2RUZCMjg1NjA1NTFDQ0E2MDAwMzlEQTE2
NTVBNUQxMkY4ODUwMTg3RTI3NjVGMzU3NzY0MERGQzhDN0FDNzI0QTQ1QUUwQzJB
QkE5NUQ1NzEwMzQ3NTQ4RjM5ODUwNkJCMkUxMkVENDkzMTkzRUUyQkQxQTU2QkVC
QzczNDk1QTdGNkE5MUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt+XHovNfdis5pFKyiRDXp1ZE/nk64NGaL8ZS6vGHN8ghxdFI7dMT
8oYW0jF8Y9qqcMQrgweA3E8v7Zb7FfWnRtXvrx2ZK7KKi8TRhgSfU7KjmkAljtlJ
rMCyaQ+0M8EmZeWB9Z+WsZXyxWWf2kpXDl0ivQWimdgFCDJF6aAS474HAoWeQ+lW
/r2FKZaMIwLVEuqKEn1EbyvQjDQuDSsP+ALGG6BKIHmd/JtHYx9diqCtcV1CYGaL
MLE6R1nW77KFYFUcymAAOdoWVaXRL4hQGH4nZfNXdkDfyMesckpFrgwqupXVcQNH
VI85hQa7LhLtSTGT7ivRpWvrxzSVp/apGwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FP6DNJfveYlqlcbKsKjvlVB85/kIMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNTMyMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPwwDQYJ
KoZIhvcNAQELBQADggEBAHjTECfWHhFzqFS3Ava9/zfnwqch1AKueGBEeLyP62N4
vpPvZCshenmIs1OItLjFV23wpFnpWzGxSIzMAk5hTE5ux+T8LFPUvCHlpopXsCP4
HvEbwtkhdzraV6a/IQX98dpyYgqcysE6JAuEI5P+lDBH9LPrdrdCZpdlbCq+wyQc
CIYamKanucCo8XATyl6g5Js6hXSYxVCwktriUZFY/xIrcjomD7uVA6k5e3dYj77x
OO1+cMzurxt+Na7F/Tk2WAnAvxDPtjZXnXL1JRReZfkFk8kzarYVnM2azHhgFac8
ZyCL/MALRsinaCIi4iQjf46OKMy2OjlRys8hf+pOvjg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org