Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Dfe2Durss/GLH+GyfdJK4I/+RLapUsfXKVKTFAUcddU=
Subject key identifier:   BB:1E:4C:22:85:62:39:FE:F9:A1:17:72:31:5F:50:98:D7:6C:F9:77
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       78F74CF2EE70999E049D127EEDF61C71B3C661F0
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     4230
IP address blocks:        200.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f7:4c:f2:ee:70:99:9e:04:9d:12:7e:ed:f6:1c:71:b3:c6:61:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:55:20:a2:86:61:f8:39:39:af:dc:06:bd:
                    b3:0e:0d:ab:af:2b:a1:f7:c3:e9:c7:c0:07:20:c7:
                    fe:ce:e4:ca:99:da:e3:be:ca:aa:fb:1f:22:9d:07:
                    46:f0:fa:24:48:a2:83:7c:ba:d8:86:e3:9a:63:61:
                    0b:6b:cd:76:ab:99:f6:6d:84:a5:d6:91:5b:d0:65:
                    06:98:c2:81:f9:7a:8c:f7:4b:e8:81:8d:cb:00:be:
                    5f:4d:f3:28:fa:8e:90:50:59:58:8a:b7:dd:fa:ed:
                    ba:7f:51:03:00:65:a4:35:77:24:62:fe:8d:57:c4:
                    6c:cd:2f:48:14:25:cc:0b:8a:80:1b:4c:c2:90:23:
                    70:f3:52:41:df:fa:93:5e:3f:f2:f6:5b:fa:88:92:
                    f9:ae:39:73:61:ac:b9:31:5c:6a:97:9a:3e:7d:3f:
                    9c:14:cf:1d:c7:ab:97:88:7c:b2:f1:8a:ba:5b:a4:
                    68:80:a3:e5:36:8b:f5:97:26:e7:48:82:8e:bb:40:
                    6e:73:23:2c:78:a7:0c:ea:5b:f6:18:bb:c4:58:8a:
                    d6:b8:29:07:9d:f3:8a:d9:78:6d:00:59:e8:56:18:
                    cd:af:66:ab:35:34:9e:38:d3:c7:8b:4a:77:6e:a3:
                    5a:6f:db:59:fa:7a:b6:bf:f1:8e:c2:e7:30:98:bd:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:4C:22:85:62:39:FE:F9:A1:17:72:31:5F:50:98:D7:6C:F9:77
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:4f:a4:b6:d0:59:30:17:8f:b5:af:10:37:d3:9c:06:00:
         8e:b9:56:4f:80:87:81:7c:c3:af:52:14:6e:da:a0:87:a8:98:
         e4:e6:51:63:f4:5a:86:6e:49:bd:8d:f1:93:49:cf:ee:90:ee:
         04:05:45:fa:f2:be:73:ce:03:57:fe:3d:ad:a1:50:a0:cd:eb:
         bb:11:02:84:1b:c0:d6:ac:c3:10:9a:72:a8:16:5f:02:44:86:
         2f:a3:48:52:eb:db:42:2c:8b:65:af:b9:48:e5:12:a5:ee:47:
         ba:b5:6c:58:df:68:e0:26:a7:63:2f:87:07:1d:92:ad:f4:87:
         56:08:f6:6f:45:bb:e6:b2:df:7d:e7:eb:a7:a4:cb:a8:19:fa:
         de:be:72:f3:d3:97:65:85:be:63:16:5e:17:b0:1f:ef:e8:d5:
         31:8f:04:df:21:18:7f:b9:6d:76:7a:78:63:ef:79:fd:1b:df:
         54:02:1f:d1:96:fb:08:c9:21:41:50:b2:94:05:ec:22:bc:26:
         88:52:42:f0:93:11:0f:62:f1:2d:b9:4b:1e:55:77:de:81:8f:
         8b:b2:ba:27:55:3e:8b:23:36:96:6e:2e:07:f6:35:bd:ed:97:
         2c:3b:20:c5:25:d1:00:14:da:94:51:1d:db:26:f3:f1:11:5e:
         fa:f6:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:07 2025 by rpki-client