Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          WBtGCq+2nAIvvIoERbyKJ2PrzoPCnYoJcnSuA4h7SL8=
Subject key identifier:   18:BE:5B:73:07:E9:99:BF:21:E4:74:4C:66:5F:CE:48:A5:CF:11:57
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2B1BAE1A262B3DB40ADC2FC0BAA805E1B79D701F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     4230
IP address blocks:        200.253.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1b:ae:1a:26:2b:3d:b4:0a:dc:2f:c0:ba:a8:05:e1:b7:9d:70:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=3082010A0282010100B1604A375B28D5EA88A2128A048206F9A7634365B935E08526227159F28833FA21216D3D0C31BB4509715F5BC665D76884452F31D85E057C8085FF9FBADA4C721161D3F41DC0FCC4655F2D8E377630899C29E1561266B36ED80F2AC9B484CDD8D472AE3807111F14C8E28EF23195D0DAAD52D442838B6EFA2A52A532C99A29E767743775AFEF4341121CC5B83905421AE69C1936D2ADAE677A726BDB1A731AD172926FA80D7AD99C61382C35105675097FBE5A6A848374E6A6575C362DFD90DD4632A31CA2FCF26475A08277850DAB8F1BDDFAA0E22796E6348DD1CCAA7FE69B6719B1940803007188B7E8DDA42DB8C8BB2FBF4C36F34A804EC75A6CA3004AE50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:4a:37:5b:28:d5:ea:88:a2:12:8a:04:82:
                    06:f9:a7:63:43:65:b9:35:e0:85:26:22:71:59:f2:
                    88:33:fa:21:21:6d:3d:0c:31:bb:45:09:71:5f:5b:
                    c6:65:d7:68:84:45:2f:31:d8:5e:05:7c:80:85:ff:
                    9f:ba:da:4c:72:11:61:d3:f4:1d:c0:fc:c4:65:5f:
                    2d:8e:37:76:30:89:9c:29:e1:56:12:66:b3:6e:d8:
                    0f:2a:c9:b4:84:cd:d8:d4:72:ae:38:07:11:1f:14:
                    c8:e2:8e:f2:31:95:d0:da:ad:52:d4:42:83:8b:6e:
                    fa:2a:52:a5:32:c9:9a:29:e7:67:74:37:75:af:ef:
                    43:41:12:1c:c5:b8:39:05:42:1a:e6:9c:19:36:d2:
                    ad:ae:67:7a:72:6b:db:1a:73:1a:d1:72:92:6f:a8:
                    0d:7a:d9:9c:61:38:2c:35:10:56:75:09:7f:be:5a:
                    6a:84:83:74:e6:a6:57:5c:36:2d:fd:90:dd:46:32:
                    a3:1c:a2:fc:f2:64:75:a0:82:77:85:0d:ab:8f:1b:
                    dd:fa:a0:e2:27:96:e6:34:8d:d1:cc:aa:7f:e6:9b:
                    67:19:b1:94:08:03:00:71:88:b7:e8:dd:a4:2d:b8:
                    c8:bb:2f:bf:4c:36:f3:4a:80:4e:c7:5a:6c:a3:00:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BE:5B:73:07:E9:99:BF:21:E4:74:4C:66:5F:CE:48:A5:CF:11:57
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.253.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:8e:1d:b7:24:e8:3e:ef:ce:54:72:06:aa:54:fd:35:f5:c4:
         fc:0c:e7:c1:88:06:a3:f1:bb:bb:57:64:52:10:27:9a:14:11:
         ab:54:a4:18:35:8b:7c:a8:35:ae:d8:4a:ab:f6:3c:54:8a:54:
         40:e9:40:59:43:d0:af:13:0b:f2:26:91:b0:3f:c0:e8:70:ab:
         e9:b9:91:d6:d2:54:9c:07:ee:7f:35:c5:e0:6f:5a:bb:83:9e:
         4f:80:00:d5:96:9a:98:25:1b:36:16:b7:7a:c3:2a:c4:c7:6d:
         bb:dd:80:c9:05:0c:4e:9b:95:02:97:da:03:d0:cc:ca:82:90:
         a0:b4:01:8c:f0:5d:84:2e:aa:9b:d0:aa:cd:39:b7:01:2a:ce:
         e9:b9:6e:8e:70:a9:6c:fe:0a:b9:2d:83:30:1e:74:52:20:c7:
         ac:be:e3:aa:c0:ae:3f:3a:67:23:36:44:06:fe:38:bd:61:2c:
         1e:3e:94:a1:39:66:7b:5d:7a:93:25:e0:50:e5:43:95:14:51:
         15:95:f5:3a:5c:7e:88:aa:09:d8:44:de:4d:c9:3b:8b:ac:af:
         34:f6:39:8d:f4:64:19:71:45:ef:fb:9e:2f:6e:52:9a:78:82:
         3e:a6:e9:25:f8:80:50:5c:ed:92:22:40:15:db:c1:12:f8:f2:
         0e:d4:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:01 2025 by rpki-client