Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          WECwBiswqBv6RhPQAdWG6PHD6IeKzQAePj7Dp5wUMoA=
Subject key identifier:   0D:D0:54:69:D5:C0:0A:CD:25:A6:6A:C9:C3:0D:B1:73:7A:D7:6F:CA
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6144478911CF4A749B7BB7868341CB4FB50F4FD0
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     4230
IP address blocks:        200.254.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:44:47:89:11:cf:4a:74:9b:7b:b7:86:83:41:cb:4f:b5:0f:4f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fb:24:64:f3:aa:0f:e4:b9:88:d8:6c:89:ac:
                    2c:b4:20:94:fe:92:46:06:63:f5:cc:1a:3a:56:0a:
                    2d:1b:c3:32:e7:7d:2b:ac:e8:67:c9:d6:b5:85:54:
                    e8:d8:fe:6b:f8:53:87:30:9b:a2:13:fb:68:9c:ec:
                    4d:e1:96:bc:61:0f:aa:9e:3a:bf:27:a0:29:c2:01:
                    21:5f:96:f3:92:1d:a2:c6:92:23:16:e1:27:5a:73:
                    92:57:7b:43:82:92:0f:2b:1f:8f:dc:61:f4:33:6c:
                    30:30:2f:f9:f6:63:af:68:36:04:16:54:ac:a6:62:
                    d2:2d:fd:64:5d:1a:3a:84:ac:65:04:ec:4d:2a:48:
                    70:07:c8:98:92:79:02:f4:96:ee:2a:da:6c:7a:47:
                    b6:2f:bf:34:e0:a0:31:b7:d6:ce:d6:28:f3:18:44:
                    dd:95:95:c2:56:a8:fd:57:13:ea:20:6e:c9:d4:b4:
                    b3:97:d5:8a:0c:9e:d8:2b:c9:1a:79:b3:f8:39:d7:
                    9c:b0:f5:8e:d3:83:90:f6:a1:03:ab:47:44:23:cc:
                    34:05:a4:64:a0:aa:86:13:e7:70:7f:03:54:d9:f3:
                    6f:ef:39:f9:3b:9d:83:96:65:92:15:63:7c:97:33:
                    06:d0:03:75:ff:34:23:bd:03:72:d8:d2:cb:d1:b2:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D0:54:69:D5:C0:0A:CD:25:A6:6A:C9:C3:0D:B1:73:7A:D7:6F:CA
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.254.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:40:e6:84:ee:8e:84:c4:67:36:c8:f2:aa:e9:27:29:47:de:
         0d:e4:40:5b:ce:78:09:56:cb:60:13:33:c1:92:49:c5:b1:53:
         9a:3e:cb:23:9c:e2:de:47:ad:4e:50:b2:36:d5:80:10:d5:93:
         f2:11:fe:7d:62:2f:1e:c6:b4:e2:3a:92:fb:ba:ea:d3:1b:6d:
         35:a9:bf:20:a5:e3:13:62:f2:14:e6:57:ec:38:6a:f4:9e:da:
         f7:9d:b3:5d:e0:95:a7:77:b8:3c:14:2f:7b:6d:cf:17:bb:fb:
         a1:1c:c5:9d:99:21:1b:7c:64:89:11:2b:4b:cd:0d:4a:27:42:
         a3:9e:5c:89:d6:c1:53:0a:f2:41:07:4a:25:56:04:3c:ab:79:
         fd:f0:56:c9:59:3f:f2:5b:c0:9c:06:3c:90:f9:b7:2a:f6:52:
         4e:f6:01:bb:6a:50:17:89:46:ce:6d:14:43:0a:80:b6:55:64:
         71:b8:e8:27:63:2b:17:7b:2c:26:ff:43:8b:ee:c3:32:02:a3:
         d0:5b:6a:85:c9:91:41:b7:ae:26:d2:20:70:07:8c:81:59:7e:
         80:ac:06:93:29:d6:bc:76:5c:3b:79:4d:47:8c:e1:e6:77:ca:
         fa:52:0b:42:bd:5e:fe:ba:7b:9b:c7:c7:1f:7b:f3:46:73:04:
         36:b6:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org