Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ng8ooC256GXNegN/OAVUQhfHhAu0GRXePwAVzxOsn84=
Subject key identifier:   68:28:44:5C:07:9C:71:79:67:F4:2F:70:DA:75:05:4A:C1:6F:71:FF
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       26D274A67E9770C150D3927418796F791883E7AF
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     4230
IP address blocks:        200.255.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d2:74:a6:7e:97:70:c1:50:d3:92:74:18:79:6f:79:18:83:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=3082010A0282010100A9A4373FE8C3B56DCA5CEB31767E8B243F7C0588976265F18D617A3D47FE8865CB6DC0F5FD2E93F1509E88ACFDDA2E68D9A2B2A4637017BDEA6F65D5E113BF58328117EA59C5A31F3170F077449FAFC514BE17C4A65D14C9EAA6CAFC5AF0518DCFC73AB7446FB981AB3BFF2299A14FE101AF5040CC58E25AEFBC4847B9E19CF9E51A12D3C616089DCB37742E94D969F1ECFA86FD49C717DBD85E83A5EEE621D60C17F2968747DF8C2B9620E98ABD8BF16922A61C44B586538A1CCFBCA83415272B445438DF68EBE64D1BE9C6C8BF0E68A37757D703A1D2063B274B6EED3B6AAFBA20F964D828D2FAF26569766EA4D02BB286BF3FF153E2A2EEE8F1B52620BF070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:37:3f:e8:c3:b5:6d:ca:5c:eb:31:76:7e:
                    8b:24:3f:7c:05:88:97:62:65:f1:8d:61:7a:3d:47:
                    fe:88:65:cb:6d:c0:f5:fd:2e:93:f1:50:9e:88:ac:
                    fd:da:2e:68:d9:a2:b2:a4:63:70:17:bd:ea:6f:65:
                    d5:e1:13:bf:58:32:81:17:ea:59:c5:a3:1f:31:70:
                    f0:77:44:9f:af:c5:14:be:17:c4:a6:5d:14:c9:ea:
                    a6:ca:fc:5a:f0:51:8d:cf:c7:3a:b7:44:6f:b9:81:
                    ab:3b:ff:22:99:a1:4f:e1:01:af:50:40:cc:58:e2:
                    5a:ef:bc:48:47:b9:e1:9c:f9:e5:1a:12:d3:c6:16:
                    08:9d:cb:37:74:2e:94:d9:69:f1:ec:fa:86:fd:49:
                    c7:17:db:d8:5e:83:a5:ee:e6:21:d6:0c:17:f2:96:
                    87:47:df:8c:2b:96:20:e9:8a:bd:8b:f1:69:22:a6:
                    1c:44:b5:86:53:8a:1c:cf:bc:a8:34:15:27:2b:44:
                    54:38:df:68:eb:e6:4d:1b:e9:c6:c8:bf:0e:68:a3:
                    77:57:d7:03:a1:d2:06:3b:27:4b:6e:ed:3b:6a:af:
                    ba:20:f9:64:d8:28:d2:fa:f2:65:69:76:6e:a4:d0:
                    2b:b2:86:bf:3f:f1:53:e2:a2:ee:e8:f1:b5:26:20:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:28:44:5C:07:9C:71:79:67:F4:2F:70:DA:75:05:4A:C1:6F:71:FF
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:71:6a:d7:59:0e:ee:0d:c8:18:a0:65:66:4c:3a:ce:57:da:
         c1:de:db:7a:0a:40:88:05:46:bf:33:6e:6c:d5:aa:d3:1a:96:
         47:9a:e3:87:50:ff:be:ac:9e:71:7e:eb:43:96:a1:d8:ff:b3:
         e1:a5:22:5a:ff:a2:ae:fa:23:72:3a:cd:77:be:8e:58:6a:17:
         8d:04:87:47:28:d2:a7:1d:8b:09:a1:f1:75:b8:bf:ef:8a:ba:
         51:f5:5c:5f:ca:c5:65:37:c5:06:2f:ca:1d:26:fa:fb:1f:33:
         f7:22:62:59:97:1c:60:12:82:10:85:c7:f3:5c:ad:f3:02:9d:
         d9:e1:c6:2f:51:1c:b5:c2:79:ce:56:f5:21:66:e2:7e:6b:ff:
         c0:d7:cf:60:68:7c:5e:46:8d:b4:fe:70:db:b3:a8:bb:0e:b8:
         35:71:04:5d:c1:5b:54:75:2b:55:69:5e:60:09:a1:89:c1:a0:
         79:6e:f4:ec:02:16:52:59:9d:73:af:d0:1e:5c:1d:97:31:f2:
         3b:b7:cc:91:03:48:c6:6b:32:36:0d:ee:63:d7:6f:b2:5b:b5:
         4f:77:27:74:c7:62:f9:b2:b3:8f:90:6b:00:74:9f:08:2f:45:
         e8:f6:d2:91:ff:60:fe:fe:ea:43:e4:07:0a:15:08:d7:08:e6:
         38:dd:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org