Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33382e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          zz1dqnrS7GPqTi2AOlBcpfMG0LKVbRNI1yezhe9Ov7k=
Subject key identifier:   7F:95:9A:F0:C7:5E:77:3F:E4:6F:FE:61:02:57:CB:7C:C9:BB:B1:97
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2896B4374FABEB2D3530B518C3EA8927189D7705
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     4230
IP address blocks:        201.38.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:96:b4:37:4f:ab:eb:2d:35:30:b5:18:c3:ea:89:27:18:9d:77:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:57:2d:95:4d:d9:1f:ee:1b:2e:4c:98:1b:be:
                    bd:20:ea:8e:9b:f1:41:5b:b6:6d:8a:9d:e1:8e:2a:
                    44:48:1c:44:fe:43:df:9d:4f:b6:91:23:0d:51:aa:
                    aa:e0:c5:ac:e3:70:67:b6:e3:45:a5:00:7b:1d:5f:
                    8c:e8:56:c6:5c:00:5a:cd:79:05:fc:87:bd:ab:9a:
                    13:5c:27:ec:4c:94:54:6f:df:b0:7a:96:57:ea:93:
                    a4:e1:64:66:12:8a:10:02:a7:71:06:0e:fd:e2:b9:
                    ef:f6:67:59:ed:90:4b:d4:b6:ca:5a:b6:67:8e:37:
                    18:7b:4e:ac:fd:d8:89:74:aa:47:b6:c4:65:cc:62:
                    36:67:f8:86:47:60:17:92:de:2f:15:f6:d0:b6:02:
                    f5:41:b3:cb:4e:df:43:3a:c6:7e:99:66:aa:cb:fc:
                    55:47:bd:d8:62:51:cd:67:2f:91:bd:9b:d6:36:68:
                    8f:ac:3b:cc:d7:1c:5c:cc:32:28:82:91:a1:e7:83:
                    f2:c5:e2:5d:89:ea:5a:a1:92:01:4c:f4:04:f6:87:
                    d2:61:fc:df:dc:5e:95:5c:07:59:0d:61:0b:28:7d:
                    3f:75:9e:52:d3:dc:20:cb:30:af:73:2c:46:c8:3c:
                    8e:6e:0f:30:35:63:39:eb:e2:8e:c4:38:64:57:f3:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:95:9A:F0:C7:5E:77:3F:E4:6F:FE:61:02:57:CB:7C:C9:BB:B1:97
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:c0:8e:89:4f:55:f7:d9:89:17:22:80:8c:c8:47:14:6b:aa:
         19:0c:53:04:ad:f9:e2:01:c7:d2:4d:b9:a4:db:6a:95:89:55:
         f3:85:42:34:76:e0:1d:d7:4b:da:84:ea:91:dd:ba:12:ed:ef:
         bc:a7:91:62:0a:34:bd:4c:4d:e7:87:c3:80:6a:6f:1e:5e:1c:
         a9:4a:35:bf:dc:40:bc:1f:09:ff:dc:92:63:c0:ed:c1:41:a6:
         02:c9:fe:49:5e:4b:ab:0e:2d:c3:42:62:92:b2:66:6b:26:c0:
         a6:e2:fa:0f:6e:b4:3f:e2:83:44:c9:77:d8:95:15:5e:d6:bb:
         3d:e1:00:52:12:d0:d8:e5:84:c8:c3:6f:59:bf:b0:b3:c1:2c:
         8d:4d:7a:3c:8b:4e:78:92:dd:33:27:0c:a9:39:3a:a2:6d:ee:
         77:d2:08:66:07:af:f4:38:5a:94:a9:59:80:97:e6:68:28:b8:
         bf:b8:97:d5:6d:1f:83:66:df:cb:1d:f7:e4:13:bb:5d:03:ba:
         13:4e:d6:1a:f0:6c:6e:41:28:24:ee:f6:6b:cb:f6:c8:12:62:
         86:c1:8a:8a:e0:a6:cc:ea:96:c5:f2:c0:6b:1c:4f:5b:6b:0d:
         20:ac:1e:9f:59:dc:61:63:69:75:c9:7c:88:66:2f:27:57:02:
         fa:91:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:08 2025 by rpki-client