Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33392e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Ib4u10ej3ojM0hrxVTrNcsTdISnpeRxh80CLPBsZtT0=
Subject key identifier:   C3:FB:32:BB:CF:1F:59:9C:9B:FD:07:8B:13:88:4B:F5:42:CB:D7:6E
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6E5337D95FE30FB91B967033ACBEAEF7675B0666
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:05 +0000
ROA not before:           Wed 03 Apr 2024 18:26:05 +0000
ROA not after:            Wed 02 Apr 2025 18:31:05 +0000
asID:                     4230
IP address blocks:        201.39.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:37:d9:5f:e3:0f:b9:1b:96:70:33:ac:be:ae:f7:67:5b:06:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:2b:af:1d:f0:da:06:b4:e0:21:28:0b:59:
                    c6:f1:5a:06:3e:76:70:2b:e9:11:b5:79:ff:32:a3:
                    92:79:ea:b0:54:12:2e:62:98:a9:34:8c:63:7c:d3:
                    87:9b:3c:6c:f0:f1:31:87:3e:67:43:a1:6e:b8:b5:
                    43:77:38:19:3a:6d:d8:f8:b0:0d:8e:4c:82:8a:b4:
                    c4:f5:27:7a:eb:0a:54:0a:94:76:95:0b:e2:a3:7b:
                    92:fc:46:39:c4:fd:cf:a0:b1:39:02:c4:fc:69:b0:
                    19:c4:13:38:84:71:85:55:25:be:cd:0d:a9:4e:14:
                    19:f9:00:70:e9:b3:9b:17:d4:ba:b6:f4:fc:1b:50:
                    2f:95:5c:71:6a:18:1c:08:d6:bb:ce:09:f1:1c:d1:
                    98:64:6f:a2:33:cf:89:9b:aa:fe:37:70:97:5c:4b:
                    0c:69:e0:98:0b:49:d6:51:14:9d:ec:65:ff:ab:a6:
                    41:4b:f4:f4:2a:9b:93:37:5a:e6:86:ac:03:15:34:
                    5a:0e:50:59:3c:0e:6d:b1:73:b2:cb:12:d6:aa:b1:
                    49:62:68:f7:75:0e:70:e2:3e:55:43:2c:58:84:ee:
                    45:a8:a4:43:07:c3:bb:cc:09:1d:5f:fb:86:d4:2d:
                    29:be:62:40:69:ff:6e:fd:4b:f0:29:5f:3c:1c:f4:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:32:BB:CF:1F:59:9C:9B:FD:07:8B:13:88:4B:F5:42:CB:D7:6E
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e33392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:80:ac:be:61:c6:4a:da:e0:35:4a:23:8e:b4:d4:aa:22:
         e7:cb:01:a5:dc:73:1a:59:ca:32:2f:b2:87:6e:47:0c:bd:27:
         75:75:99:40:a8:6e:04:68:b6:f1:46:94:48:0f:43:d5:b6:08:
         38:39:88:46:26:f3:bb:ff:5f:38:db:4a:7a:5b:de:3f:50:f3:
         96:4e:2d:d5:12:51:83:fc:89:b2:53:eb:d3:8a:b4:6c:a9:65:
         6c:ac:96:8f:95:87:77:9f:f7:84:c7:76:40:31:a7:84:7a:cd:
         94:e5:09:76:a6:ce:aa:e0:ca:ad:5e:be:6f:f8:7d:b1:5a:fa:
         6a:b5:92:de:80:e2:88:d5:69:57:01:d7:32:e2:13:ff:bc:ab:
         85:b6:a4:0e:36:7a:5b:04:ac:68:a1:57:f5:eb:1a:aa:53:08:
         0b:df:3d:aa:61:fc:74:4a:49:f2:7f:fb:fb:0e:c4:63:58:db:
         b3:44:e6:26:08:74:e5:81:2d:78:77:91:05:25:e9:a1:10:6e:
         fe:ea:ea:bd:18:c0:d0:c4:80:64:36:ed:a3:eb:52:3a:b9:42:
         08:56:84:a9:8c:d4:e6:39:2a:2b:23:f7:8e:2a:d8:34:9d:e9:
         bd:84:17:87:25:08:1f:1e:e4:ed:5a:cb:4f:89:68:7a:42:55:
         23:1f:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org