Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34342e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e34342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          71yfjrPh9gH5+Sz6Rz8swF2a5AeilYh3sJ1UHPOBnyI=
Subject key identifier:   C8:6F:8F:90:A6:19:A3:E5:37:4C:92:6F:6F:2A:66:5F:4F:1B:97:E2
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       14ABE1EE1AA2AB813EA578E415A083997FC58D50
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     4230
IP address blocks:        201.44.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ab:e1:ee:1a:a2:ab:81:3e:a5:78:e4:15:a0:83:99:7f:c5:8d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:77:fc:b5:ef:6c:ea:e8:c3:e5:76:d9:3b:
                    6f:7e:a6:ed:53:10:bb:c5:c8:b9:e0:9c:4d:f2:2a:
                    b8:36:c7:22:7f:f1:0c:22:aa:d3:ee:db:3e:22:63:
                    38:3a:a8:39:8d:4b:9b:7f:31:9c:ff:0a:c1:fe:68:
                    06:34:7d:40:af:d7:f2:74:e4:e5:79:f2:9f:fb:08:
                    6e:1d:57:e8:a2:0a:4b:63:fb:17:8f:ef:15:cf:1d:
                    8b:52:ca:e2:5a:94:b8:f5:1d:e0:7d:df:42:54:a3:
                    84:01:fb:b8:71:c5:27:c9:6b:3b:d3:fe:ec:9d:7b:
                    c2:5f:d6:4b:c9:de:a6:77:a0:d2:fe:10:a3:42:d6:
                    f1:85:ca:f4:52:a5:03:be:0c:75:f7:c4:a4:37:5c:
                    f2:54:68:88:c5:34:69:1d:71:f6:39:9a:eb:3c:d3:
                    97:96:61:ab:03:31:0e:b2:8a:fb:82:53:10:4d:52:
                    d5:98:df:36:42:79:b3:f2:d8:87:83:d3:9e:f3:f8:
                    39:d1:6d:e5:44:fa:4c:22:6d:e9:ad:ac:23:ef:e3:
                    8f:39:22:b6:a1:f7:9f:a7:07:71:22:ed:4c:51:8d:
                    11:77:5f:e3:0c:6a:27:de:2c:19:a9:d0:47:84:0d:
                    54:f4:71:8f:bb:80:45:f3:8a:10:f9:13:5c:7a:91:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:8F:90:A6:19:A3:E5:37:4C:92:6F:6F:2A:66:5F:4F:1B:97:E2
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:a3:ac:0a:02:a5:b5:89:9d:72:58:0d:36:5b:5c:e5:0e:
         bc:11:d4:f3:c2:9b:75:34:35:ec:1d:b9:e8:9f:af:ff:a4:64:
         d9:b3:48:7c:e4:56:18:8a:bf:6c:5d:a1:e9:81:b4:fe:a9:01:
         11:63:0b:32:88:f1:1f:8c:7c:f4:02:90:e0:df:95:e9:ae:fa:
         a1:fc:ac:56:81:33:20:5e:7a:04:3d:c3:8c:89:5e:77:44:b0:
         0e:32:72:cc:9a:16:e0:a2:87:db:18:2e:51:9d:a2:35:42:c0:
         ce:00:64:c0:c5:6e:62:fe:2d:95:7d:ed:4c:7e:e4:21:e7:01:
         e0:76:7d:f8:03:8b:7a:bd:97:ea:93:c0:cf:fa:26:a6:6d:3e:
         a7:2a:bd:41:54:6f:17:9a:9a:8c:18:13:1d:7d:ea:e2:c7:30:
         57:ce:fd:20:16:95:26:7e:82:29:15:3c:2b:cd:85:b6:f7:1a:
         34:56:00:4b:d6:19:1a:28:f2:79:f6:b5:0b:5a:d5:d1:6a:d5:
         ef:e5:0b:70:18:72:ab:88:d5:85:2b:b2:16:d3:29:88:ed:6a:
         e9:22:47:d9:89:dc:54:3d:d7:ce:be:3a:b4:29:81:54:ef:7e:
         de:6c:db:25:00:88:23:18:d8:1b:7d:e4:3b:53:c5:31:a8:8f:
         4e:da:54:ee
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUFKvh7hqiq4E+pXjkFaCDmX/FjVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDhaFw0yNTA0MDIxODMxMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDYxRTc3RkNCNUVGNkNFQUU4
QzNFNTc2RDkzQjZGN0VBNkVENTMxMEJCQzVDOEI5RTA5QzRERjIyQUI4MzZDNzIy
N0ZGMTBDMjJBQUQzRUVEQjNFMjI2MzM4M0FBODM5OEQ0QjlCN0YzMTlDRkYwQUMx
RkU2ODA2MzQ3RDQwQUZEN0YyNzRFNEU1NzlGMjlGRkIwODZFMUQ1N0U4QTIwQTRC
NjNGQjE3OEZFRjE1Q0YxRDhCNTJDQUUyNUE5NEI4RjUxREUwN0RERjQyNTRBMzg0
MDFGQkI4NzFDNTI3Qzk2QjNCRDNGRUVDOUQ3QkMyNUZENjRCQzlERUE2NzdBMEQy
RkUxMEEzNDJENkYxODVDQUY0NTJBNTAzQkUwQzc1RjdDNEE0Mzc1Q0YyNTQ2ODg4
QzUzNDY5MUQ3MUY2Mzk5QUVCM0NEMzk3OTY2MUFCMDMzMTBFQjI4QUZCODI1MzEw
NEQ1MkQ1OThERjM2NDI3OUIzRjJEODg3ODNEMzlFRjNGODM5RDE2REU1NDRGQTRD
MjI2REU5QURBQzIzRUZFMzhGMzkyMkI2QTFGNzlGQTcwNzcxMjJFRDRDNTE4RDEx
Nzc1RkUzMEM2QTI3REUyQzE5QTlEMDQ3ODQwRDU0RjQ3MThGQkI4MDQ1RjM4QTEw
RjkxMzVDN0E5MThBREYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1h53/LXvbOrow+V22TtvfqbtUxC7xci54JxN8iq4Nscif/EMIqrT
7ts+ImM4Oqg5jUubfzGc/wrB/mgGNH1Ar9fydOTlefKf+whuHVfoogpLY/sXj+8V
zx2LUsriWpS49R3gfd9CVKOEAfu4ccUnyWs70/7snXvCX9ZLyd6md6DS/hCjQtbx
hcr0UqUDvgx198SkN1zyVGiIxTRpHXH2OZrrPNOXlmGrAzEOsor7glMQTVLVmN82
Qnmz8tiHg9Oe8/g50W3lRPpMIm3prawj7+OPOSK2ofefpwdxIu1MUY0Rd1/jDGon
3iwZqdBHhA1U9HGPu4BF84oQ+RNcepGK3wIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FMhvj5CmGaPlN0ySb28qZl9PG5fiMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMTJlMzQzNDJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMksMA0GCSqG
SIb3DQEBCwUAA4IBAQB+xKOsCgKltYmdclgNNltc5Q68EdTzwpt1NDXsHbnon6//
pGTZs0h85FYYir9sXaHpgbT+qQERYwsyiPEfjHz0ApDg35Xprvqh/KxWgTMgXnoE
PcOMiV53RLAOMnLMmhbgoofbGC5RnaI1QsDOAGTAxW5i/i2Vfe1MfuQh5wHgdn34
A4t6vZfqk8DP+iambT6nKr1BVG8XmpqMGBMdferixzBXzv0gFpUmfoIpFTwrzYW2
9xo0VgBL1hkaKPJ59rULWtXRatXv5QtwGHKriNWFK7IW0ymI7WrpIkfZidxUPdfO
vjq0KYFU737ebNslAIgjGNgbfeQ7U8UxqI9O2lTu
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:59 2024 by rpki-client on console-ams.rpki-client.org