Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34352e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e34352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          eWJKnBQxOJJdKnPwcFtLNy7L/lWqd1GEGjUO6sKfcb4=
Subject key identifier:   28:DB:C8:90:3E:B3:E6:68:BC:E3:FD:E1:52:F7:EC:B4:DF:31:CC:DF
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       039B23CF1160AE0B75D5F89723EF33B00E169E3F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     4230
IP address blocks:        201.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9b:23:cf:11:60:ae:0b:75:d5:f8:97:23:ef:33:b0:0e:16:9e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:78:20:18:b7:86:fe:04:0e:dc:d0:22:0a:
                    8d:44:e0:5d:8b:2f:5b:43:8c:68:2a:dc:9a:c5:f5:
                    5d:01:43:7d:4f:15:87:e3:1c:64:ff:2c:d2:96:e6:
                    6c:52:d7:1e:30:6c:9f:d9:6f:4f:a0:c2:b2:41:a3:
                    28:0c:2b:a7:60:63:5b:b5:a7:c3:f9:4a:2f:ba:bb:
                    f1:68:86:d9:92:e7:9a:ef:1d:12:2c:87:ae:66:4b:
                    65:09:0d:a9:0f:8e:0c:fd:f9:ef:e6:63:76:10:a0:
                    0c:ce:2e:63:a6:3c:a9:cf:27:d1:39:12:16:66:32:
                    49:bd:9c:68:7c:46:cb:3a:1e:8d:5d:59:93:e5:05:
                    6a:e1:e9:6d:64:a3:d2:bf:2b:68:8a:9d:25:47:05:
                    ca:d6:44:90:e1:d3:eb:d3:9a:83:1f:0f:c3:29:c1:
                    5b:7f:57:eb:2a:af:62:17:c2:24:f5:4a:c3:2f:86:
                    1c:71:6d:96:08:1e:db:fd:96:f9:70:5b:3e:42:70:
                    4a:f8:36:09:28:d7:fe:36:af:cb:77:90:5b:98:e0:
                    1b:a7:82:55:46:7d:a5:09:d7:06:be:c6:f0:43:de:
                    ce:03:41:de:8c:74:43:9d:ac:af:4d:bf:85:52:53:
                    94:2e:a1:63:3f:e5:33:6f:80:d3:03:4c:52:8b:8d:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DB:C8:90:3E:B3:E6:68:BC:E3:FD:E1:52:F7:EC:B4:DF:31:CC:DF
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e34352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.45.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:48:9c:59:44:00:d1:db:a6:df:92:96:c4:ef:7e:d9:17:
         72:ce:e8:10:b1:7a:49:1d:f6:1b:e5:cd:06:18:10:64:26:07:
         76:d2:4a:32:b5:67:0e:75:10:c0:25:ab:18:62:f9:70:04:31:
         38:9e:2d:b6:f2:0c:2f:54:3e:6b:fa:25:20:aa:27:a8:2e:e4:
         32:6a:f8:57:d9:00:a8:c3:87:e8:54:19:f2:a0:71:a4:76:60:
         c5:bc:6d:1f:ec:31:6b:49:5f:6f:63:d3:f9:9a:29:82:87:a6:
         99:fe:bb:86:b7:06:39:96:7f:99:ef:e5:23:1d:c2:05:b1:36:
         d9:db:da:eb:72:1d:b8:ae:87:84:17:d0:02:68:35:a9:d4:b0:
         06:7e:a7:e3:7c:b9:a6:d9:cf:b1:74:2a:86:88:ac:65:1c:6d:
         88:f8:a0:fe:5a:ee:ba:39:f1:76:8a:b8:4a:2b:84:b5:8d:ca:
         c8:67:a7:3d:94:1b:b9:0f:49:8c:fa:6e:2d:ad:9f:a9:e6:ae:
         b0:56:9e:91:45:d4:c4:cc:a6:d0:41:15:03:e3:6b:de:5a:6d:
         32:b7:5b:12:45:9a:37:9d:18:ea:9b:35:e4:79:40:ae:0e:f0:
         ac:4f:43:c5:f4:2b:06:46:e9:89:e9:e1:b9:c0:b7:ed:9e:be:
         66:8c:cf:b6
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUA5sjzxFgrgt11fiXI+8zsA4Wnj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUFCMDc4MjAxOEI3ODZGRTA0
MEVEQ0QwMjIwQThENDRFMDVEOEIyRjVCNDM4QzY4MkFEQzlBQzVGNTVEMDE0MzdE
NEYxNTg3RTMxQzY0RkYyQ0QyOTZFNjZDNTJENzFFMzA2QzlGRDk2RjRGQTBDMkIy
NDFBMzI4MEMyQkE3NjA2MzVCQjVBN0MzRjk0QTJGQkFCQkYxNjg4NkQ5OTJFNzlB
RUYxRDEyMkM4N0FFNjY0QjY1MDkwREE5MEY4RTBDRkRGOUVGRTY2Mzc2MTBBMDBD
Q0UyRTYzQTYzQ0E5Q0YyN0QxMzkxMjE2NjYzMjQ5QkQ5QzY4N0M0NkNCM0ExRThE
NUQ1OTkzRTUwNTZBRTFFOTZENjRBM0QyQkYyQjY4OEE5RDI1NDcwNUNBRDY0NDkw
RTFEM0VCRDM5QTgzMUYwRkMzMjlDMTVCN0Y1N0VCMkFBRjYyMTdDMjI0RjU0QUMz
MkY4NjFDNzE2RDk2MDgxRURCRkQ5NkY5NzA1QjNFNDI3MDRBRjgzNjA5MjhEN0ZF
MzZBRkNCNzc5MDVCOThFMDFCQTc4MjU1NDY3REE1MDlENzA2QkVDNkYwNDNERUNF
MDM0MURFOEM3NDQzOURBQ0FGNERCRjg1NTI1Mzk0MkVBMTYzM0ZFNTMzNkY4MEQz
MDM0QzUyOEI4RDlGRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmrB4IBi3hv4EDtzQIgqNROBdiy9bQ4xoKtyaxfVdAUN9TxWH4xxk
/yzSluZsUtceMGyf2W9PoMKyQaMoDCunYGNbtafD+UovurvxaIbZkuea7x0SLIeu
ZktlCQ2pD44M/fnv5mN2EKAMzi5jpjypzyfRORIWZjJJvZxofEbLOh6NXVmT5QVq
4eltZKPSvytoip0lRwXK1kSQ4dPr05qDHw/DKcFbf1frKq9iF8Ik9UrDL4YccW2W
CB7b/Zb5cFs+QnBK+DYJKNf+Nq/Ld5BbmOAbp4JVRn2lCdcGvsbwQ97OA0HejHRD
nayvTb+FUlOULqFjP+Uzb4DTA0xSi42f0wIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FCjbyJA+s+ZovOP94VL37LTfMczfMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMTJlMzQzNTJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMktMA0GCSqG
SIb3DQEBCwUAA4IBAQAHT0icWUQA0dum35KWxO9+2RdyzugQsXpJHfYb5c0GGBBk
Jgd20koytWcOdRDAJasYYvlwBDE4ni228gwvVD5r+iUgqieoLuQyavhX2QCow4fo
VBnyoHGkdmDFvG0f7DFrSV9vY9P5mimCh6aZ/ruGtwY5ln+Z7+UjHcIFsTbZ29rr
ch24roeEF9ACaDWp1LAGfqfjfLmm2c+xdCqGiKxlHG2I+KD+Wu66OfF2irhKK4S1
jcrIZ6c9lBu5D0mM+m4trZ+p5q6wVp6RRdTEzKbQQRUD42veWm0yt1sSRZo3nRjq
mzXkeUCuDvCsT0PF9CsGRumJ6eG5wLftnr5mjM+2
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:55:44 2025 by rpki-client