Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e35362e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e35362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Iu4mn65/lAYRO0iYsLU6K3uacIClgoJubowSdc8Pkf4=
Subject key identifier:   AB:DA:CA:A7:55:08:C0:43:F2:EB:BA:74:C4:CF:C5:D7:17:B2:88:22
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       37FF45C7D67DCE1B257C1D6FC7DA70D129242B17
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e35362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:05 +0000
ROA not before:           Wed 03 Apr 2024 18:26:05 +0000
ROA not after:            Wed 02 Apr 2025 18:31:05 +0000
asID:                     4230
IP address blocks:        201.56.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ff:45:c7:d6:7d:ce:1b:25:7c:1d:6f:c7:da:70:d1:29:24:2b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:88:21:e1:e3:e5:68:51:71:b2:b6:54:ce:
                    7f:3c:e9:da:18:64:64:16:7e:f9:2d:fe:14:f8:04:
                    f4:64:3e:cb:61:76:a9:f3:9a:89:b2:d3:7a:bf:f7:
                    98:60:8b:a1:d3:07:4f:20:6c:07:95:eb:39:99:c9:
                    58:f6:1a:a0:73:ee:4c:3d:d0:af:7d:1d:5e:45:f8:
                    9f:0e:9e:c5:22:5e:65:9a:ce:3c:b4:1e:6d:03:89:
                    0e:12:a1:1b:77:2b:f4:29:8c:7a:b2:3f:b2:73:0f:
                    4a:e5:0c:3f:f4:66:db:91:48:28:2d:71:88:26:b5:
                    8c:3b:35:1e:4d:f0:50:f7:6e:19:8b:7a:d6:7f:c2:
                    c8:91:b3:97:9e:74:6d:85:d9:a1:64:4b:3c:fe:79:
                    8c:bc:64:e4:83:fb:6c:e1:83:f6:f8:3a:c5:04:54:
                    e3:78:77:90:01:c2:b3:1b:43:c1:03:e6:86:69:ea:
                    7d:12:35:10:1c:ff:91:96:01:43:da:c7:78:f3:ff:
                    76:37:51:05:b0:a4:70:80:c4:ad:9b:28:40:17:85:
                    e5:15:42:a9:65:8f:f3:7f:be:b4:cb:0a:a9:99:e5:
                    26:14:f8:71:1f:87:99:41:71:d9:ca:d8:d9:d2:bb:
                    64:d6:30:61:f7:7b:42:cf:3c:8d:1d:db:41:09:ec:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DA:CA:A7:55:08:C0:43:F2:EB:BA:74:C4:CF:C5:D7:17:B2:88:22
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e35362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:17:b5:28:f4:9f:78:48:f3:05:8c:cd:60:87:2b:f3:52:6c:
         0a:3d:52:ff:da:b7:7a:37:d2:a6:93:30:b3:08:25:b8:00:28:
         4c:eb:3a:d5:61:61:48:69:6d:ea:cd:81:de:45:0a:9d:69:61:
         ef:12:48:13:62:3e:02:09:be:6b:b0:6d:7f:9f:67:b6:72:fe:
         1a:02:db:11:7e:c1:fa:2a:81:10:d9:15:b3:0a:66:de:b0:8b:
         b7:57:46:51:3d:90:ec:a2:0d:84:06:67:eb:6e:ce:b9:c9:6d:
         44:43:e1:82:8a:21:0e:f5:3f:d6:c8:df:03:65:8c:78:b0:cd:
         39:2f:5f:57:03:85:31:f0:ce:49:db:e8:7f:70:3a:d7:60:22:
         d7:e7:e2:e1:53:f3:ab:a6:37:2a:ab:0d:b6:52:04:18:b7:d1:
         04:62:4a:9d:5f:72:91:c0:63:f9:35:cd:85:a0:1a:b8:d7:3e:
         4f:18:6d:58:99:5b:e9:e2:65:8b:7e:35:c0:c9:b8:f6:1d:55:
         bf:8b:f6:20:bd:48:9c:cd:a6:77:6e:f9:ee:f0:08:5c:76:b4:
         b0:ae:f0:67:49:1d:12:2f:ff:2e:44:cd:d3:1d:1e:05:c8:a1:
         42:4c:23:c6:4b:89:62:aa:b7:c6:02:9d:e5:56:3b:a2:d6:b5:
         e9:96:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org