Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36342e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e36342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          PiUtqtfoWpUL96Esob0TVz1MYrwTP0LuVYkg3S1RhjM=
Subject key identifier:   66:6F:3D:1E:7B:16:6D:CC:68:FC:33:98:9A:0A:7A:55:41:2C:64:66
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2793EF3749C86A024C7843133F4616EFF5414E1A
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     4230
IP address blocks:        201.64.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:93:ef:37:49:c8:6a:02:4c:78:43:13:3f:46:16:ef:f5:41:4e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:eb:13:96:28:7c:4e:ff:be:b5:30:af:df:
                    71:e3:bb:8e:fa:12:69:ad:b9:1c:2f:98:92:53:eb:
                    bf:36:c8:5f:c0:48:cd:bc:6a:ce:ba:08:bd:23:b9:
                    57:f8:c9:8a:5e:78:ce:0e:3c:7f:9b:1f:0e:4e:0d:
                    d5:46:a1:11:60:36:8d:6c:b8:13:51:63:14:8b:b6:
                    8e:3e:fb:14:13:5a:61:50:db:17:29:16:f4:84:f4:
                    1f:77:20:23:d7:ee:f8:96:6d:81:a3:45:bd:a4:03:
                    15:d3:27:c7:19:87:a9:a4:f8:3b:9a:d8:0d:77:03:
                    c8:77:9c:90:00:54:a2:6d:35:15:f3:9b:db:84:56:
                    10:8b:bf:8a:16:a2:1b:84:3b:74:0e:fc:67:40:a7:
                    09:cb:e8:c6:00:58:c5:21:6e:77:51:4c:3b:f7:1b:
                    77:2f:fb:63:01:93:7e:74:31:33:d1:ae:5e:b4:22:
                    8f:6b:71:47:62:1d:97:d2:b5:5f:1a:43:3c:e6:69:
                    4c:75:1d:53:ff:8d:a4:52:ed:88:51:b7:f7:85:f4:
                    8f:a8:ba:a5:00:a9:d9:87:36:40:42:cc:6c:d9:d1:
                    82:2f:7a:87:4a:00:51:26:66:ea:77:ec:26:7b:ba:
                    58:47:2b:03:ca:01:23:18:f5:fb:d3:04:0a:99:d3:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6F:3D:1E:7B:16:6D:CC:68:FC:33:98:9A:0A:7A:55:41:2C:64:66
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.64.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:17:03:f4:71:79:07:63:01:ad:a6:3b:33:03:dd:2c:55:
         c1:be:67:e6:fb:e4:d1:5d:89:b9:90:da:01:d3:8e:58:68:c5:
         ad:46:3e:f0:19:ad:64:3f:71:86:90:d6:bd:a4:bc:49:53:59:
         6b:37:58:2b:68:10:f5:61:2a:fa:bd:f7:43:69:ce:22:28:cd:
         e3:de:b5:90:27:2a:61:ae:1d:c3:2c:55:8e:ca:f7:38:2f:e2:
         93:1b:53:41:39:77:cc:3f:dc:a1:76:66:3a:60:9d:b9:1e:6d:
         bf:cd:ee:6d:ab:c0:e2:f8:5a:ef:df:1b:4a:e4:ed:04:40:8f:
         50:b0:bc:8f:ea:05:69:7b:cc:c5:6b:71:93:ce:c7:cc:5f:94:
         a8:25:57:ef:22:58:a1:e7:83:89:9c:6c:de:b6:65:22:e6:e6:
         b7:29:b2:1a:9d:d9:12:0c:87:b1:88:1f:53:4b:fd:29:fd:5d:
         8e:ae:44:95:7b:9f:5e:66:55:ad:b6:ee:7b:d0:93:93:1a:c4:
         63:b8:ac:4a:76:d2:35:45:7d:a4:e4:da:5e:1a:10:51:dc:d5:
         f5:17:03:76:e8:24:55:a8:62:02:3d:b7:f9:e2:36:37:fa:a5:
         45:7d:e9:24:68:ad:6e:70:d6:7a:d7:50:da:1f:ac:b3:79:ea:
         fd:2a:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org