Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e37332e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e37332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          57X7hn/iOd53aOiL716+o14MPHKEesGsvwLBQ4UrQvg=
Subject key identifier:   1B:FD:CC:C0:A1:C5:05:11:EC:4D:98:15:94:D3:70:53:EA:F1:FF:87
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2D9FFF4738177803D5C260CEAF839709429B2A97
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e37332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     4230
IP address blocks:        201.73.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9f:ff:47:38:17:78:03:d5:c2:60:ce:af:83:97:09:42:9b:2a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:63:2f:4b:f6:77:b8:37:e0:b2:7f:ed:20:bf:
                    d5:83:60:78:9d:34:e9:e1:c1:7d:de:b1:2e:f1:5b:
                    71:af:39:d5:cb:e1:55:00:2a:83:f1:93:6d:02:1e:
                    7e:42:ed:c7:0c:1c:65:d7:5d:85:ca:db:8a:5a:4e:
                    c7:a7:64:38:e9:7d:e7:f5:4f:33:00:84:de:56:c4:
                    4c:26:a5:05:5b:34:1e:b4:09:f1:73:15:af:66:d7:
                    bb:51:84:ee:05:b6:30:8a:1d:90:cd:14:28:a9:07:
                    42:7d:4d:f6:42:e8:4f:27:39:01:c7:a7:2e:59:48:
                    20:c3:b4:cd:38:f0:3e:ad:fc:3f:4f:a3:97:99:1e:
                    52:10:28:eb:d9:df:39:90:0b:bb:7d:16:83:0a:21:
                    23:08:50:32:05:3a:cd:d5:2a:c9:90:5f:40:54:dd:
                    e1:c5:70:e9:2f:07:3a:59:8a:9f:0f:f6:63:25:20:
                    dc:aa:3a:8a:39:5c:36:4f:61:00:9e:42:71:ed:05:
                    6e:96:82:74:fd:ec:97:22:97:9c:0f:db:32:43:b4:
                    03:fd:d6:91:45:f0:f7:7a:a4:2c:71:5b:89:c7:6a:
                    d7:8c:41:7a:71:fb:9a:ab:7b:4d:20:c7:39:2e:0b:
                    a7:ba:de:77:09:66:02:3f:13:4b:22:5f:4b:77:ae:
                    70:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FD:CC:C0:A1:C5:05:11:EC:4D:98:15:94:D3:70:53:EA:F1:FF:87
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e37332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:9f:9a:b2:63:1c:c1:78:0c:7b:75:42:af:aa:f8:22:82:
         b1:8c:53:e2:2b:0f:b1:d9:06:a4:e5:34:93:13:0f:56:7f:e4:
         d0:6c:7c:f8:24:1c:06:1d:2d:ee:ff:e7:22:a9:e4:0b:90:cf:
         06:91:0b:43:b5:44:7e:69:92:a0:15:1f:d1:63:58:14:21:8e:
         46:4d:ce:32:da:51:ad:59:26:2b:7d:7a:a5:cb:cf:28:37:bc:
         20:ed:ea:64:a8:89:21:00:fb:8b:10:90:8c:e4:c8:01:cb:2c:
         3e:72:65:43:99:ce:01:19:08:09:f9:e5:84:83:4e:3c:0f:f4:
         65:0c:fa:f1:eb:03:f8:78:c3:91:7a:8a:de:b4:57:3f:06:19:
         1c:08:cc:dd:8f:19:ee:cc:11:10:e0:e1:5e:4c:c0:1a:f4:d4:
         1b:28:d8:86:93:74:d5:de:ca:cb:df:5a:f5:c0:c2:78:84:e2:
         74:42:dd:fb:16:5b:68:b0:27:d7:05:b5:3f:23:9c:19:40:75:
         7c:3e:05:d8:eb:92:30:d1:a1:8f:ed:c4:26:29:ee:1f:cc:7d:
         ce:20:bd:1a:ef:e1:3c:6b:f2:fc:52:8c:df:dd:75:7b:e9:88:
         37:9b:3f:2f:4e:b1:26:99:d9:f6:3d:66:fd:6b:db:e6:7c:3d:
         28:6d:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org