Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a313338383a3a2f33302d3330203d3e2034323330.roa
File:                     323830343a313338383a3a2f33302d3330203d3e2034323330.roa (raw, json)
Hash identifier:          6iASJvK9r+3pVl8d+38+ZukZYlhFroGjYOsny0ebN+k=
Subject key identifier:   07:54:0C:A9:96:9A:DD:0F:56:43:F4:47:74:03:4C:7C:76:15:9F:48
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3D6147E6FB99582916072CD74D09A0724648815B
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a313338383a3a2f33302d3330203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     4230
IP address blocks:        2804:1388::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:61:47:e6:fb:99:58:29:16:07:2c:d7:4d:09:a0:72:46:48:81:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100F031E91B9FA1F8A8E1DCE13916E4F99A10CBA5D0988A0023FA8AC79E7C10A4882FA55EBED953F655D60E71DF578D326020D4E740E79D2FBBBB14E09A6103B3459579938E6488AB8D0DF98B749B657439FABA3FF5F8FB3DF35BEAF7BAA9ED91E41E30343DC341AB41C0062E98C92189A8C0616A01ECD59E343E3D651ED64DC7208827667EE6FFCCF434D90B9DF88C48EF5CBDF86C7306D54B900686434929C134BE41FBA7F558F4803CB5B03403F524A2E04733C536B0273B0677CB9CD49B80AFDA3715F7B3E47B6F7968A00E60440257C69D05ABA74F43FE0E5D34BB112F873DFB301A282E453B0C0413C6D41993BF327A22F56621B42B1C7C81954682ED64410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:e9:1b:9f:a1:f8:a8:e1:dc:e1:39:16:e4:
                    f9:9a:10:cb:a5:d0:98:8a:00:23:fa:8a:c7:9e:7c:
                    10:a4:88:2f:a5:5e:be:d9:53:f6:55:d6:0e:71:df:
                    57:8d:32:60:20:d4:e7:40:e7:9d:2f:bb:bb:14:e0:
                    9a:61:03:b3:45:95:79:93:8e:64:88:ab:8d:0d:f9:
                    8b:74:9b:65:74:39:fa:ba:3f:f5:f8:fb:3d:f3:5b:
                    ea:f7:ba:a9:ed:91:e4:1e:30:34:3d:c3:41:ab:41:
                    c0:06:2e:98:c9:21:89:a8:c0:61:6a:01:ec:d5:9e:
                    34:3e:3d:65:1e:d6:4d:c7:20:88:27:66:7e:e6:ff:
                    cc:f4:34:d9:0b:9d:f8:8c:48:ef:5c:bd:f8:6c:73:
                    06:d5:4b:90:06:86:43:49:29:c1:34:be:41:fb:a7:
                    f5:58:f4:80:3c:b5:b0:34:03:f5:24:a2:e0:47:33:
                    c5:36:b0:27:3b:06:77:cb:9c:d4:9b:80:af:da:37:
                    15:f7:b3:e4:7b:6f:79:68:a0:0e:60:44:02:57:c6:
                    9d:05:ab:a7:4f:43:fe:0e:5d:34:bb:11:2f:87:3d:
                    fb:30:1a:28:2e:45:3b:0c:04:13:c6:d4:19:93:bf:
                    32:7a:22:f5:66:21:b4:2b:1c:7c:81:95:46:82:ed:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:54:0C:A9:96:9A:DD:0F:56:43:F4:47:74:03:4C:7C:76:15:9F:48
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a313338383a3a2f33302d3330203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1388::/30

    Signature Algorithm: sha256WithRSAEncryption
         a6:19:79:a4:30:f0:48:0d:00:87:0f:76:03:69:b4:85:d8:78:
         31:49:e5:ee:21:59:96:8f:cf:f7:db:43:d5:fd:59:91:47:7a:
         b1:2b:b9:05:24:2b:1d:19:88:f8:43:df:22:55:0c:cf:aa:73:
         d6:6e:01:48:17:51:30:64:af:e0:f7:d8:b7:7e:52:eb:44:0d:
         ea:64:9b:88:41:d6:69:1f:f1:85:03:98:ce:3a:c0:58:7f:d8:
         c2:32:78:4b:f8:91:0a:dc:0f:f6:3e:05:25:dd:ad:c7:43:4d:
         67:7f:29:18:e3:cf:41:53:63:3b:bd:72:fd:0f:97:4a:8f:68:
         75:41:27:9b:07:72:93:8a:70:2b:2b:1a:1f:c9:4c:56:7c:4a:
         dc:98:88:fa:0e:50:08:3f:66:79:34:e0:90:06:80:cf:58:db:
         60:1d:56:39:dd:a9:c2:db:cb:f6:bf:06:01:52:e2:57:8c:88:
         2e:7f:11:ab:1a:ef:d4:6d:a7:f3:ec:18:fb:18:af:59:c1:92:
         77:42:58:99:16:56:61:c9:2f:ae:0b:40:c7:62:04:23:4e:4e:
         4d:84:a7:71:b3:85:62:72:0d:ff:51:66:da:88:44:79:65:2e:
         fc:ca:8c:05:51:94:14:cb:ff:c0:6b:55:b7:4d:8f:32:72:5a:
         f4:bb:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:41:34 2025 by rpki-client