Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a313338383a3a2f33302d3330203d3e2034323330.roa
File:                     323830343a313338383a3a2f33302d3330203d3e2034323330.roa (raw, json)
Hash identifier:          JzceNidlQzlaCXjjv6Tcjd1e3LkLjTDEEmhrhF6b2ns=
Subject key identifier:   D5:33:18:72:EE:0D:DA:BD:FE:A9:4B:B9:50:CB:D4:E9:6E:23:F3:12
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       0BA47446CC6F6A05B124268113C3A489004C09C2
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a313338383a3a2f33302d3330203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     4230
IP address blocks:        2804:1388::/30 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a4:74:46:cc:6f:6a:05:b1:24:26:81:13:c3:a4:89:00:4c:09:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2a:1c:f4:be:9c:c7:8c:0f:be:4b:1e:34:97:
                    6e:bc:32:92:60:09:d5:49:65:8e:c2:ac:c5:c4:71:
                    85:c5:9f:ff:f1:b6:27:20:7e:c6:90:ed:6d:b4:ba:
                    4d:29:2c:43:21:fe:b2:b9:9a:82:bd:9e:a1:81:05:
                    6b:e4:17:84:37:d8:da:f2:22:c5:3b:b3:b7:75:fe:
                    36:87:9c:84:1d:58:f0:00:86:d5:d3:e5:41:be:a6:
                    4d:e6:19:9f:3d:37:85:12:eb:34:d4:25:fc:d7:06:
                    57:29:28:0b:a6:c6:3f:30:e5:46:ea:6d:50:c0:39:
                    f9:90:7b:97:0d:5f:ea:46:32:2d:80:a8:de:ea:0a:
                    7b:48:d5:d8:94:c2:91:a4:99:4c:1c:7c:fd:b1:c4:
                    51:be:1e:76:fc:c8:cc:7b:b1:24:ff:7a:46:28:13:
                    15:40:c3:6a:f6:c9:89:8d:7f:3c:c5:9e:58:7f:a5:
                    ff:d1:8d:7e:f7:90:05:47:51:53:92:9d:80:10:ae:
                    bf:77:d4:aa:08:00:a5:56:62:19:b6:de:5b:0e:2f:
                    70:2d:42:dd:f4:c8:71:f9:20:c6:23:fc:d8:2e:f2:
                    45:f3:6e:94:4a:3d:8c:be:1b:27:f8:f4:93:5a:ff:
                    d4:4f:67:48:b0:3f:09:ee:5c:10:11:6e:69:d1:c6:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:33:18:72:EE:0D:DA:BD:FE:A9:4B:B9:50:CB:D4:E9:6E:23:F3:12
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a313338383a3a2f33302d3330203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1388::/30

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:b2:d8:48:ea:06:3c:b2:dc:61:6b:34:56:12:f3:4e:bb:
         6e:37:4e:98:b0:89:94:e6:7d:06:fe:a4:2e:58:af:2e:4e:58:
         14:05:97:de:d9:29:87:ee:bb:9d:6d:03:c4:01:b9:92:f9:60:
         fa:fa:3b:7b:69:e1:13:77:e5:d3:0a:7d:a1:69:df:69:e7:60:
         bc:93:9d:d1:f7:b5:91:d6:c8:a6:cc:40:1d:51:4a:f8:c5:03:
         c3:18:0a:2a:c2:68:95:b1:0f:57:81:99:2a:e0:2e:26:ea:ba:
         eb:37:f2:53:a5:bd:c7:38:d8:ea:cc:2f:da:c3:21:e9:7c:8b:
         7f:b9:8f:ee:75:ed:71:94:85:a3:17:ca:41:28:92:eb:e6:57:
         40:3b:e8:37:14:16:f7:2b:29:b4:30:ff:9b:52:38:2a:08:ee:
         be:2d:45:7e:ea:19:9d:39:14:cf:8c:d6:66:8d:48:7c:bb:b9:
         ba:5c:8a:8c:e8:48:1a:6a:2d:42:d5:17:b0:38:2b:c2:74:c1:
         34:3d:42:2e:5b:06:08:b7:aa:d1:0f:46:af:4b:6e:aa:34:89:
         68:65:63:6e:0e:29:0d:35:ca:f5:d2:fc:d2:04:ef:67:c2:3e:
         c7:ae:fe:1a:2a:24:6a:e3:2d:58:60:3e:3d:ea:2b:6e:b3:a1:
         42:b5:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org