Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a3137633a3a2f33322d3332203d3e2034323330.roa
File:                     323830343a3137633a3a2f33322d3332203d3e2034323330.roa (raw, json)
Hash identifier:          DhrCIeRnMF1IDTujW0UuhQSZl1jV4UwUtHpbSM4yDSw=
Subject key identifier:   D3:2C:19:ED:F4:87:7C:A8:D2:45:1F:E5:59:FA:43:30:CA:78:38:D1
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5ABF8B01B4E425F26E712E7BE7599E2483ED226C
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a3137633a3a2f33322d3332203d3e2034323330.roa
Signing time:             Wed 03 Apr 2024 18:31:05 +0000
ROA not before:           Wed 03 Apr 2024 18:26:05 +0000
ROA not after:            Wed 02 Apr 2025 18:31:05 +0000
asID:                     4230
IP address blocks:        2804:17c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl
                          rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bf:8b:01:b4:e4:25:f2:6e:71:2e:7b:e7:59:9e:24:83:ed:22:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Apr  3 18:26:05 2024 GMT
            Not After : Apr  2 18:31:05 2025 GMT
        Subject: CN=3082010A0282010100B1F83F953EBE6B431D339005469B30AB52EEC3F1EBA453A0AC6924B8B268E26C88DD94B77B041A2F395B20846A8506774230306F5CFFF310E08A1E71ADF4EF947E308A3222AE802449759CA4F82B463B05964237C6556892DB613A6387EA762CABB8A718B403F736C37D3FF7E5B6D96AF0CCDF8596833459589E416BB366455711CF46D85764F5BCC6F879C1B501E3EDC97EB3B95172206C38AFF7800D57F3BD17C2CE5B6F6B3C8F6745E3055CFFB3EF21E2B43B60CFA0DD5E2D39534F64006F70E0CDB6AD2C4764D091F1080E2E457A79887E0F6D4978FE3E6300EC060B09EAC64AE62BA033ECB15BD5A6484DC86A6B8003D30330F8E0C84ECD91F2CB298D0D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:3f:95:3e:be:6b:43:1d:33:90:05:46:9b:
                    30:ab:52:ee:c3:f1:eb:a4:53:a0:ac:69:24:b8:b2:
                    68:e2:6c:88:dd:94:b7:7b:04:1a:2f:39:5b:20:84:
                    6a:85:06:77:42:30:30:6f:5c:ff:f3:10:e0:8a:1e:
                    71:ad:f4:ef:94:7e:30:8a:32:22:ae:80:24:49:75:
                    9c:a4:f8:2b:46:3b:05:96:42:37:c6:55:68:92:db:
                    61:3a:63:87:ea:76:2c:ab:b8:a7:18:b4:03:f7:36:
                    c3:7d:3f:f7:e5:b6:d9:6a:f0:cc:df:85:96:83:34:
                    59:58:9e:41:6b:b3:66:45:57:11:cf:46:d8:57:64:
                    f5:bc:c6:f8:79:c1:b5:01:e3:ed:c9:7e:b3:b9:51:
                    72:20:6c:38:af:f7:80:0d:57:f3:bd:17:c2:ce:5b:
                    6f:6b:3c:8f:67:45:e3:05:5c:ff:b3:ef:21:e2:b4:
                    3b:60:cf:a0:dd:5e:2d:39:53:4f:64:00:6f:70:e0:
                    cd:b6:ad:2c:47:64:d0:91:f1:08:0e:2e:45:7a:79:
                    88:7e:0f:6d:49:78:fe:3e:63:00:ec:06:0b:09:ea:
                    c6:4a:e6:2b:a0:33:ec:b1:5b:d5:a6:48:4d:c8:6a:
                    6b:80:03:d3:03:30:f8:e0:c8:4e:cd:91:f2:cb:29:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:19:ED:F4:87:7C:A8:D2:45:1F:E5:59:FA:43:30:CA:78:38:D1
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a3137633a3a2f33322d3332203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:b7:65:f1:fb:29:ed:20:a1:70:c9:f5:46:26:2f:51:6a:
         a0:53:14:ad:14:83:35:72:af:a6:65:e4:80:19:e6:69:c0:ae:
         f8:ef:30:3f:86:24:f8:5b:c1:70:f0:5d:52:c6:af:dd:16:51:
         db:49:80:ab:7d:aa:f9:67:f3:1f:0e:4e:b5:01:65:15:1e:27:
         db:4b:66:fa:14:3c:f5:76:2e:00:cc:ba:79:07:16:f1:d5:d6:
         dd:d2:fe:d7:ad:9b:e0:01:3b:35:22:44:c2:80:2a:56:c9:c4:
         e3:99:f3:cd:0d:c2:c9:21:1f:fd:f1:3b:0e:5b:d0:dc:8c:ea:
         be:07:9c:29:77:7e:cf:6f:aa:af:8f:34:b1:6b:d9:59:75:f9:
         89:c3:57:5f:59:0f:97:79:7a:a9:a8:78:eb:4c:09:1b:05:5d:
         68:f5:3d:4d:c0:b2:3d:3e:58:37:17:1f:be:11:14:57:7b:bf:
         a9:ec:ba:4c:bf:4d:fc:1c:1b:77:8b:29:d5:24:a2:2d:4c:ad:
         46:36:ec:da:ac:a6:e8:c9:4f:18:5c:f7:b3:a5:4c:ff:d6:fe:
         1a:55:7e:03:66:76:14:9e:b4:d8:b8:b2:b5:f8:bc:df:71:8e:
         35:89:ba:9c:e8:f7:09:9c:f4:83:80:c2:1a:cb:03:b2:66:0c:
         04:3d:d1:c6
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUWr+LAbTkJfJucS5751meJIPtImwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNDA0MDMxODI2MDVaFw0yNTA0MDIxODMxMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjFGODNGOTUzRUJFNkI0MzFE
MzM5MDA1NDY5QjMwQUI1MkVFQzNGMUVCQTQ1M0EwQUM2OTI0QjhCMjY4RTI2Qzg4
REQ5NEI3N0IwNDFBMkYzOTVCMjA4NDZBODUwNjc3NDIzMDMwNkY1Q0ZGRjMxMEUw
OEExRTcxQURGNEVGOTQ3RTMwOEEzMjIyQUU4MDI0NDk3NTlDQTRGODJCNDYzQjA1
OTY0MjM3QzY1NTY4OTJEQjYxM0E2Mzg3RUE3NjJDQUJCOEE3MThCNDAzRjczNkMz
N0QzRkY3RTVCNkQ5NkFGMENDREY4NTk2ODMzNDU5NTg5RTQxNkJCMzY2NDU1NzEx
Q0Y0NkQ4NTc2NEY1QkNDNkY4NzlDMUI1MDFFM0VEQzk3RUIzQjk1MTcyMjA2QzM4
QUZGNzgwMEQ1N0YzQkQxN0MyQ0U1QjZGNkIzQzhGNjc0NUUzMDU1Q0ZGQjNFRjIx
RTJCNDNCNjBDRkEwREQ1RTJEMzk1MzRGNjQwMDZGNzBFMENEQjZBRDJDNDc2NEQw
OTFGMTA4MEUyRTQ1N0E3OTg4N0UwRjZENDk3OEZFM0U2MzAwRUMwNjBCMDlFQUM2
NEFFNjJCQTAzM0VDQjE1QkQ1QTY0ODREQzg2QTZCODAwM0QzMDMzMEY4RTBDODRF
Q0Q5MUYyQ0IyOThEMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsfg/lT6+a0MdM5AFRpswq1Luw/HrpFOgrGkkuLJo4myI3ZS3ewQa
LzlbIIRqhQZ3QjAwb1z/8xDgih5xrfTvlH4wijIiroAkSXWcpPgrRjsFlkI3xlVo
ktthOmOH6nYsq7inGLQD9zbDfT/35bbZavDM34WWgzRZWJ5Ba7NmRVcRz0bYV2T1
vMb4ecG1AePtyX6zuVFyIGw4r/eADVfzvRfCzltvazyPZ0XjBVz/s+8h4rQ7YM+g
3V4tOVNPZABvcODNtq0sR2TQkfEIDi5FenmIfg9tSXj+PmMA7AYLCerGSuYroDPs
sVvVpkhNyGprgAPTAzD44MhOzZHyyymNDQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FNMsGe30h3yo0kUf5Vn6QzDKeDjRMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzgzMDM0M2EzMTM3NjMzYTNh
MmYzMzMyMmQzMzMyMjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEAXwwDQYJ
KoZIhvcNAQELBQADggEBAFLNt2Xx+yntIKFwyfVGJi9RaqBTFK0UgzVyr6Zl5IAZ
5mnArvjvMD+GJPhbwXDwXVLGr90WUdtJgKt9qvln8x8OTrUBZRUeJ9tLZvoUPPV2
LgDMunkHFvHV1t3S/tetm+ABOzUiRMKAKlbJxOOZ880NwskhH/3xOw5b0NyM6r4H
nCl3fs9vqq+PNLFr2Vl1+YnDV19ZD5d5eqmoeOtMCRsFXWj1PU3Asj0+WDcXH74R
FFd7v6nsuky/TfwcG3eLKdUkoi1MrUY27NqspujJTxhc97OlTP/W/hpVfgNmdhSe
tNi4srX4vN9xjjWJupzo9wmc9IOAwhrLA7JmDAQ90cY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org