Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa
File:                     3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          E0xXTzz9mLs2GeYJdP5fd9Jxam3HfNcxul6x+W1Fkps=
Subject key identifier:   EB:B1:3E:E8:8E:55:07:DC:1B:82:FA:A4:16:D5:FE:70:05:83:CD:5F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       7C608693C21042EDDADC90288C71ACF976B24D28
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        138.185.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:60:86:93:c2:10:42:ed:da:dc:90:28:8c:71:ac:f9:76:b2:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:3d:82:6e:ff:d4:e1:0b:1d:6f:31:b6:c7:
                    ad:0c:c7:b3:a6:10:74:97:b0:60:e0:9e:f6:4e:47:
                    dc:f2:dc:88:0c:5b:ec:30:d0:23:a3:62:82:c8:da:
                    ed:37:9a:1d:d2:ff:44:20:40:9a:c5:ad:44:96:bf:
                    03:da:8d:01:22:ae:12:19:1b:04:28:46:12:3b:64:
                    7d:83:08:51:2e:e7:4e:75:c1:b1:f2:d2:e7:ff:dd:
                    67:b0:c5:68:e0:ff:37:a6:d0:b0:31:0d:b2:c0:5b:
                    a5:f7:47:6f:df:38:c9:81:f1:60:39:a3:c5:61:dd:
                    03:c8:83:9e:0c:53:cf:46:7e:c6:bb:5f:01:c3:7e:
                    7e:84:62:b8:69:fb:b3:39:b6:b8:21:fa:98:09:fe:
                    bd:36:b2:f3:c0:9b:3a:65:c7:75:74:94:ec:43:35:
                    df:56:80:9c:0a:34:66:eb:b0:94:c3:5a:7a:3a:36:
                    98:a4:af:27:b8:78:7f:32:8f:7d:b3:90:6c:94:80:
                    8f:03:fe:d9:8b:99:4c:36:74:93:be:d0:60:97:90:
                    09:55:49:ae:1b:23:b9:0c:9b:63:3b:12:8f:8d:38:
                    b2:38:66:42:47:d6:d5:5c:c2:91:7e:ca:78:69:60:
                    e5:f5:34:71:2c:bc:19:cb:ac:de:18:28:e1:3e:1c:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B1:3E:E8:8E:55:07:DC:1B:82:FA:A4:16:D5:FE:70:05:83:CD:5F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:00:d4:14:10:e5:29:79:3b:30:61:05:97:86:47:17:63:90:
         77:29:42:aa:cc:f3:ec:76:58:44:1b:bf:58:63:0f:1b:3a:1d:
         c1:cd:60:52:36:4f:98:40:d2:6c:64:f9:5b:b9:a3:71:58:16:
         7c:f3:06:bb:5b:e3:80:3f:0b:9b:a7:81:39:a2:2d:a0:3d:45:
         ec:97:b0:0c:f0:b5:ee:af:89:9b:26:b3:68:8f:e7:da:69:7b:
         ba:40:b9:2f:eb:12:1a:bf:80:cf:fa:88:a9:c0:19:b9:45:87:
         01:57:3d:c0:87:6f:94:43:91:3e:ca:8d:0c:c2:f0:dc:3f:ef:
         e6:6b:ba:c7:5b:bb:a7:b6:46:85:53:ea:44:01:22:f7:c8:3b:
         08:57:80:ac:03:e0:c4:0c:45:f2:f1:6e:b1:18:be:ca:2c:3c:
         cc:8c:87:ad:3f:ea:ab:eb:02:77:96:71:9d:22:7a:37:b8:12:
         b5:c5:4b:49:ba:6b:f4:2c:5d:28:cb:f7:44:c4:d5:91:57:6f:
         c8:49:38:80:bc:f8:2e:fe:28:5f:ad:31:5c:69:0a:3d:22:19:
         ca:6a:e4:54:ea:87:9b:a6:23:0e:8d:94:72:0d:8a:17:7c:84:
         6e:d9:da:0e:71:ed:a7:8b:2b:79:28:7c:04:74:20:a7:e9:d4:
         12:c6:d1:9a
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUfGCGk8IQQu3a3JAojHGs+XayTSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDVaFw0yNTA0MDMxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJGNTNEODI2RUZGRDRFMTBC
MUQ2RjMxQjZDN0FEMENDN0IzQTYxMDc0OTdCMDYwRTA5RUY2NEU0N0RDRjJEQzg4
MEM1QkVDMzBEMDIzQTM2MjgyQzhEQUVEMzc5QTFERDJGRjQ0MjA0MDlBQzVBRDQ0
OTZCRjAzREE4RDAxMjJBRTEyMTkxQjA0Mjg0NjEyM0I2NDdEODMwODUxMkVFNzRF
NzVDMUIxRjJEMkU3RkZERDY3QjBDNTY4RTBGRjM3QTZEMEIwMzEwREIyQzA1QkE1
Rjc0NzZGREYzOEM5ODFGMTYwMzlBM0M1NjFERDAzQzg4MzlFMEM1M0NGNDY3RUM2
QkI1RjAxQzM3RTdFODQ2MkI4NjlGQkIzMzlCNkI4MjFGQTk4MDlGRUJEMzZCMkYz
QzA5QjNBNjVDNzc1NzQ5NEVDNDMzNURGNTY4MDlDMEEzNDY2RUJCMDk0QzM1QTdB
M0EzNjk4QTRBRjI3Qjg3ODdGMzI4RjdEQjM5MDZDOTQ4MDhGMDNGRUQ5OEI5OTRD
MzY3NDkzQkVEMDYwOTc5MDA5NTU0OUFFMUIyM0I5MEM5QjYzM0IxMjhGOEQzOEIy
Mzg2NjQyNDdENkQ1NUNDMjkxN0VDQTc4Njk2MEU1RjUzNDcxMkNCQzE5Q0JBQ0RF
MTgyOEUxM0UxQ0QxQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwvU9gm7/1OELHW8xtsetDMezphB0l7Bg4J72Tkfc8tyIDFvsMNAj
o2KCyNrtN5od0v9EIECaxa1Elr8D2o0BIq4SGRsEKEYSO2R9gwhRLudOdcGx8tLn
/91nsMVo4P83ptCwMQ2ywFul90dv3zjJgfFgOaPFYd0DyIOeDFPPRn7Gu18Bw35+
hGK4afuzOba4IfqYCf69NrLzwJs6Zcd1dJTsQzXfVoCcCjRm67CUw1p6OjaYpK8n
uHh/Mo99s5BslICPA/7Zi5lMNnSTvtBgl5AJVUmuGyO5DJtjOxKPjTiyOGZCR9bV
XMKRfsp4aWDl9TRxLLwZy6zeGCjhPhzRuQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FOuxPuiOVQfcG4L6pBbV/nAFg81fMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzMzODJlMzEzODM1MmUzMTM4
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKKubwwDQYJKoZIhvcNAQELBQADggEBAEAA1BQQ5Sl5OzBhBZeGRxdjkHcpQqrM
8+x2WEQbv1hjDxs6HcHNYFI2T5hA0mxk+Vu5o3FYFnzzBrtb44A/C5ungTmiLaA9
ReyXsAzwte6viZsms2iP59ppe7pAuS/rEhq/gM/6iKnAGblFhwFXPcCHb5RDkT7K
jQzC8Nw/7+Zrusdbu6e2RoVT6kQBIvfIOwhXgKwD4MQMRfLxbrEYvsosPMyMh60/
6qvrAneWcZ0ieje4ErXFS0m6a/QsXSjL90TE1ZFXb8hJOIC8+C7+KF+tMVxpCj0i
Gcpq5FTqh5umIw6NlHINihd8hG7Z2g5x7aeLK3kofAR0IKfp1BLG0Zo=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:35 2024 by rpki-client on console-ams.rpki-client.org