Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          NW8LxsyFltfKzBH/qhQysfG7qvECYS74IpIzxbWcuoo=
Subject key identifier:   AF:26:BB:E9:D7:8E:93:91:B1:B7:55:9E:9E:03:41:E1:F7:1E:84:D7
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       4DC011F0782D194EE0C987270FF0BC9D183F1E85
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        138.185.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c0:11:f0:78:2d:19:4e:e0:c9:87:27:0f:f0:bc:9d:18:3f:1e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:08:43:7f:5a:d7:4e:0b:88:a1:4c:94:71:
                    9b:c9:83:99:c1:55:fe:59:ba:2c:f4:0b:99:52:04:
                    9f:8f:ad:db:6d:f9:3a:0a:cb:4d:4a:6b:81:61:35:
                    45:67:18:9d:99:d4:52:5c:e7:3b:d9:08:b1:71:3f:
                    bf:85:0b:26:7b:4a:a9:c1:ad:0b:e7:5c:70:a0:83:
                    d8:46:f9:7e:38:2f:f5:32:96:c1:ab:eb:8c:bb:71:
                    d1:65:e7:12:39:7a:87:18:0c:99:bf:1c:f4:a1:62:
                    de:b7:56:51:2a:e3:9f:0b:ec:62:09:e2:c7:8c:64:
                    81:8d:ab:12:b3:40:05:1d:48:9e:e5:73:73:65:2b:
                    fa:21:eb:13:7e:75:5a:3e:3f:91:95:14:a9:fb:d7:
                    d8:ce:0f:5b:cc:e4:bb:22:68:2b:42:5d:d5:13:70:
                    da:2b:9b:22:4f:d4:68:7f:00:82:54:ef:04:c6:11:
                    d2:0a:de:a4:d3:c5:21:ff:cc:e1:04:39:cd:b0:06:
                    76:aa:43:00:1e:aa:f1:54:ba:5d:c5:44:50:b7:9d:
                    d2:a6:9d:32:30:48:7a:96:0b:3e:26:f7:b2:58:d6:
                    6c:1d:b0:8e:07:fa:f3:65:c3:3d:ba:cd:56:9d:42:
                    56:fc:78:8c:86:63:d1:b6:61:38:3e:a2:6f:53:f1:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:BB:E9:D7:8E:93:91:B1:B7:55:9E:9E:03:41:E1:F7:1E:84:D7
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:15:fc:4f:04:53:5e:3b:05:a0:a9:cd:a3:ee:d3:71:5e:06:
         4f:7e:f2:11:87:c2:22:23:3c:c2:5d:12:b5:4a:85:f5:e7:6e:
         a4:9a:24:c0:5a:06:b7:a3:db:53:a5:7c:64:7e:90:48:33:b8:
         d8:ee:3b:07:2b:fb:85:76:4d:f9:5e:29:8e:46:2f:58:1f:b8:
         e3:81:a3:50:0e:4e:8c:c9:16:20:6a:d2:48:3b:fa:dc:1c:c5:
         38:0b:62:33:92:68:af:c0:e3:e0:88:e8:c3:a6:31:46:80:b2:
         fe:04:73:70:d7:52:94:19:a1:3e:81:85:b5:11:6d:47:cf:7c:
         40:40:d9:79:29:36:35:0b:d5:19:b6:af:bf:e2:ba:6f:1e:b3:
         8d:3a:53:6c:48:2b:f8:e3:19:b0:2f:2d:ca:18:3a:fe:2d:88:
         09:83:da:be:22:be:3a:a6:25:14:7c:da:d4:9d:0f:2c:5a:ea:
         c0:15:64:2c:e6:74:e5:93:a7:5e:ae:85:a8:3c:1f:3b:14:dc:
         e0:16:8f:a6:bc:3b:03:2f:c4:11:0c:b0:95:54:e5:6f:a4:1e:
         15:58:71:a5:b0:7a:23:43:de:66:23:cb:d2:4d:10:b9:5a:db:
         97:d8:6b:5f:ce:7c:40:8b:a0:2d:0d:56:db:8b:21:e6:7a:67:
         af:4d:93:da
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUTcAR8HgtGU7gyYcnD/C8nRg/HoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDNaFw0yNTA0MDMxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjAwRjA4NDM3RjVBRDc0RTBC
ODhBMTRDOTQ3MTlCQzk4Mzk5QzE1NUZFNTlCQTJDRjQwQjk5NTIwNDlGOEZBRERC
NkRGOTNBMEFDQjRENEE2QjgxNjEzNTQ1NjcxODlEOTlENDUyNUNFNzNCRDkwOEIx
NzEzRkJGODUwQjI2N0I0QUE5QzFBRDBCRTc1QzcwQTA4M0Q4NDZGOTdFMzgyRkY1
MzI5NkMxQUJFQjhDQkI3MUQxNjVFNzEyMzk3QTg3MTgwQzk5QkYxQ0Y0QTE2MkRF
Qjc1NjUxMkFFMzlGMEJFQzYyMDlFMkM3OEM2NDgxOERBQjEyQjM0MDA1MUQ0ODlF
RTU3MzczNjUyQkZBMjFFQjEzN0U3NTVBM0UzRjkxOTUxNEE5RkJEN0Q4Q0UwRjVC
Q0NFNEJCMjI2ODJCNDI1REQ1MTM3MERBMkI5QjIyNEZENDY4N0YwMDgyNTRFRjA0
QzYxMUQyMEFERUE0RDNDNTIxRkZDQ0UxMDQzOUNEQjAwNjc2QUE0MzAwMUVBQUYx
NTRCQTVEQzU0NDUwQjc5REQyQTY5RDMyMzA0ODdBOTYwQjNFMjZGN0IyNThENjZD
MURCMDhFMDdGQUYzNjVDMzNEQkFDRDU2OUQ0MjU2RkM3ODhDODY2M0QxQjY2MTM4
M0VBMjZGNTNGMTU5NjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsA8IQ39a104LiKFMlHGbyYOZwVX+Wbos9AuZUgSfj63bbfk6CstN
SmuBYTVFZxidmdRSXOc72QixcT+/hQsme0qpwa0L51xwoIPYRvl+OC/1MpbBq+uM
u3HRZecSOXqHGAyZvxz0oWLet1ZRKuOfC+xiCeLHjGSBjasSs0AFHUie5XNzZSv6
IesTfnVaPj+RlRSp+9fYzg9bzOS7ImgrQl3VE3DaK5siT9RofwCCVO8ExhHSCt6k
08Uh/8zhBDnNsAZ2qkMAHqrxVLpdxURQt53Spp0yMEh6lgs+JveyWNZsHbCOB/rz
ZcM9us1WnUJW/HiMhmPRtmE4PqJvU/FZZwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FK8mu+nXjpORsbdVnp4DQeH3HoTXMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzMzODJlMzEzODM1MmUzMTM4
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACKubwwDQYJKoZIhvcNAQELBQADggEBAIgV/E8EU147BaCpzaPu03FeBk9+8hGH
wiIjPMJdErVKhfXnbqSaJMBaBrej21OlfGR+kEgzuNjuOwcr+4V2TfleKY5GL1gf
uOOBo1AOTozJFiBq0kg7+twcxTgLYjOSaK/A4+CI6MOmMUaAsv4Ec3DXUpQZoT6B
hbURbUfPfEBA2XkpNjUL1Rm2r7/ium8es406U2xIK/jjGbAvLcoYOv4tiAmD2r4i
vjqmJRR82tSdDyxa6sAVZCzmdOWTp16uhag8HzsU3OAWj6a8OwMvxBEMsJVU5W+k
HhVYcaWweiND3mYjy9JNELla25fYa1/OfECLoC0NVtuLIeZ6Z69Nk9o=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org