Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          UX094lOAcKJw4AGwagjYDeKjw1fI+63RTa9Xy4pin1k=
Subject key identifier:   16:00:8E:1F:AB:35:4E:71:0E:02:1E:F5:84:3A:EE:E6:4B:7F:2F:62
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2DAC8C5582D577E9B9C4B0181A30AE2911966246
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        138.185.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ac:8c:55:82:d5:77:e9:b9:c4:b0:18:1a:30:ae:29:11:96:62:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bc:94:9f:09:be:80:71:da:87:cb:17:4d:96:
                    a1:45:b0:d0:43:7d:82:a7:8a:7d:c4:b6:c4:3b:46:
                    a8:2f:b4:ef:71:41:81:d5:e9:51:f5:51:49:d0:c0:
                    2a:10:9f:8d:5c:07:10:90:c8:53:21:9f:00:7b:44:
                    d2:e7:72:cf:2a:3d:7d:29:f9:80:3d:8d:0e:ca:49:
                    e2:d2:ae:2a:f9:6e:0f:8a:6d:2f:89:ce:2b:30:3a:
                    89:ca:5d:a1:8c:f6:22:59:76:8d:6d:19:20:85:fb:
                    82:32:f3:96:24:cc:98:8a:fb:a6:da:d3:9a:82:ec:
                    82:8b:b2:70:a3:fc:d0:49:75:18:49:26:b6:27:44:
                    36:8f:44:a6:25:0b:ed:95:6f:6e:f4:76:90:73:83:
                    7e:34:c1:c0:29:64:1b:78:03:7a:65:f1:ec:a2:91:
                    62:c3:2f:92:8d:ad:6a:3d:20:35:34:71:bf:5b:5d:
                    8e:07:2d:17:09:eb:f1:bf:e3:cd:bb:c8:6c:17:65:
                    d6:7a:1c:5c:ed:41:6d:a4:31:e0:0e:27:e5:d7:d9:
                    f4:d5:ea:75:48:0b:1b:df:66:3b:a4:32:12:c2:6e:
                    9e:38:b7:26:67:16:cc:96:8d:46:30:fb:49:82:71:
                    50:d3:0a:be:51:5f:45:29:c7:13:07:fd:dc:f2:3b:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:00:8E:1F:AB:35:4E:71:0E:02:1E:F5:84:3A:EE:E6:4B:7F:2F:62
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:8a:3b:7b:e2:bc:92:1c:04:1a:7f:e1:d9:a0:97:16:b1:
         ff:cd:32:6b:96:09:84:fd:66:84:6d:bb:d0:a9:e6:d0:5e:6a:
         77:a6:2a:74:ed:e6:05:a9:c2:e7:d4:4c:2a:ef:70:fd:1e:57:
         8e:4a:a6:78:3a:c8:8b:b9:9b:9f:b2:62:72:b4:56:75:26:7a:
         cf:9d:39:25:29:38:fd:36:b8:86:21:65:d8:c7:ab:53:cf:ff:
         20:e7:d6:3e:80:ac:35:df:ec:58:cc:cb:e5:45:45:3b:ec:bc:
         3a:bc:fe:09:6e:84:36:8d:ea:27:f7:05:d5:e9:20:e1:53:82:
         05:c6:69:f1:95:9c:1c:47:e0:89:76:1b:c8:bb:35:f1:6d:df:
         18:c1:ee:e7:bc:4e:85:6d:38:d3:2e:0d:7b:35:d3:39:61:4e:
         ca:d6:07:9d:2d:e6:50:71:33:13:a6:df:8f:c2:39:1d:b4:e3:
         0f:68:f7:1a:71:91:45:1e:2a:e0:77:60:c2:d8:48:ef:f8:81:
         2e:60:c1:fc:fe:b3:b0:d6:14:25:a4:5e:be:a2:00:14:16:40:
         0f:ee:05:1b:d3:8e:8a:a1:2e:ff:de:f5:b9:7d:2e:44:46:52:
         0d:98:29:a4:fb:9f:18:7d:4d:c2:ca:eb:d0:3d:4b:64:89:8e:
         07:03:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org