Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          kF78gonYYKKV7HzA/9PxxTi8PYNHYeIwaIqfODNETnw=
Subject key identifier:   5C:06:50:9D:B6:F0:0B:E3:C4:74:E6:F1:7B:AC:0E:40:FF:23:B7:5E
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6DE4B00543F646C153BA6E7569EECFF58586F187
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        168.205.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e4:b0:05:43:f6:46:c1:53:ba:6e:75:69:ee:cf:f5:85:86:f1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:c4:38:c0:9e:52:60:a2:be:b3:6b:43:f0:
                    05:e1:59:09:f4:1e:63:7d:05:5b:92:2e:b8:fb:72:
                    e2:96:00:be:f9:84:52:1e:09:66:a2:e7:91:4b:8c:
                    d6:61:44:96:ca:d4:eb:4a:94:d8:24:37:96:54:fd:
                    96:98:72:46:be:a9:ec:39:ff:fb:25:0d:89:03:f3:
                    f4:42:59:5e:fa:e6:66:0a:8c:30:51:c0:e1:f8:47:
                    4c:11:65:b3:f1:99:00:3a:8d:f7:f1:c9:64:76:be:
                    84:f6:2b:77:f2:3c:4f:50:47:65:e6:db:fc:f7:6b:
                    fc:d6:0c:22:3b:6a:61:8e:a7:29:29:7e:2f:fe:49:
                    7e:2e:25:29:4d:b8:d6:1c:ac:8e:2b:1b:a4:87:d7:
                    30:26:26:24:f9:40:ab:d4:6f:dd:51:8f:6b:e2:ff:
                    92:c9:6a:8e:8a:7e:fd:3e:3a:27:7e:78:14:14:f9:
                    0e:60:20:e7:a1:f4:6b:2e:7c:47:49:3d:84:e6:b6:
                    b0:13:f9:7c:e0:93:50:1b:06:cf:a5:9d:6f:24:cd:
                    90:cc:7e:4f:7c:41:71:1b:5b:56:5a:ab:46:fc:2b:
                    dd:75:b1:b8:fc:87:47:81:52:cf:65:29:91:e6:75:
                    c7:4f:10:46:68:2f:10:7b:10:78:57:f2:e9:a6:3f:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:50:9D:B6:F0:0B:E3:C4:74:E6:F1:7B:AC:0E:40:FF:23:B7:5E
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:a9:2a:58:8b:d4:b9:4f:16:8c:7d:82:f4:a5:e8:2e:8f:
         a2:68:92:12:51:18:2f:3c:d2:1e:cd:9a:91:af:70:99:f4:91:
         21:de:09:87:7c:b7:6f:e4:c0:fa:09:14:aa:84:bc:f8:36:d7:
         1a:28:6b:8e:3d:2c:fc:af:e8:09:c3:46:0d:68:3c:38:96:31:
         c4:8a:5b:60:2a:7e:b7:ff:68:ee:39:5d:f6:76:a4:38:ea:73:
         5c:d5:9d:88:6e:ea:11:77:a6:27:70:aa:60:83:1e:e1:34:d1:
         89:fe:b4:f3:86:1f:e7:42:e0:63:86:e3:ba:07:85:9f:38:27:
         df:d2:d2:93:c8:ad:1f:cf:20:e1:0f:fb:7b:ec:72:d1:11:64:
         a6:dc:d5:6a:ab:6f:31:67:9f:d0:a0:c7:c0:b8:d7:94:fa:3d:
         a8:9c:4e:75:48:95:be:48:4a:e6:b0:61:d0:26:2b:8e:ca:06:
         28:de:df:15:dc:31:a8:b3:9c:16:80:fb:71:e1:d3:7e:84:98:
         e7:ec:7a:bb:fe:35:92:af:a3:ef:13:a7:01:3b:11:9d:06:c9:
         d8:2a:55:81:73:03:54:5c:3f:b3:06:f5:4a:00:64:6e:97:60:
         5e:74:40:40:cc:b1:f4:e6:f2:ef:18:44:f6:4f:39:ff:30:fc:
         6c:7f:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org