Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa
File:                     3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          7H7dXOqHOSOfuoZl0wqJJorE6Lrihyc3nX1vwuHBj1s=
Subject key identifier:   0C:85:BA:53:BF:5B:D7:F1:45:75:C9:06:D9:5E:A6:3A:80:81:0E:72
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2530147A0CE5610F2D4145EC3941CBA5B0955F86
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        168.205.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:30:14:7a:0c:e5:61:0f:2d:41:45:ec:39:41:cb:a5:b0:95:5f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:41:05:91:ed:21:96:c3:fc:d7:af:69:e6:
                    e9:68:0f:0c:92:d7:26:b3:00:83:64:b1:5d:62:ad:
                    9f:8e:87:bf:b2:9f:95:2f:35:f8:17:13:88:3f:81:
                    6a:e6:6f:45:c4:89:ed:b9:5d:6d:10:c9:da:47:59:
                    4e:18:24:81:52:10:49:95:a1:3a:22:64:b3:8a:26:
                    00:c6:19:21:76:6e:07:4b:03:da:e7:bd:41:ff:84:
                    ba:ed:3e:7e:0e:6f:37:8e:5f:b1:06:b9:a4:11:e4:
                    47:65:73:08:85:e2:8a:6e:d8:43:03:ec:2a:42:db:
                    cf:7b:42:7d:ec:9c:b2:cf:47:9c:d1:d6:0e:62:9e:
                    92:3d:b2:f5:78:00:bb:c2:d1:18:56:16:84:c3:fb:
                    ea:97:9d:45:b9:22:92:0a:c0:f0:98:9f:7b:2d:ee:
                    f1:bd:02:80:ac:c1:0f:9e:30:19:ee:7c:32:6f:b6:
                    36:3e:20:1f:24:bb:4f:d7:ca:1c:cf:be:df:f2:78:
                    1d:b9:97:ad:26:b0:60:b7:e8:f9:55:38:4d:83:fc:
                    0f:d5:4a:4d:c9:b4:10:67:9c:aa:1f:1c:c3:07:57:
                    74:c2:80:cf:34:94:fd:e1:1f:51:6e:2b:4c:b8:53:
                    06:62:5c:37:43:ad:39:af:d7:a7:37:41:f4:10:e4:
                    9b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:BA:53:BF:5B:D7:F1:45:75:C9:06:D9:5E:A6:3A:80:81:0E:72
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:10:f4:65:6a:48:61:9d:5c:49:ee:6f:64:d6:35:a6:27:cc:
         a7:2c:11:b5:5c:33:10:d8:60:3b:1c:59:39:61:5f:2d:04:99:
         21:17:84:6e:9d:45:84:c5:e7:25:3d:9d:6d:e1:2f:15:04:bd:
         53:6f:8f:fb:9e:f6:39:d5:d0:a3:a2:77:31:9f:3f:bb:ea:6c:
         ea:cc:b4:88:c5:03:4f:05:82:74:59:ea:4d:b5:1e:92:80:8f:
         69:f3:1c:b3:df:a1:62:8b:f0:1d:19:bb:72:7f:d1:f1:d0:4a:
         ff:75:03:03:2f:c2:f4:0d:e4:30:d0:05:da:d6:fc:c4:2c:04:
         63:39:ac:4b:d9:0d:5a:ce:13:d9:20:84:d9:4e:4b:ae:29:5f:
         13:61:a7:8c:07:44:a4:5b:b2:0c:e3:53:9d:41:ee:03:a4:ed:
         0e:b1:5e:f1:68:64:18:52:de:5d:6b:0e:41:81:96:50:3f:72:
         60:4b:67:43:fb:3b:ae:84:04:8f:75:10:d8:30:37:7a:69:0b:
         40:4c:eb:54:de:95:fa:97:c7:7b:7c:f2:c4:a0:df:8b:28:f4:
         99:b3:0b:93:92:9f:a0:35:ae:93:14:c7:66:b2:82:e1:eb:95:
         dd:bc:07:8a:5f:e8:72:07:8a:2f:3b:43:13:f8:53:bd:8e:fa:
         0a:32:89:5b
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUJTAUegzlYQ8tQUXsOUHLpbCVX4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDdaFw0yNTA0MDMxOTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDkwODQxMDU5MUVEMjE5NkMz
RkNEN0FGNjlFNkU5NjgwRjBDOTJENzI2QjMwMDgzNjRCMTVENjJBRDlGOEU4N0JG
QjI5Rjk1MkYzNUY4MTcxMzg4M0Y4MTZBRTY2RjQ1QzQ4OUVEQjk1RDZEMTBDOURB
NDc1OTRFMTgyNDgxNTIxMDQ5OTVBMTNBMjI2NEIzOEEyNjAwQzYxOTIxNzY2RTA3
NEIwM0RBRTdCRDQxRkY4NEJBRUQzRTdFMEU2RjM3OEU1RkIxMDZCOUE0MTFFNDQ3
NjU3MzA4ODVFMjhBNkVEODQzMDNFQzJBNDJEQkNGN0I0MjdERUM5Q0IyQ0Y0NzlD
RDFENjBFNjI5RTkyM0RCMkY1NzgwMEJCQzJEMTE4NTYxNjg0QzNGQkVBOTc5RDQ1
QjkyMjkyMEFDMEYwOTg5RjdCMkRFRUYxQkQwMjgwQUNDMTBGOUUzMDE5RUU3QzMy
NkZCNjM2M0UyMDFGMjRCQjRGRDdDQTFDQ0ZCRURGRjI3ODFEQjk5N0FEMjZCMDYw
QjdFOEY5NTUzODREODNGQzBGRDU0QTREQzlCNDEwNjc5Q0FBMUYxQ0MzMDc1Nzc0
QzI4MENGMzQ5NEZERTExRjUxNkUyQjRDQjg1MzA2NjI1QzM3NDNBRDM5QUZEN0E3
Mzc0MUY0MTBFNDlCNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2QhBBZHtIZbD/NevaebpaA8MktcmswCDZLFdYq2fjoe/sp+VLzX4
FxOIP4Fq5m9FxIntuV1tEMnaR1lOGCSBUhBJlaE6ImSziiYAxhkhdm4HSwPa571B
/4S67T5+Dm83jl+xBrmkEeRHZXMIheKKbthDA+wqQtvPe0J97Jyyz0ec0dYOYp6S
PbL1eAC7wtEYVhaEw/vql51FuSKSCsDwmJ97Le7xvQKArMEPnjAZ7nwyb7Y2PiAf
JLtP18ocz77f8ngduZetJrBgt+j5VThNg/wP1UpNybQQZ5yqHxzDB1d0woDPNJT9
4R9RbitMuFMGYlw3Q605r9enN0H0EOSbVwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FAyFulO/W9fxRXXJBtlepjqAgQ5yMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzYzODJlMzIzMDM1MmUzMjM0
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGozfIwDQYJKoZIhvcNAQELBQADggEBABMQ9GVqSGGdXEnub2TWNaYnzKcsEbVc
MxDYYDscWTlhXy0EmSEXhG6dRYTF5yU9nW3hLxUEvVNvj/ue9jnV0KOidzGfP7vq
bOrMtIjFA08FgnRZ6k21HpKAj2nzHLPfoWKL8B0Zu3J/0fHQSv91AwMvwvQN5DDQ
BdrW/MQsBGM5rEvZDVrOE9kghNlOS64pXxNhp4wHRKRbsgzjU51B7gOk7Q6xXvFo
ZBhS3l1rDkGBllA/cmBLZ0P7O66EBI91ENgwN3ppC0BM61TelfqXx3t88sSg34so
9JmzC5OSn6A1rpMUx2ayguHrld28B4pf6HIHii87QxP4U72O+goyiVs=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:35 2024 by rpki-client on console-ams.rpki-client.org