Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          li2eGQ4t1ZEJ3rV4aJ99wSmlfu8mSXWLxF0Cv+RRsHw=
Subject key identifier:   73:0E:A4:28:A2:08:24:43:C0:E2:86:87:C0:34:24:61:6D:D1:53:7E
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1C37F91568C81150C8AB7840EF9FB84BB9EDE082
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        168.205.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:37:f9:15:68:c8:11:50:c8:ab:78:40:ef:9f:b8:4b:b9:ed:e0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject: CN=3082010A0282010100CBB3E11E154A88E8E03870D854C5D8BCB3E363F9BD6F64464521AA79CB728B2205F4298E554585CB62E03F05B17B37A59DEE48C7773C93335C2732E7E230ACFD15D051A88F15381DAA770F4BE9E5B7D2375361FF4135A208164C6C7E40FB9D0800591C152EC3A6655A3F959871991910BEBAED44A70921CE81A14C22AC45EA9823E5B08E6695C1101AAC9AA27417282A2E351F3BCB3CF22F6C69924680A3A1AC4F1B4AE38E42B571AFAFAE1CABCF2D61BCBFDE580288D626B6D8E5E964D1275C5F197619C6A199489F10F536ED41079E71CBA34E0257C326579C489050E5E1F86DD3DC68B1378D617F73E98C1364DBFD687655CA9DDCA285FF9BA5D064FA4AF50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:e1:1e:15:4a:88:e8:e0:38:70:d8:54:c5:
                    d8:bc:b3:e3:63:f9:bd:6f:64:46:45:21:aa:79:cb:
                    72:8b:22:05:f4:29:8e:55:45:85:cb:62:e0:3f:05:
                    b1:7b:37:a5:9d:ee:48:c7:77:3c:93:33:5c:27:32:
                    e7:e2:30:ac:fd:15:d0:51:a8:8f:15:38:1d:aa:77:
                    0f:4b:e9:e5:b7:d2:37:53:61:ff:41:35:a2:08:16:
                    4c:6c:7e:40:fb:9d:08:00:59:1c:15:2e:c3:a6:65:
                    5a:3f:95:98:71:99:19:10:be:ba:ed:44:a7:09:21:
                    ce:81:a1:4c:22:ac:45:ea:98:23:e5:b0:8e:66:95:
                    c1:10:1a:ac:9a:a2:74:17:28:2a:2e:35:1f:3b:cb:
                    3c:f2:2f:6c:69:92:46:80:a3:a1:ac:4f:1b:4a:e3:
                    8e:42:b5:71:af:af:ae:1c:ab:cf:2d:61:bc:bf:de:
                    58:02:88:d6:26:b6:d8:e5:e9:64:d1:27:5c:5f:19:
                    76:19:c6:a1:99:48:9f:10:f5:36:ed:41:07:9e:71:
                    cb:a3:4e:02:57:c3:26:57:9c:48:90:50:e5:e1:f8:
                    6d:d3:dc:68:b1:37:8d:61:7f:73:e9:8c:13:64:db:
                    fd:68:76:55:ca:9d:dc:a2:85:ff:9b:a5:d0:64:fa:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:A4:28:A2:08:24:43:C0:E2:86:87:C0:34:24:61:6D:D1:53:7E
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:09:81:96:3a:e7:60:15:b7:1c:a0:99:49:73:f7:b5:22:fd:
         6a:79:12:de:38:1b:3d:a9:fe:b4:29:65:42:44:58:e1:a5:96:
         dd:7a:37:74:1a:ae:5b:4f:e1:26:6d:d9:0e:fb:9d:35:ec:5a:
         90:62:70:e6:32:55:8c:46:4a:5b:29:0a:e5:08:a6:38:11:17:
         d4:39:95:e9:09:66:b3:e0:b1:4d:ed:48:f6:79:dd:6e:f7:c3:
         e4:e7:c5:f2:4a:60:8e:3d:29:eb:39:fb:9a:da:62:14:de:e7:
         63:ae:21:90:e3:03:11:47:01:26:98:de:07:5c:6a:68:03:54:
         22:f7:db:f3:e5:b8:3d:fa:a8:63:b4:ad:1a:4d:19:9c:01:45:
         82:0d:b6:b3:58:0e:ff:86:5a:8f:34:a0:31:8b:b9:09:33:5a:
         44:9c:3d:1f:ff:47:cc:76:1b:f3:62:cf:d6:a8:79:35:8c:d5:
         35:3b:8a:08:8d:a1:6e:bf:cf:41:c0:21:35:8c:47:d1:18:d7:
         92:78:97:a8:f3:cf:6b:2b:31:41:9f:70:a9:34:ec:93:17:7e:
         28:40:35:93:68:5e:15:95:f8:3d:7e:d1:ae:60:f1:b5:69:13:
         28:4a:ff:2f:fb:fe:72:ed:d6:e8:41:6b:60:77:4e:be:11:6a:
         37:ea:2b:e0
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUHDf5FWjIEVDIq3hA75+4S7nt4IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDZaFw0yNTA0MDMxOTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JCM0UxMUUxNTRBODhFOEUw
Mzg3MEQ4NTRDNUQ4QkNCM0UzNjNGOUJENkY2NDQ2NDUyMUFBNzlDQjcyOEIyMjA1
RjQyOThFNTU0NTg1Q0I2MkUwM0YwNUIxN0IzN0E1OURFRTQ4Qzc3NzNDOTMzMzVD
MjczMkU3RTIzMEFDRkQxNUQwNTFBODhGMTUzODFEQUE3NzBGNEJFOUU1QjdEMjM3
NTM2MUZGNDEzNUEyMDgxNjRDNkM3RTQwRkI5RDA4MDA1OTFDMTUyRUMzQTY2NTVB
M0Y5NTk4NzE5OTE5MTBCRUJBRUQ0NEE3MDkyMUNFODFBMTRDMjJBQzQ1RUE5ODIz
RTVCMDhFNjY5NUMxMTAxQUFDOUFBMjc0MTcyODJBMkUzNTFGM0JDQjNDRjIyRjZD
Njk5MjQ2ODBBM0ExQUM0RjFCNEFFMzhFNDJCNTcxQUZBRkFFMUNBQkNGMkQ2MUJD
QkZERTU4MDI4OEQ2MjZCNkQ4RTVFOTY0RDEyNzVDNUYxOTc2MTlDNkExOTk0ODlG
MTBGNTM2RUQ0MTA3OUU3MUNCQTM0RTAyNTdDMzI2NTc5QzQ4OTA1MEU1RTFGODZE
RDNEQzY4QjEzNzhENjE3RjczRTk4QzEzNjREQkZENjg3NjU1Q0E5RERDQTI4NUZG
OUJBNUQwNjRGQTRBRjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy7PhHhVKiOjgOHDYVMXYvLPjY/m9b2RGRSGqectyiyIF9CmOVUWF
y2LgPwWxezelne5Ix3c8kzNcJzLn4jCs/RXQUaiPFTgdqncPS+nlt9I3U2H/QTWi
CBZMbH5A+50IAFkcFS7DpmVaP5WYcZkZEL667USnCSHOgaFMIqxF6pgj5bCOZpXB
EBqsmqJ0FygqLjUfO8s88i9saZJGgKOhrE8bSuOOQrVxr6+uHKvPLWG8v95YAojW
JrbY5elk0SdcXxl2GcahmUifEPU27UEHnnHLo04CV8MmV5xIkFDl4fht09xosTeN
YX9z6YwTZNv9aHZVyp3cooX/m6XQZPpK9QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FHMOpCiiCCRDwOKGh8A0JGFt0VN+MB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzYzODJlMzIzMDM1MmUzMjM0
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNDM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACozfIwDQYJKoZIhvcNAQELBQADggEBAHAJgZY652AVtxygmUlz97Ui/Wp5Et44
Gz2p/rQpZUJEWOGllt16N3QarltP4SZt2Q77nTXsWpBicOYyVYxGSlspCuUIpjgR
F9Q5lekJZrPgsU3tSPZ53W73w+TnxfJKYI49Kes5+5raYhTe52OuIZDjAxFHASaY
3gdcamgDVCL32/PluD36qGO0rRpNGZwBRYINtrNYDv+GWo80oDGLuQkzWkScPR//
R8x2G/Niz9aoeTWM1TU7igiNoW6/z0HAITWMR9EY15J4l6jzz2srMUGfcKk07JMX
fihANZNoXhWV+D1+0a5g8bVpEyhK/y/7/nLt1uhBa2B3Tr4RajfqK+A=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org