Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          6RTag0WKoxWW+Plfuf2fFaR5QPZSm3K5mFTSuV657Xo=
Subject key identifier:   59:C7:12:77:8D:AA:81:03:5F:85:53:1C:1C:1C:1F:1B:1B:AB:E6:27
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       7ABB543A481C819E252EB73409E972512F978D30
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        168.205.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bb:54:3a:48:1c:81:9e:25:2e:b7:34:09:e9:72:51:2f:97:8d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:de:26:6f:0a:35:13:f9:ec:72:ef:5a:f7:
                    10:38:42:8d:cb:4f:d4:c7:04:93:37:1c:21:65:22:
                    57:58:c7:15:ae:7f:9d:17:e0:48:f6:24:9a:fe:4d:
                    cb:b8:c9:f7:a1:50:7b:b0:6e:85:13:73:ad:f2:3a:
                    5e:b4:ed:93:87:f3:b3:08:8c:cf:38:f8:8e:94:7d:
                    20:41:fe:62:bd:bf:30:19:39:9c:f4:d8:33:5c:0d:
                    1c:f2:61:31:02:6f:97:74:5a:4e:81:d8:80:37:63:
                    3c:76:1e:05:8b:4e:81:dd:92:cb:14:c1:82:9a:27:
                    0a:d7:d7:98:f0:70:69:1c:85:ba:5b:41:7c:99:26:
                    fb:79:c3:16:80:e5:c3:ee:1b:75:56:1d:09:ae:04:
                    eb:15:83:cf:cc:94:eb:96:ac:cf:f1:f0:5b:56:a5:
                    d1:fd:c3:7b:14:66:8f:ec:f7:56:b6:0c:b4:66:3b:
                    ba:a1:87:2e:2b:ee:b4:91:a4:b9:dc:0c:0d:1d:dd:
                    47:26:75:9c:f4:53:ea:41:04:9a:1c:5b:c0:ae:30:
                    f3:62:48:a2:e9:ef:6c:3d:0d:ae:16:9f:1e:5d:7c:
                    08:bd:20:4d:bf:4c:0e:61:a0:57:aa:93:16:ce:c7:
                    cf:5a:ca:85:6d:85:06:3f:fa:aa:23:76:b1:89:10:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C7:12:77:8D:AA:81:03:5F:85:53:1C:1C:1C:1F:1B:1B:AB:E6:27
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d0:1b:c9:45:41:4c:8a:99:87:75:56:98:d5:b2:aa:f8:19:
         69:13:12:8e:65:2b:34:6f:20:46:8a:ec:44:8f:10:9a:b6:a3:
         24:cb:67:33:c3:d8:9f:01:df:bc:9a:11:30:d1:42:8f:26:1c:
         b7:21:b9:5a:06:2e:6d:0d:4f:12:89:9b:d9:d5:bf:12:52:9e:
         3e:bd:25:25:09:de:f3:9a:70:a3:96:11:00:05:df:84:d2:f4:
         36:27:97:b2:26:ad:88:39:76:d6:25:05:13:db:a0:da:de:66:
         d3:3b:92:c7:53:3a:c0:54:b9:5f:01:a0:f4:c2:1b:21:3f:48:
         f7:a2:23:73:5c:02:10:5c:b5:1f:d8:05:66:2d:e9:8b:89:fe:
         14:66:d2:bd:7f:37:63:5b:d6:b3:0c:b8:02:bc:94:a4:09:c2:
         45:70:05:09:05:bb:08:56:cb:e5:49:23:2e:35:be:1a:f2:e0:
         5a:78:40:64:5d:ea:14:7b:63:75:f4:0f:00:95:49:d3:bc:e8:
         2c:a6:2d:22:b8:74:2a:e7:fe:99:94:fe:1a:b1:65:aa:a3:c2:
         4b:72:74:ae:a2:80:4c:aa:06:c4:a5:78:37:90:0e:42:b1:1f:
         63:c5:74:f4:35:fe:82:60:22:36:92:41:47:92:73:68:40:ff:
         17:d8:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org