Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa
File:                     3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          eGnQPQ5WHCNFUT20iLhub0haOxtDy7C/V7/sPSfhKAU=
Subject key identifier:   72:4D:64:2D:17:8D:92:C7:89:08:44:80:5B:E3:F8:63:35:8A:1F:05
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       336E8F57F43C86DD239C31D39F5AED24897ECA9F
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        170.82.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6e:8f:57:f4:3c:86:dd:23:9c:31:d3:9f:5a:ed:24:89:7e:ca:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:d4:51:01:ca:f1:62:15:08:d7:eb:76:6c:
                    6a:f0:cd:ff:aa:ed:2f:5a:17:fe:04:d9:d1:d5:d5:
                    8f:ca:2e:98:4a:31:1b:1f:9f:39:c2:13:de:22:54:
                    1f:89:65:85:12:7a:ae:9f:c9:36:b9:6d:29:6b:b1:
                    0a:54:8c:a2:5b:9f:b1:69:b1:c6:5d:e9:06:f8:1f:
                    ff:9d:7a:cb:bb:69:08:ce:72:f0:cb:6f:f7:e0:9f:
                    63:57:8c:cf:d3:30:51:43:9c:96:52:53:fd:70:41:
                    6e:3e:6b:16:db:c5:b5:ab:f5:16:65:25:e4:04:94:
                    7e:8c:fe:64:44:57:d3:65:8e:27:1f:f2:4f:87:fe:
                    6f:a7:69:53:43:25:97:8a:b7:85:f5:19:3a:bb:bc:
                    c5:fa:71:9b:d4:cd:53:9e:8c:e8:dc:2d:5e:38:df:
                    ed:49:34:1b:1c:c6:b5:1c:ff:57:dd:ab:39:40:e5:
                    9c:46:72:ee:f4:7e:e4:74:7d:b1:00:7a:a4:e3:ad:
                    79:65:9d:bf:8a:65:0a:51:1f:80:a3:a1:7a:d3:f8:
                    4c:bc:92:df:b1:d8:1b:42:3c:de:c0:62:6e:d1:b3:
                    d0:e2:af:62:96:cf:f9:09:15:b9:d0:a6:e5:71:03:
                    8c:6a:5c:cd:30:20:fb:42:18:8a:2a:d8:62:e7:fb:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4D:64:2D:17:8D:92:C7:89:08:44:80:5B:E3:F8:63:35:8A:1F:05
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137302e38322e3132362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:c4:ce:b2:95:8f:6d:95:14:07:de:0d:86:4b:70:1a:69:
         38:8a:17:84:e7:54:b3:f7:90:e1:fb:fd:70:a0:9a:8d:bb:6c:
         18:2b:36:fd:0b:f3:0d:fd:40:19:37:34:c5:cb:43:05:bc:ed:
         33:04:d9:ec:ed:e5:16:dc:06:fe:d8:7d:22:97:89:42:2a:09:
         dd:e1:ff:2f:e1:b9:ae:6d:94:1c:8a:68:cc:06:a3:90:e7:0e:
         3e:2c:64:66:66:c5:01:7d:74:d2:ad:98:1a:5c:a5:62:70:f3:
         c4:10:70:57:76:0b:22:97:12:28:1b:5e:4f:7a:8c:c1:ed:3b:
         09:0a:9c:58:6c:e6:b0:c6:16:cd:2b:e0:87:24:ce:f0:c2:06:
         85:c0:93:16:7d:62:e3:2f:47:d5:b5:09:91:46:f1:9b:a5:07:
         07:ac:a6:5a:90:62:a4:29:d8:2c:34:19:c9:1a:74:15:bd:f9:
         c0:45:39:56:63:6b:5d:af:c7:19:e1:ff:2b:ed:9e:42:32:3d:
         36:b9:a9:46:b6:e1:17:24:a8:86:1f:5c:dd:dc:72:7d:ec:f4:
         b8:b8:bd:7c:0b:bf:d5:47:01:39:77:16:c8:ae:7d:f2:27:dd:
         a0:36:33:35:39:35:2d:4b:a7:18:cf:b9:b3:a6:e9:5b:7c:aa:
         f3:7f:b9:c4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUM26PV/Q8ht0jnDHTn1rtJIl+yp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDNaFw0yNTA0MDMxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJCRUQ0NTEwMUNBRjE2MjE1
MDhEN0VCNzY2QzZBRjBDREZGQUFFRDJGNUExN0ZFMDREOUQxRDVENThGQ0EyRTk4
NEEzMTFCMUY5RjM5QzIxM0RFMjI1NDFGODk2NTg1MTI3QUFFOUZDOTM2Qjk2RDI5
NkJCMTBBNTQ4Q0EyNUI5RkIxNjlCMUM2NURFOTA2RjgxRkZGOUQ3QUNCQkI2OTA4
Q0U3MkYwQ0I2RkY3RTA5RjYzNTc4Q0NGRDMzMDUxNDM5Qzk2NTI1M0ZENzA0MTZF
M0U2QjE2REJDNUI1QUJGNTE2NjUyNUU0MDQ5NDdFOENGRTY0NDQ1N0QzNjU4RTI3
MUZGMjRGODdGRTZGQTc2OTUzNDMyNTk3OEFCNzg1RjUxOTNBQkJCQ0M1RkE3MTlC
RDRDRDUzOUU4Q0U4REMyRDVFMzhERkVENDkzNDFCMUNDNkI1MUNGRjU3RERBQjM5
NDBFNTlDNDY3MkVFRjQ3RUU0NzQ3REIxMDA3QUE0RTNBRDc5NjU5REJGOEE2NTBB
NTExRjgwQTNBMTdBRDNGODRDQkM5MkRGQjFEODFCNDIzQ0RFQzA2MjZFRDFCM0Qw
RTJBRjYyOTZDRkY5MDkxNUI5RDBBNkU1NzEwMzhDNkE1Q0NEMzAyMEZCNDIxODhB
MkFEODYyRTdGQjcxNjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwr7UUQHK8WIVCNfrdmxq8M3/qu0vWhf+BNnR1dWPyi6YSjEbH585
whPeIlQfiWWFEnqun8k2uW0pa7EKVIyiW5+xabHGXekG+B//nXrLu2kIznLwy2/3
4J9jV4zP0zBRQ5yWUlP9cEFuPmsW28W1q/UWZSXkBJR+jP5kRFfTZY4nH/JPh/5v
p2lTQyWXireF9Rk6u7zF+nGb1M1Tnozo3C1eON/tSTQbHMa1HP9X3as5QOWcRnLu
9H7kdH2xAHqk4615ZZ2/imUKUR+Ao6F60/hMvJLfsdgbQjzewGJu0bPQ4q9ils/5
CRW50KblcQOMalzNMCD7QhiKKthi5/txZwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHJNZC0XjZLHiQhEgFvj+GM1ih8FMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzMxMzczMDJlMzgzMjJlMzEzMjM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzQzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
qlJ+MA0GCSqGSIb3DQEBCwUAA4IBAQAk88TOspWPbZUUB94NhktwGmk4iheE51Sz
95Dh+/1woJqNu2wYKzb9C/MN/UAZNzTFy0MFvO0zBNns7eUW3Ab+2H0il4lCKgnd
4f8v4bmubZQcimjMBqOQ5w4+LGRmZsUBfXTSrZgaXKVicPPEEHBXdgsilxIoG15P
eozB7TsJCpxYbOawxhbNK+CHJM7wwgaFwJMWfWLjL0fVtQmRRvGbpQcHrKZakGKk
KdgsNBnJGnQVvfnARTlWY2tdr8cZ4f8r7Z5CMj02ualGtuEXJKiGH1zd3HJ97PS4
uL18C7/VRwE5dxbIrn3yJ92gNjM1OTUtS6cYz7mzpulbfKrzf7nE
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:35 2024 by rpki-client on console-ams.rpki-client.org