Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132342e3136382e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          b70nu4U6LVyMR8TIAjTszIoz5S8Ne5AKvgiF9smkIHc=
Subject key identifier:   EC:66:BA:97:F2:1C:34:E0:A7:9F:FD:08:10:33:A6:B1:6F:24:8B:F5
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       57CE3332B9A1CFDA1285901D93DE17D142619224
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        177.124.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ce:33:32:b9:a1:cf:da:12:85:90:1d:93:de:17:d1:42:61:92:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject: CN=3082010A0282010100A895DCA1875449591DD576DC5C2E03CCEFA54ED01CAEEA22A6C1960239CF99BF28C3A1DA359F77D2F421BC6A4EE3F27EFACAFB7E3227CBF63CE9879031EFDCEBA36C52C3A2A2CD06DD69FC9B6C70149818B4420F13CA544BF65E0581CB4DEF30C3DC618F2C95D1EA4342C7078A13311E5BCFBA84758D6F346A5B1B2612BD9862080520501A715BA6885D7ED5D8F7D453460AE82961BACF87CFC0080334434FFD4307249988048BCA9AFD89EE70FFB78C18D416D2A0FF4518D4DBE4E3CBAE1ACD11B9309A26D9951396575333816590E3918EC2C2C41F91B8505C1CE8C84512F1BD6CAAE67A33A27EEF63122937E17AB95AD5FC21D484E0F83C0981B9038170A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:dc:a1:87:54:49:59:1d:d5:76:dc:5c:2e:
                    03:cc:ef:a5:4e:d0:1c:ae:ea:22:a6:c1:96:02:39:
                    cf:99:bf:28:c3:a1:da:35:9f:77:d2:f4:21:bc:6a:
                    4e:e3:f2:7e:fa:ca:fb:7e:32:27:cb:f6:3c:e9:87:
                    90:31:ef:dc:eb:a3:6c:52:c3:a2:a2:cd:06:dd:69:
                    fc:9b:6c:70:14:98:18:b4:42:0f:13:ca:54:4b:f6:
                    5e:05:81:cb:4d:ef:30:c3:dc:61:8f:2c:95:d1:ea:
                    43:42:c7:07:8a:13:31:1e:5b:cf:ba:84:75:8d:6f:
                    34:6a:5b:1b:26:12:bd:98:62:08:05:20:50:1a:71:
                    5b:a6:88:5d:7e:d5:d8:f7:d4:53:46:0a:e8:29:61:
                    ba:cf:87:cf:c0:08:03:34:43:4f:fd:43:07:24:99:
                    88:04:8b:ca:9a:fd:89:ee:70:ff:b7:8c:18:d4:16:
                    d2:a0:ff:45:18:d4:db:e4:e3:cb:ae:1a:cd:11:b9:
                    30:9a:26:d9:95:13:96:57:53:33:81:65:90:e3:91:
                    8e:c2:c2:c4:1f:91:b8:50:5c:1c:e8:c8:45:12:f1:
                    bd:6c:aa:e6:7a:33:a2:7e:ef:63:12:29:37:e1:7a:
                    b9:5a:d5:fc:21:d4:84:e0:f8:3c:09:81:b9:03:81:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:66:BA:97:F2:1C:34:E0:A7:9F:FD:08:10:33:A6:B1:6F:24:8B:F5
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3136382e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:d5:fd:cb:35:a5:5d:7a:e9:0f:eb:36:65:f3:81:e7:bb:
         33:5f:d5:0b:ed:cd:1b:a8:0c:37:4c:b0:46:87:90:38:a8:35:
         c0:58:b2:07:e5:b5:77:2f:d9:45:67:c5:f0:c6:44:59:37:ae:
         ad:c6:d0:fa:78:eb:19:a5:b0:10:7b:33:b1:e5:51:79:9c:9e:
         2e:e2:57:94:27:20:71:17:af:74:dc:2f:9f:f5:2c:29:16:8c:
         3f:03:86:61:ac:0a:78:2e:6a:cc:84:53:7d:1b:be:72:ac:ce:
         fd:40:5d:b8:33:22:07:32:21:28:e9:f4:f3:1c:29:8b:4c:c6:
         bd:fa:e2:b4:db:bc:c8:fe:6c:2a:11:e7:ee:36:27:f3:de:eb:
         81:cd:55:48:23:3f:f0:bc:31:4a:83:74:bf:fb:a9:d0:07:8f:
         bd:45:10:43:8e:f8:b7:e2:35:9d:07:6b:c9:46:5d:a4:76:0d:
         42:08:bb:1d:e7:be:b1:30:17:47:d7:f6:51:0f:dd:20:d5:69:
         c5:be:70:d5:3a:f6:b2:32:16:a7:fa:cd:b2:44:fc:dd:66:79:
         1c:83:9c:6c:86:b7:12:78:67:2c:1c:a1:78:7e:63:01:06:4c:
         08:f4:1b:eb:91:e9:65:e7:98:46:fd:6a:48:fe:9f:fc:fc:c9:
         ba:f8:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org