Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa
File:                     3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          siVRFYF346mX22Re4j+I7W5i9z+YBuJPis7LpgWnQ3U=
Subject key identifier:   26:E7:8F:55:FC:53:04:5E:11:BF:A8:EB:6A:18:F4:9E:BF:E9:93:4F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       148A56C1B8FBF8619AF7E992E28954D4A0C50082
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        177.124.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:8a:56:c1:b8:fb:f8:61:9a:f7:e9:92:e2:89:54:d4:a0:c5:00:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:ca:30:5d:68:95:07:75:6e:c5:55:c1:b8:
                    39:b4:3e:e0:7e:cf:80:c9:00:bc:76:19:20:c3:03:
                    7e:d0:38:a5:f5:ed:2c:c5:e3:72:bc:44:80:cd:8d:
                    26:14:07:25:cf:79:99:c6:57:ee:92:4c:62:a1:be:
                    03:10:33:fc:69:18:2e:dd:75:be:33:67:44:a3:6b:
                    6a:f3:38:92:fd:3d:b4:ad:dd:19:63:33:05:6d:ae:
                    eb:ee:af:3c:56:14:8f:fd:7f:e7:67:b2:04:92:e2:
                    70:80:02:2f:7d:69:b3:f0:10:4a:b6:ac:2f:bf:ce:
                    5c:43:32:65:28:01:0a:b8:51:83:25:eb:ed:6c:8b:
                    8a:7c:c0:b6:5f:a9:e9:b8:a1:14:c0:08:fd:69:ed:
                    dc:71:5d:45:fa:2a:fb:1c:99:f8:2e:b7:65:9e:41:
                    3c:51:5b:fc:ce:c5:d6:2b:c9:3b:38:57:01:5a:ca:
                    1f:7b:be:e3:c4:b9:42:a9:97:e7:ca:22:21:b0:95:
                    5c:e8:7d:30:47:14:e1:41:0b:34:57:15:1a:1b:81:
                    f9:64:e4:92:7d:b0:a6:e2:9d:e3:cc:e5:a4:21:fe:
                    c0:e7:6b:a5:62:6f:08:cc:e0:dc:fc:c9:48:ba:f3:
                    37:f3:0e:04:50:34:b1:c9:30:c9:52:43:dc:8d:c4:
                    e0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:8F:55:FC:53:04:5E:11:BF:A8:EB:6A:18:F4:9E:BF:E9:93:4F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137372e3132342e3137302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:24:62:90:9f:a6:f4:5e:ec:39:2f:c8:a3:ae:32:10:b9:d6:
         2a:08:60:68:5b:1e:2a:94:12:e3:1a:d5:18:a7:ca:ec:21:4c:
         af:f9:f1:01:df:43:42:ef:8d:5f:8f:a5:06:64:58:cc:f8:ea:
         03:e8:0d:43:c7:c8:c8:f1:1a:9d:5b:76:8a:49:fe:22:37:9e:
         06:dd:ea:73:e0:55:64:32:8e:cf:89:ed:82:57:59:0e:22:2e:
         2c:dc:c9:ff:71:9d:e9:61:cd:e4:08:2c:9f:b2:01:b3:ee:3a:
         9b:c1:0a:e7:f9:3e:e6:be:a5:e6:4e:66:60:d4:cb:50:ec:44:
         6b:d9:d9:ca:a1:2e:b4:5c:d4:29:c6:f2:4d:64:f3:58:9e:58:
         11:89:36:3b:1c:b0:a8:44:99:fe:e4:4b:7d:5f:1a:bc:db:87:
         99:cf:a1:51:40:b6:c3:5f:3c:af:cf:fa:ef:1a:a5:8d:cb:94:
         b3:a1:59:8e:50:ee:ea:c8:a7:5c:76:c1:92:04:38:71:bf:12:
         d7:9d:be:2d:0c:d7:a8:dd:0b:f5:a7:37:85:e3:cb:1f:68:f7:
         52:3f:06:fa:ed:6d:48:0a:f9:da:84:b9:02:46:1c:e8:41:43:
         81:74:3c:a0:aa:af:35:98:90:e7:c3:6d:00:f5:be:cc:37:38:
         d3:2e:96:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:53 2024 by rpki-client on console-fra.rpki-client.org