Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132362e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3132352e3132362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          sqSYBCc/b/Z38jMjH+eVChDRCnGS9qX5pp8Qi8c3CeQ=
Subject key identifier:   DC:09:68:0B:A0:B8:55:9D:84:8B:F2:8B:42:E3:7A:A0:23:6B:D7:51
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       2FFB73A48D7A975A682A7E56C50411FDC1B3672B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132362e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        179.125.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fb:73:a4:8d:7a:97:5a:68:2a:7e:56:c5:04:11:fd:c1:b3:67:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:d3:66:bc:91:e4:96:fd:e5:a0:85:64:05:
                    18:3d:bb:a7:bb:23:04:5c:13:a9:ca:da:88:9f:ca:
                    9b:65:07:c2:4d:80:fc:79:97:73:ee:b9:70:6d:7f:
                    b1:39:43:59:6d:fe:0c:36:da:3b:18:6c:11:72:d4:
                    f6:7f:13:61:ba:7b:96:25:01:70:5f:4c:15:12:38:
                    c7:6f:aa:9f:af:43:85:01:ae:0d:01:ef:7b:d1:f9:
                    9f:42:6a:e8:a6:a2:82:9c:43:f7:90:85:49:83:6d:
                    4c:9c:34:11:c0:db:72:0d:9d:c3:c9:75:f2:03:6e:
                    04:86:2e:5e:6e:a7:23:05:4b:71:82:0e:d7:b1:26:
                    9a:51:63:88:08:56:01:0c:97:c2:38:e6:95:3d:38:
                    2b:a6:5e:cf:5d:24:a6:ff:e7:9a:4a:77:f6:7a:b1:
                    6a:1f:1c:0a:d7:2c:71:8b:4f:7e:56:2b:01:05:bc:
                    4e:0b:f6:43:99:15:32:a8:f6:b3:f9:b8:3b:0b:9b:
                    65:72:58:06:0c:28:66:d4:d7:42:ae:3e:9a:f0:d9:
                    c5:c8:e7:8a:a3:a4:4d:dd:db:b3:e4:f9:8a:4b:e3:
                    96:f7:be:6a:46:3f:ec:9f:71:c7:20:cf:89:f6:ac:
                    fc:a7:3b:92:d7:b2:a4:8f:c4:df:a3:94:02:69:5e:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:68:0B:A0:B8:55:9D:84:8B:F2:8B:42:E3:7A:A0:23:6B:D7:51
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:e4:ef:74:ca:03:27:58:2e:d1:a4:97:36:d1:62:76:42:35:
         da:ee:b2:b1:cb:dd:87:69:88:a9:b8:5c:0e:dc:62:7f:61:59:
         ed:54:bd:11:b6:64:8e:6d:95:21:6d:8a:f7:bf:fe:1e:eb:5b:
         47:b4:d0:cb:6d:75:2d:f9:93:15:0b:6e:af:1f:04:8e:ba:86:
         cb:28:c5:52:48:19:24:ae:9c:67:9b:2c:76:db:7e:0a:8f:73:
         cb:9f:d6:ee:c3:12:98:1f:ac:2a:21:ec:a3:48:dd:72:66:0e:
         9d:24:ef:ea:60:4c:60:80:c4:3f:7e:8d:12:2f:62:07:3d:fb:
         05:e1:56:43:e6:f4:52:5f:5c:08:e8:13:0a:06:a5:63:a6:d9:
         3c:8d:53:01:65:19:d2:71:08:ff:67:61:2a:9b:ad:a7:8e:e8:
         0c:07:7c:55:ab:5e:e1:22:53:35:04:81:7e:dc:cd:72:08:09:
         c8:a3:42:fa:8d:8f:44:5b:4b:56:52:25:a5:0f:1c:93:e3:97:
         1d:16:09:9d:ab:bc:e4:08:b4:55:21:48:4b:ac:54:e0:f2:b1:
         af:22:30:7f:8a:e7:86:56:17:13:ac:17:07:ae:cc:13:80:d1:
         a5:3e:c7:4d:d5:6a:29:28:89:30:eb:fc:a3:34:8e:27:66:30:
         dd:86:a3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org