Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          HcI9/mgvQz/BRMyGoeDf46KfCULPjRj4lX22bClo5UU=
Subject key identifier:   A8:99:9A:D7:25:5B:BC:45:17:7E:A0:F9:8D:94:5B:77:3E:42:89:DA
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       01DDC3778A2E4223070944934FD5596838F2082B
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        179.125.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:dd:c3:77:8a:2e:42:23:07:09:44:93:4f:d5:59:68:38:f2:08:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:9d:19:fb:64:f2:3f:e7:a6:34:95:08:b1:
                    10:31:9f:c1:e9:12:79:80:2c:71:5a:02:af:17:eb:
                    c6:89:04:89:95:01:d6:96:9a:4e:1d:23:6e:63:25:
                    cf:b8:f0:5e:7e:d1:ac:98:a8:02:53:0b:2a:94:c8:
                    fa:c7:62:f2:5a:56:9b:e0:f3:55:56:bf:67:e4:3c:
                    9c:69:a5:74:d8:b0:71:54:a2:b1:15:29:f5:78:78:
                    70:cd:22:e5:5e:a5:f7:39:ea:ec:2a:d6:17:49:30:
                    f3:64:87:75:60:da:72:1b:e8:6d:65:cb:02:e2:a2:
                    a2:06:b2:e3:16:2c:f3:29:39:28:1a:bd:51:09:69:
                    ad:83:88:db:1e:fc:c3:63:11:8b:f9:e2:a2:29:c4:
                    d4:82:e5:a4:ba:d3:ae:8d:08:90:26:04:d4:e2:be:
                    e8:21:fe:08:6d:d9:c5:b6:37:ab:3a:06:d5:c9:18:
                    6a:a1:9b:2f:c6:e2:80:75:2a:e9:b7:cf:c9:ec:6e:
                    23:c2:52:09:e6:74:21:3f:ec:ae:8c:50:ba:72:98:
                    8d:f1:74:b2:fe:38:fe:6a:f1:6b:20:9b:b5:95:6c:
                    02:be:87:fa:29:82:cb:52:ee:32:be:ae:26:5e:4f:
                    41:70:35:65:d5:06:f3:dc:0c:85:27:a5:11:91:8f:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:9A:D7:25:5B:BC:45:17:7E:A0:F9:8D:94:5B:77:3E:42:89:DA
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3132352e3132372e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:25:f6:2d:d6:d5:fc:d5:c7:f1:75:fb:8e:40:77:47:97:a3:
         ea:5d:87:c9:05:7a:b1:c3:cd:18:d5:8e:10:32:10:db:f3:fb:
         9b:1d:28:f6:e9:cf:f6:84:16:8d:77:ea:5e:d0:0a:6e:c8:67:
         44:8a:40:57:40:5b:48:d7:be:ef:6b:06:80:59:86:93:8b:3d:
         48:f7:b1:39:d4:c6:3f:dd:80:63:86:bd:ba:00:13:35:c1:5a:
         29:23:da:86:6b:05:f8:9b:ae:0a:19:d7:97:22:9b:6a:9a:87:
         03:91:69:de:a4:27:48:70:e3:51:88:d0:a2:10:31:20:be:1f:
         78:1c:08:0f:e0:8e:11:ce:e5:e1:83:e3:d1:e4:95:88:2c:88:
         ff:0b:e6:d0:7b:1a:d9:0c:e0:3d:2d:e2:04:11:4c:3e:54:b2:
         1e:75:94:c0:c9:f7:ce:f9:8a:cb:86:a5:8e:62:7b:1f:91:d9:
         16:7f:43:91:42:82:5e:ee:39:6c:73:4d:ac:c7:b2:4a:5b:16:
         c6:b1:d2:1a:67:06:2c:a6:36:cf:9b:24:ec:91:b9:29:5a:e2:
         15:13:ed:49:2b:2e:f7:5b:6b:1c:1b:ff:b1:e7:5d:f0:db:45:
         46:6d:91:0e:6d:e3:ee:b4:3f:c1:ac:96:fa:de:69:03:28:77:
         b5:10:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org