Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa
File:                     3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          VYXRonZeNemFRAFXKwSyRxj6ZuSfnYLgjCfYpQkzbSk=
Subject key identifier:   BB:16:41:9F:63:49:46:4D:1F:F9:A9:7A:B6:51:DA:48:7C:A1:3E:77
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       526199022A76C021CFA38078EA35A129C23072DB
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        179.191.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:99:02:2a:76:c0:21:cf:a3:80:78:ea:35:a1:29:c2:30:72:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject: CN=3082010A0282010100BE76E7AD9C2B4093BAF18E0ED84E3489985AA4D9FE5CE45CC42A95899F9A8809F59B35C5158DA36A03214EBAEDEF24B1B5AD79C56038747608F6D3C3C86F5857B3D2FF08F8C5D964010B4231E793A44459471F6E67C3BD22A7DBC76E427BE97110C2C1C8D069638FE325EBD86185546674A06F675AA6814322EA990D08D1C7A5EFBA63CFCAF3206B91C57230454FEA313986DADD2B3882209981A0D1F2C7074A1C8BE1416C9D7A5A4C284D243F06FA2DFAE8488C3C48EFAC8800C583842076C0A892A0221B563CE307D29716185BC491EED1DC5B89348F1FE9A721B15ABE5E8C34E8DA1DCAB0E49F74E3DAED2A3CB319CBC958B03657E4F79D4CDBBB7418F7090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:e7:ad:9c:2b:40:93:ba:f1:8e:0e:d8:4e:
                    34:89:98:5a:a4:d9:fe:5c:e4:5c:c4:2a:95:89:9f:
                    9a:88:09:f5:9b:35:c5:15:8d:a3:6a:03:21:4e:ba:
                    ed:ef:24:b1:b5:ad:79:c5:60:38:74:76:08:f6:d3:
                    c3:c8:6f:58:57:b3:d2:ff:08:f8:c5:d9:64:01:0b:
                    42:31:e7:93:a4:44:59:47:1f:6e:67:c3:bd:22:a7:
                    db:c7:6e:42:7b:e9:71:10:c2:c1:c8:d0:69:63:8f:
                    e3:25:eb:d8:61:85:54:66:74:a0:6f:67:5a:a6:81:
                    43:22:ea:99:0d:08:d1:c7:a5:ef:ba:63:cf:ca:f3:
                    20:6b:91:c5:72:30:45:4f:ea:31:39:86:da:dd:2b:
                    38:82:20:99:81:a0:d1:f2:c7:07:4a:1c:8b:e1:41:
                    6c:9d:7a:5a:4c:28:4d:24:3f:06:fa:2d:fa:e8:48:
                    8c:3c:48:ef:ac:88:00:c5:83:84:20:76:c0:a8:92:
                    a0:22:1b:56:3c:e3:07:d2:97:16:18:5b:c4:91:ee:
                    d1:dc:5b:89:34:8f:1f:e9:a7:21:b1:5a:be:5e:8c:
                    34:e8:da:1d:ca:b0:e4:9f:74:e3:da:ed:2a:3c:b3:
                    19:cb:c9:58:b0:36:57:e4:f7:9d:4c:db:bb:74:18:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:16:41:9F:63:49:46:4D:1F:F9:A9:7A:B6:51:DA:48:7C:A1:3E:77
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/3137392e3139312e35362e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:38:a2:39:58:93:fe:5e:21:0c:98:48:43:e6:31:73:f8:54:
         e4:f6:7b:cc:47:76:dd:31:60:c1:a7:d6:94:27:19:37:04:dd:
         9f:c7:06:74:a5:70:bc:e7:77:5a:8e:ad:44:09:cb:04:ce:b4:
         5e:49:cf:ec:1c:39:8e:c2:54:57:e1:87:7c:23:66:a5:ba:d0:
         fd:95:f5:4e:aa:c8:b4:33:f6:a8:55:f1:32:5f:bd:69:85:20:
         b6:c4:1a:fe:15:37:10:0b:90:94:9b:30:ef:cc:d3:c5:eb:bf:
         c0:65:49:02:be:0d:7c:75:2e:67:58:2a:0b:66:e7:70:3e:36:
         8f:db:37:11:6b:2f:ae:6c:bd:c2:ef:5b:14:03:42:97:34:23:
         7c:6f:da:b9:82:89:15:6c:e1:9e:d7:6b:22:7e:92:bd:36:c1:
         14:0a:c7:0e:78:52:d9:97:ff:a5:01:e1:fe:c8:5b:8c:5c:03:
         fc:f3:33:69:df:70:53:16:bc:f5:6f:63:8b:b9:8f:79:ee:2a:
         b4:47:20:4c:e0:84:cb:e2:94:1b:b5:77:8a:dc:7b:dd:d6:72:
         07:73:ba:31:41:59:e3:c3:8e:57:3a:53:b3:b3:24:49:72:fa:
         f9:74:33:3c:33:cb:fa:ea:bf:b7:41:54:62:e0:e1:14:87:45:
         30:a5:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org