Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a343030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a313531303a343030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          uchbQAzLKLTwtwvmvcgAJkdD3OBnqFVdYrgQkEe3QfQ=
Subject key identifier:   4D:F9:0C:08:12:98:93:79:57:3C:31:83:B7:4B:44:9A:B3:E9:AF:82
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       624AC5D48CDC615090092F1E99244E9F2B4F5210
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a343030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        2804:1510:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:c5:d4:8c:dc:61:50:90:09:2f:1e:99:24:4e:9f:2b:4f:52:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:4a:25:83:26:60:4c:d1:05:93:f9:33:f1:
                    91:59:6e:7c:39:90:d4:c8:e7:f6:9e:fb:3d:db:20:
                    b8:e9:81:85:44:4c:5d:cf:2a:05:c0:bd:e9:60:db:
                    40:68:bc:57:31:4f:c4:46:00:fb:24:54:86:f1:41:
                    a8:30:5d:ad:0f:01:8b:18:66:64:27:18:ca:aa:ab:
                    c7:3a:6b:2c:83:c9:72:e1:57:eb:35:94:8c:62:4a:
                    62:11:fa:8d:0d:9f:38:c6:b7:06:0c:64:70:cd:46:
                    31:53:16:48:c8:90:2e:2a:d1:43:84:af:1a:57:fa:
                    cc:92:0e:82:2d:db:bc:2d:f9:3b:f3:35:1c:b9:4a:
                    4f:44:5e:60:a2:b4:7c:3b:f5:5d:d2:c1:fe:9e:1f:
                    33:80:aa:8d:0e:5f:fb:cc:52:97:c4:16:59:69:d8:
                    d0:0b:d4:63:74:67:48:ea:a9:27:54:f6:ff:78:1e:
                    07:80:e7:bd:f8:aa:a2:57:1b:e4:18:86:d2:f9:af:
                    aa:6d:2d:19:b5:f4:0a:bf:4c:49:08:64:ff:dc:d0:
                    de:b1:41:96:b2:f0:c0:59:e4:f5:e9:55:54:a2:b2:
                    d1:1b:57:09:2c:fb:38:87:ee:22:62:02:c9:4a:ff:
                    58:2c:d5:d9:1b:e2:d4:51:e7:b5:8d:36:9b:29:76:
                    77:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:0C:08:12:98:93:79:57:3C:31:83:B7:4B:44:9A:B3:E9:AF:82
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a313531303a343030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1510:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:00:e9:4f:05:d7:f4:13:4d:c5:9d:e2:1c:46:4a:d3:32:49:
         ff:87:eb:1a:b9:44:f6:69:91:20:93:b4:65:f1:fb:52:18:8d:
         0b:c9:94:03:8a:8d:7a:77:fb:2e:5a:b1:50:7f:61:cf:80:f5:
         b9:ea:63:07:fd:cc:98:2b:5f:6c:0a:b6:e9:7e:2d:41:a7:ed:
         f8:5a:6e:e2:c9:99:be:ca:ad:d7:52:a7:1e:cf:20:77:f9:b1:
         63:8b:70:27:e2:66:26:7a:5b:16:93:6f:94:ca:ff:46:66:7d:
         90:a2:89:04:90:ba:c4:3f:47:de:49:cf:6f:77:92:46:36:94:
         c4:79:5e:52:8b:e4:da:04:cf:e0:94:a4:d5:af:4f:45:1d:2d:
         60:1c:46:3c:02:d7:98:09:f4:7f:65:52:88:04:c6:3c:34:f8:
         46:c8:76:ef:71:55:0c:57:00:bd:de:fb:67:ea:a8:85:01:28:
         0e:a3:9e:cb:73:ca:63:44:78:85:eb:e0:b5:08:94:7a:c0:8d:
         03:28:56:dc:b3:18:2e:92:50:78:1a:ec:09:1c:4c:ff:bb:5a:
         54:de:be:d6:8c:75:86:08:d5:91:b4:97:e7:e4:51:28:fa:e3:
         90:1f:bd:8e:82:66:74:75:58:c4:62:1d:fe:41:77:4b:5c:1e:
         ee:84:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org