Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa
File:                     323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa (raw, json)
Hash identifier:          UgfgcK4cFuKAquaVmLrBUHcjNfXzbKi3/tIL9DTHgTk=
Subject key identifier:   3B:61:DE:8A:53:C8:9C:47:21:AC:94:3D:52:16:DE:B9:60:A2:0E:A3
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       31D7EEDB81084CE348E100B8C259AF984D0A14A4
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     252494
IP address blocks:        2804:4678:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:ee:db:81:08:4c:e3:48:e1:00:b8:c2:59:af:98:4d:0a:14:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:6f:be:c3:45:26:8d:35:2c:77:c4:d5:e4:
                    c4:56:7a:c4:15:0b:59:14:9b:2e:0c:b3:7c:b7:b8:
                    ea:f9:2b:f7:bb:41:46:0a:02:09:b3:8d:29:f0:52:
                    ab:0e:41:ef:36:04:c5:f8:bb:fb:52:6c:33:f8:26:
                    ba:54:20:45:50:8f:17:d6:84:9e:ac:5d:b4:3d:68:
                    e3:8c:72:99:c3:5e:41:e6:a1:a0:f9:aa:ea:3c:b9:
                    e6:c3:38:04:e6:f6:51:57:d2:61:99:15:82:e8:17:
                    10:d0:d0:9a:23:e2:26:b2:50:5b:a8:15:41:cc:82:
                    93:6f:ce:b3:6e:0c:70:6c:45:1b:1a:32:2f:62:a9:
                    f6:a1:2a:3c:4a:51:5a:59:8e:b6:ed:a0:64:b3:7b:
                    be:b5:8b:72:52:83:0f:42:ed:21:b6:bf:bc:59:55:
                    aa:30:99:b0:05:d1:96:75:8d:00:0e:82:c7:42:14:
                    19:19:d3:d2:de:c5:1b:cd:f9:f5:d6:75:71:4a:bf:
                    1b:df:7b:ef:bd:a3:06:de:c7:1e:f4:6b:eb:1e:bf:
                    20:f4:d7:72:d1:21:ae:bc:11:33:56:ab:50:9e:f4:
                    5b:e3:eb:2f:19:4a:4e:f1:67:d4:ec:62:04:3a:86:
                    af:03:0e:03:3f:77:d0:6a:c3:fe:e6:05:12:1d:2c:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:61:DE:8A:53:C8:9C:47:21:AC:94:3D:52:16:DE:B9:60:A2:0E:A3
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a343030303a3a2f33342d3334203d3e20323532343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:20:78:57:ce:37:b2:cf:36:8d:62:85:99:f0:f2:ed:7c:
         25:e3:c4:68:5f:6b:b3:7c:6b:aa:55:1d:46:43:7f:be:ea:cb:
         82:41:9c:67:94:53:1e:c5:9c:13:9a:40:1b:36:a4:4e:c0:d9:
         fc:1e:23:0e:a7:b0:75:c7:2a:d4:66:ba:25:16:8c:fc:7c:f4:
         5e:ee:5d:64:c3:65:90:83:df:55:29:d9:a8:32:f1:96:97:15:
         b0:1f:71:78:a7:aa:13:30:ac:40:1f:99:71:21:a7:e7:44:5a:
         eb:4c:17:39:23:88:c9:04:23:e6:ad:f5:46:fe:e1:a4:3d:55:
         45:e3:26:3a:3e:1d:bb:80:93:fd:ec:73:a9:35:ac:06:b5:56:
         48:97:27:73:90:bb:fe:02:a4:98:18:5d:37:33:06:0a:18:64:
         38:db:5d:96:14:3e:cd:cc:46:18:ea:a9:88:a2:90:4b:2b:44:
         b6:28:7e:30:62:ba:d2:3f:26:11:36:9e:89:10:3f:1d:37:38:
         31:3d:d8:98:e8:50:20:5d:bd:d9:29:a7:3b:97:ba:39:51:14:
         7d:90:0d:47:9c:d4:9b:9e:ea:b7:9a:19:3d:55:27:7a:5d:fa:
         06:99:76:ff:6c:0f:f0:ef:82:27:40:40:82:a9:3c:ff:fc:5b:
         bb:22:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:29:09 2024 by rpki-client on console-fra.rpki-client.org