Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          XMWeZ5Rt/aFqohnjTPYERhRnYU+8BIRuBEzJbLu5bI4=
Subject key identifier:   AF:84:0F:65:5D:72:58:EA:5C:AE:59:04:BA:BC:DD:90:80:5E:FC:A7
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       6F76CE0A7A56DCA70986FFC96D72020D67747FCE
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        2804:ad8:180::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:76:ce:0a:7a:56:dc:a7:09:86:ff:c9:6d:72:02:0d:67:74:7f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject: CN=3082010A0282010100AD5A7DDA339E28FF451A4E098A28CC11951A893D77A9FA2F4FB65FF684C19BB6C7222002081B0D1F3EFB501DA54001BD9D70F9A24904C6CC4B619F398088DF9C6452420C43D81BF69E445C8A90650550D6FAD984E54F9B26D1228FFBB03D1CD07B566DE127642418B031383DBEACF5B150ED1E94CD842CD9582D7D278759541EC4819EE84E64A3DB3DA327BF36F3FBA511F0A5A6E13B850941888C0AC601642DDB912131E469FA6690572DE8D1ED5CD8E109E02D497DA2FD4EA40C01097637676E12E8EFD3A78417AF0D1D1F5C843F49C301A8E883A77060D890F40663BAF89034512B95C8C031C8F477A69AE207A4A759378F97EAE355A47D6831C9DBB54E9B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:7d:da:33:9e:28:ff:45:1a:4e:09:8a:28:
                    cc:11:95:1a:89:3d:77:a9:fa:2f:4f:b6:5f:f6:84:
                    c1:9b:b6:c7:22:20:02:08:1b:0d:1f:3e:fb:50:1d:
                    a5:40:01:bd:9d:70:f9:a2:49:04:c6:cc:4b:61:9f:
                    39:80:88:df:9c:64:52:42:0c:43:d8:1b:f6:9e:44:
                    5c:8a:90:65:05:50:d6:fa:d9:84:e5:4f:9b:26:d1:
                    22:8f:fb:b0:3d:1c:d0:7b:56:6d:e1:27:64:24:18:
                    b0:31:38:3d:be:ac:f5:b1:50:ed:1e:94:cd:84:2c:
                    d9:58:2d:7d:27:87:59:54:1e:c4:81:9e:e8:4e:64:
                    a3:db:3d:a3:27:bf:36:f3:fb:a5:11:f0:a5:a6:e1:
                    3b:85:09:41:88:8c:0a:c6:01:64:2d:db:91:21:31:
                    e4:69:fa:66:90:57:2d:e8:d1:ed:5c:d8:e1:09:e0:
                    2d:49:7d:a2:fd:4e:a4:0c:01:09:76:37:67:6e:12:
                    e8:ef:d3:a7:84:17:af:0d:1d:1f:5c:84:3f:49:c3:
                    01:a8:e8:83:a7:70:60:d8:90:f4:06:63:ba:f8:90:
                    34:51:2b:95:c8:c0:31:c8:f4:77:a6:9a:e2:07:a4:
                    a7:59:37:8f:97:ea:e3:55:a4:7d:68:31:c9:db:b5:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:84:0F:65:5D:72:58:EA:5C:AE:59:04:BA:BC:DD:90:80:5E:FC:A7
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a3138303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:180::/41

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:b7:cd:18:52:00:ab:99:f9:b1:7d:e6:a2:bc:73:ea:a3:
         f7:0d:c4:03:c8:44:19:63:05:32:21:97:e6:de:b7:bb:91:1e:
         28:96:af:73:27:3e:3e:19:0c:6a:38:6a:bb:6a:8d:56:99:16:
         e9:eb:04:7d:f9:fa:5c:b7:df:71:13:a2:33:f2:43:9f:c3:81:
         59:da:ed:8e:14:d9:e6:cc:c3:d2:49:3f:b2:51:96:bb:e1:54:
         5f:ad:e9:7c:d6:b4:3e:b8:1b:00:ab:60:e4:30:25:35:1a:ae:
         5e:1c:a1:eb:e5:a7:63:ea:03:11:3a:93:48:0a:23:6c:72:b8:
         e8:b3:06:1b:9d:50:48:ba:bd:2e:d2:c8:ee:2f:d6:ea:97:f2:
         6b:26:ab:de:e5:cf:61:01:58:d8:fc:1e:41:fe:0a:57:bf:5e:
         9b:f4:10:50:14:05:d4:51:a3:62:26:a7:4f:60:8f:35:a6:22:
         55:21:0b:e5:43:7e:59:be:d1:0c:81:c5:f1:a8:46:87:0b:c9:
         9d:fe:33:e1:b3:b3:d0:67:0e:29:ac:51:62:73:1b:c4:c8:45:
         f0:b5:e8:8b:54:47:8e:88:11:7b:fe:c8:df:ed:85:87:82:89:
         6e:2f:f7:ac:10:30:36:f4:a7:e4:cd:1e:6b:54:f8:5d:b6:fa:
         01:4c:ce:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org