Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          70QA+X+nPfsSdQwxDOCIJLzuBPStooObtpnZgWK8hZU=
Subject key identifier:   4A:6A:FE:C3:EA:2F:AC:4A:2C:2E:2B:25:DE:16:42:FC:75:BB:8E:FE
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       05010118C79DA33CEC352848D27DA76C0AB52742
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        2804:ad8:4300::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:01:01:18:c7:9d:a3:3c:ec:35:28:48:d2:7d:a7:6c:0a:b5:27:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3c:97:4a:d7:93:e0:87:de:5f:7f:50:95:50:
                    29:c7:87:c2:37:72:d2:9d:63:f8:e3:d4:06:3b:10:
                    38:2f:23:04:70:5a:a4:f7:00:c4:2b:82:b3:8e:d3:
                    33:79:3a:5a:ae:d0:c6:58:65:e1:27:75:b7:f9:2e:
                    05:cf:d7:4d:fe:2b:be:20:bb:8f:73:cf:cd:c4:4d:
                    d4:e1:a2:f5:91:e6:d5:7f:ae:f2:b9:aa:9b:35:f2:
                    bd:e7:43:77:0c:5a:0f:e9:d1:9c:df:bd:f8:02:c1:
                    02:94:7f:a7:b1:da:42:75:26:44:69:a3:c7:ec:53:
                    b8:18:f0:26:8a:f1:4a:41:83:18:62:83:e6:c1:d0:
                    09:f6:f6:16:be:62:d0:6b:59:56:50:e3:06:ff:fa:
                    e6:62:89:b7:be:c3:b2:ea:93:28:96:3b:47:08:be:
                    8f:72:40:47:84:fb:55:17:c8:cf:71:b3:b8:07:58:
                    49:30:1f:73:45:b7:78:5b:68:47:a5:a4:e9:e2:ac:
                    57:84:bb:f6:38:02:20:45:17:ed:92:68:c5:9d:4e:
                    05:fb:9a:34:d6:eb:c2:62:fd:2d:5f:93:1b:4c:04:
                    d5:a2:09:2a:5a:e7:5f:e9:6c:69:d6:c5:0f:95:3a:
                    6f:4e:74:e0:4c:c2:3a:f5:0e:7b:00:ed:61:56:7c:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:FE:C3:EA:2F:AC:4A:2C:2E:2B:25:DE:16:42:FC:75:BB:8E:FE
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a343330303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4300::/41

    Signature Algorithm: sha256WithRSAEncryption
         50:ef:bc:a0:ba:5b:27:0d:b8:d6:54:2e:04:93:4e:9e:a9:c9:
         66:18:84:6c:3a:6c:43:b2:c7:28:95:eb:ba:a1:0b:3c:39:4f:
         6b:8b:b7:ad:59:4a:89:fc:d4:f5:43:6d:e4:1b:c0:ea:3a:c4:
         4b:93:c2:79:8b:57:43:f3:66:fe:51:10:55:37:df:b8:e0:0d:
         97:e3:ae:68:7c:08:7a:45:7b:e9:ae:3c:24:f6:c2:67:70:9c:
         07:da:e4:16:42:d6:d4:b8:75:d3:db:e0:50:53:af:5c:aa:b8:
         df:79:f5:e7:06:60:f8:28:42:a6:b0:f5:f9:d4:00:d9:62:89:
         56:17:74:0b:0a:85:8d:69:15:ef:fa:4f:5f:c2:08:91:c7:4e:
         1e:8a:e1:a3:2c:5c:cb:6c:d3:f5:53:30:26:11:a9:a7:2e:44:
         9e:d2:87:05:b8:3b:5e:d2:21:21:72:b3:8b:0f:99:c1:f9:06:
         c3:51:4c:b6:66:c9:c4:8b:75:c4:b8:85:5d:3c:b8:0a:48:36:
         16:78:ec:c1:4a:44:e5:07:74:11:2d:e7:66:78:b6:6d:65:8b:
         82:6a:d5:5d:aa:19:cf:59:95:99:d3:ea:7d:a3:5c:3f:fb:32:
         ad:9e:1e:b6:a4:7c:4b:6e:ec:8f:66:66:c4:5a:ed:cc:be:03:
         90:14:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org