Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          Y+2c/R3U1UWpB3C8JMiFTrQXgFTVGMwFPNRJ9RME0oA=
Subject key identifier:   36:63:9A:06:E2:A8:5C:1C:37:22:57:09:11:42:92:E4:E0:CE:8A:6F
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       40EF665A63BE6C10EBD2FDD2F90108DBD499F6CF
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:03 +0000
ROA not before:           Wed 03 Apr 2024 18:55:03 +0000
ROA not after:            Thu 03 Apr 2025 19:00:03 +0000
asID:                     262494
IP address blocks:        2804:ad8:829b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ef:66:5a:63:be:6c:10:eb:d2:fd:d2:f9:01:08:db:d4:99:f6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:03 2024 GMT
            Not After : Apr  3 19:00:03 2025 GMT
        Subject: CN=3082010A0282010100E0965AF5BB8D8FA19CAB44B2E74217C50B45A8AE676862ED94D9A41896B4207AEE841C8FF000E0D9545B19CF5EA7B10FAF6C93F0A6C6943019D588DA2AAE4B6B9EBC894C526A75B4246B39F525C2BB038F0D69A1859897B17AEC097467182108BCB9520BF4234C1B778C41B86390CF56B9C235BFA6D93CA210A2710562F1BB8D4F4533AFAEBAD56AC49EF75EAEB2F194201A28C3A691F9414BC3D8069096B5D61D827BEBAF442600525346356E786F6F920A3DDABC23C03DDE62039E3DDC3CB0636C0C08B8470692AD48839369BE1EB70A01DE4B9AE0AC123EAFDAA261F60536CA34E97F84A04340170B22B40B3FBB7C9E9CC32FCB0A022914A6BF53053B7E790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:5a:f5:bb:8d:8f:a1:9c:ab:44:b2:e7:42:
                    17:c5:0b:45:a8:ae:67:68:62:ed:94:d9:a4:18:96:
                    b4:20:7a:ee:84:1c:8f:f0:00:e0:d9:54:5b:19:cf:
                    5e:a7:b1:0f:af:6c:93:f0:a6:c6:94:30:19:d5:88:
                    da:2a:ae:4b:6b:9e:bc:89:4c:52:6a:75:b4:24:6b:
                    39:f5:25:c2:bb:03:8f:0d:69:a1:85:98:97:b1:7a:
                    ec:09:74:67:18:21:08:bc:b9:52:0b:f4:23:4c:1b:
                    77:8c:41:b8:63:90:cf:56:b9:c2:35:bf:a6:d9:3c:
                    a2:10:a2:71:05:62:f1:bb:8d:4f:45:33:af:ae:ba:
                    d5:6a:c4:9e:f7:5e:ae:b2:f1:94:20:1a:28:c3:a6:
                    91:f9:41:4b:c3:d8:06:90:96:b5:d6:1d:82:7b:eb:
                    af:44:26:00:52:53:46:35:6e:78:6f:6f:92:0a:3d:
                    da:bc:23:c0:3d:de:62:03:9e:3d:dc:3c:b0:63:6c:
                    0c:08:b8:47:06:92:ad:48:83:93:69:be:1e:b7:0a:
                    01:de:4b:9a:e0:ac:12:3e:af:da:a2:61:f6:05:36:
                    ca:34:e9:7f:84:a0:43:40:17:0b:22:b4:0b:3f:bb:
                    7c:9e:9c:c3:2f:cb:0a:02:29:14:a6:bf:53:05:3b:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:9A:06:E2:A8:5C:1C:37:22:57:09:11:42:92:E4:E0:CE:8A:6F
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383239623a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:829b::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:b6:ce:38:50:eb:dc:d0:b1:93:6c:26:d0:49:5f:75:56:
         2b:ef:af:67:3c:d3:4a:ed:c2:28:2d:da:52:d8:08:2b:27:86:
         92:a5:d1:be:06:d6:1c:b3:26:30:6b:e1:f8:a9:bf:9f:67:9e:
         3c:7f:e1:47:70:27:ed:23:68:cc:3f:06:15:94:b0:78:96:06:
         28:f9:37:22:03:b4:ae:97:82:90:5a:1d:3d:9f:a0:71:65:1f:
         18:cd:00:07:d0:97:a4:1b:03:e6:aa:8b:9e:f1:ae:0e:42:76:
         a8:e4:56:e6:d4:68:76:b0:87:9d:b6:7b:c6:89:4c:dd:c1:e9:
         cf:7e:f9:26:0c:5a:d4:e7:61:07:cc:84:83:d1:d7:a6:04:79:
         41:d1:93:03:e9:53:15:6c:d6:27:0e:3d:2a:c7:17:89:69:92:
         8c:68:b5:8b:62:99:b7:47:55:01:1d:e6:59:8b:70:c0:bb:34:
         9f:20:42:79:fb:82:1c:eb:f7:16:e4:96:b3:4e:b2:40:b9:be:
         31:aa:41:73:77:c7:5f:0c:51:71:a7:8f:1a:92:b9:5c:93:7e:
         35:0a:c3:55:10:cc:1f:ed:b2:1c:d8:b1:83:da:5f:05:1b:2c:
         c1:64:b7:89:8e:61:53:20:f9:36:84:b4:48:9c:a8:30:03:c1:
         c9:3a:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org