Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          UKsbaO5+VIhmLK+wm6TI9NoNmCOqTWACiawBeH+pilY=
Subject key identifier:   C0:10:EE:AB:B9:D0:B4:5E:CF:38:97:D0:6E:8D:9D:A5:8E:A4:39:40
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       652893F22A138B973E46C4FDFA828A487C1BD7CC
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        2804:ad8:82a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:28:93:f2:2a:13:8b:97:3e:46:c4:fd:fa:82:8a:48:7c:1b:d7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:8a:05:20:e3:0c:b4:0c:cf:17:59:5f:36:
                    dc:47:99:2f:e7:87:7e:00:9a:65:d0:4c:d3:6d:db:
                    12:b3:82:d7:0b:e1:b1:a5:85:ac:57:2b:cb:66:d0:
                    b6:0a:e2:9d:7a:af:07:fc:a3:65:d2:59:de:92:a0:
                    64:b1:c1:3c:5c:26:22:2b:22:21:dc:7e:10:d2:38:
                    3e:12:07:93:03:04:21:87:ce:2d:d9:63:8a:61:52:
                    59:92:b8:13:35:30:f2:73:fd:6a:2a:fd:a1:3b:4e:
                    fe:d7:d8:40:61:c5:f2:86:2b:a7:52:28:c2:82:b5:
                    ce:c4:16:f1:fa:d4:4b:3b:e7:e7:14:66:21:05:76:
                    76:86:7c:18:3c:e8:cb:fb:78:f4:f0:61:5e:a9:b8:
                    92:45:1e:53:bb:42:8f:5b:40:b6:cf:f8:a1:6d:41:
                    22:cd:d8:01:e9:bc:72:7b:ca:d2:16:51:b2:c4:ba:
                    83:a4:fa:cb:36:78:cf:f1:54:86:eb:95:9e:fe:ba:
                    48:48:18:07:b0:c6:d5:8d:b0:b2:36:d2:e5:e4:c8:
                    83:54:30:2f:18:5e:ee:66:c7:36:5e:54:cb:97:bb:
                    23:4b:59:c7:b4:09:61:9c:e9:dc:a6:6b:bb:b6:66:
                    c9:1c:ef:d3:4e:30:39:c0:b7:8f:8d:48:15:36:c3:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:10:EE:AB:B9:D0:B4:5E:CF:38:97:D0:6E:8D:9D:A5:8E:A4:39:40
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:82a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:ee:41:92:32:71:2e:35:2e:a3:ed:35:eb:32:e2:8c:f0:
         b8:40:ac:a7:db:c8:50:25:ec:ab:e0:50:f3:27:6b:b0:d0:80:
         d3:f9:71:1a:a1:99:80:3e:e6:c8:b1:1a:a6:4e:50:a6:09:84:
         46:da:c4:31:61:44:c7:55:96:a2:f5:9f:05:55:01:e7:4d:61:
         a2:0e:f9:fe:8b:fa:22:91:00:bf:87:e1:86:c1:8c:54:3d:27:
         cc:be:ce:3b:f4:9a:84:61:ee:85:49:82:e9:27:c3:59:dd:c7:
         0e:e0:1e:b9:5c:0d:f0:d6:f8:1e:3e:33:5f:56:3e:32:55:99:
         fc:c4:00:53:b9:c5:f6:eb:fc:2c:ed:d8:fb:49:82:91:51:47:
         70:22:dc:76:e5:dd:94:fa:2c:1d:20:0b:6d:9d:fc:ba:ab:27:
         19:04:63:8d:54:70:c7:76:5a:26:cf:af:f1:4d:0f:7c:a8:50:
         1c:8e:ca:68:4e:46:2a:95:af:a8:a6:6d:97:7f:f4:d8:69:de:
         82:aa:97:ea:fe:4e:ed:0c:b2:7c:26:0a:ec:a5:c8:b5:bc:fc:
         78:7f:60:e3:ec:6a:f7:1b:f4:6e:cb:c2:a9:12:60:12:21:d9:
         b9:c4:c3:e1:08:c6:0e:44:4e:bf:5a:88:85:72:e9:ed:13:c5:
         ea:d7:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org