Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633230303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a633230303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          msuPe2LOwy1iH29KFPc5MNF3qGvqGshD3uND2SAzkxk=
Subject key identifier:   14:AD:B8:41:12:96:B4:04:4C:6F:65:E1:C4:94:D9:5B:94:6C:B9:01
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       700A0E769E181DF7A3A91A1E699089E4B4CD6F56
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633230303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:07 +0000
ROA not before:           Wed 03 Apr 2024 18:55:07 +0000
ROA not after:            Thu 03 Apr 2025 19:00:07 +0000
asID:                     262494
IP address blocks:        2804:ad8:c200::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0a:0e:76:9e:18:1d:f7:a3:a9:1a:1e:69:90:89:e4:b4:cd:6f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:07 2024 GMT
            Not After : Apr  3 19:00:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:db:28:ae:e5:9a:18:db:aa:8b:96:76:16:77:
                    a6:53:ee:de:55:d5:f1:b8:02:70:b4:16:31:62:47:
                    9c:b1:9d:94:20:78:48:cc:a2:9a:aa:32:d3:d3:9f:
                    d3:e4:10:53:d5:d5:31:4b:7d:41:4f:72:56:67:2c:
                    b9:1e:75:5d:03:66:53:43:2a:5b:4a:00:8b:ca:d4:
                    ae:1f:66:80:66:76:c0:5c:41:72:e0:4f:49:34:da:
                    6b:78:d0:86:c9:c3:c8:9e:d4:46:d9:1f:63:5e:21:
                    91:f1:88:62:20:58:79:c4:e5:76:28:e4:72:39:16:
                    ae:7c:00:90:47:cf:fb:e3:b5:da:85:c5:5c:df:b4:
                    88:a9:9a:33:48:5d:b3:4a:aa:63:1a:2e:df:26:1d:
                    de:51:e2:e3:40:d2:dd:b2:47:1d:13:66:2d:94:0a:
                    fc:02:58:be:80:ef:31:fe:0b:2e:f0:48:08:88:ee:
                    7b:af:17:1c:8e:45:1e:86:24:2a:12:09:cc:76:f5:
                    b1:c0:75:b9:b1:4c:5c:57:51:4b:7b:8f:69:8d:ab:
                    6c:cc:11:73:3d:b7:53:0a:65:e4:88:9d:e5:d2:44:
                    7f:f0:1d:4d:ed:d0:02:f1:1e:96:72:4c:bb:76:7c:
                    c8:02:13:f3:bb:8b:45:c0:b3:a2:11:b8:a1:a0:37:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AD:B8:41:12:96:B4:04:4C:6F:65:E1:C4:94:D9:5B:94:6C:B9:01
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633230303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:c200::/41

    Signature Algorithm: sha256WithRSAEncryption
         2e:2c:c2:0d:57:2e:d5:ab:75:f9:fd:4e:5f:05:50:91:89:34:
         4c:e3:6f:be:5e:22:e1:bd:1f:09:50:6e:97:ac:0e:b5:b2:d4:
         9b:8b:3b:ff:9e:f2:4d:64:e2:ab:ae:26:a4:c0:42:f4:b5:e0:
         70:46:a3:70:29:04:06:ba:0f:5f:40:e9:b3:21:bd:38:70:6f:
         20:a7:a4:07:fa:3f:3c:07:57:65:a1:22:92:3b:73:b0:c4:34:
         08:ca:f3:03:88:2c:72:72:04:13:30:a2:9b:d9:ec:bb:0c:cc:
         7a:f2:d7:39:43:bf:03:82:30:45:db:b6:75:36:90:13:be:a4:
         76:30:7d:93:a7:2e:b3:04:bb:c1:bd:43:70:2a:c6:f7:4c:00:
         33:33:9c:05:3b:e9:e6:77:8b:75:3c:4e:c3:11:86:2e:3d:d5:
         e4:b2:8e:ff:13:84:b3:d1:59:6e:3d:aa:2e:28:19:c7:fa:03:
         56:7b:56:b8:60:83:d1:98:d5:ec:62:0e:9a:96:eb:93:bb:6d:
         c0:92:13:de:bd:e2:6b:df:b9:0b:24:76:b7:b8:58:26:d2:5e:
         2c:a1:eb:2b:4d:1a:e5:ff:98:c3:91:e3:fa:9b:03:c1:a3:e5:
         f2:dd:83:05:02:1e:b1:be:f1:f0:f0:78:23:7d:54:1a:67:c2:
         18:dd:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org