Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633930303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a633930303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          XvprD1kl3pVXmxZdx92KCwgYkucZVUrW6pyk/I+wgRk=
Subject key identifier:   11:B8:B4:3A:EE:99:35:FE:FF:39:F0:B3:7A:0E:69:BC:98:32:34:1D
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       52A67CEF75B6FC2163A3DEE8623413B6EB4D43FA
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633930303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Mon 15 Apr 2024 18:38:02 +0000
ROA not before:           Mon 15 Apr 2024 18:33:02 +0000
ROA not after:            Tue 15 Apr 2025 18:38:02 +0000
asID:                     262494
IP address blocks:        2804:ad8:c900::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a6:7c:ef:75:b6:fc:21:63:a3:de:e8:62:34:13:b6:eb:4d:43:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr 15 18:33:02 2024 GMT
            Not After : Apr 15 18:38:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:bb:80:c3:b7:72:f7:90:00:16:35:11:5a:
                    8d:95:b4:86:56:e5:bf:1a:48:8f:27:98:f8:d5:93:
                    72:96:ad:12:be:04:5c:dc:b2:9b:10:d5:21:6c:83:
                    d9:83:4c:7b:86:aa:aa:0b:42:85:ff:47:84:c3:cd:
                    49:2d:f6:db:25:1a:06:c3:1c:32:f6:87:4a:94:bd:
                    e0:e8:e4:0b:4c:a5:5d:d0:b8:4f:42:30:31:45:5a:
                    f4:2f:2b:54:f6:37:b3:3c:61:31:fe:18:09:03:d0:
                    cb:0d:7d:51:ae:27:79:0f:f1:98:9a:c9:e9:aa:1a:
                    4e:17:44:5f:f2:4c:08:ca:c1:39:d8:5f:e3:f2:f2:
                    af:0f:87:1e:6f:07:26:8c:ba:a0:ed:bc:a0:b8:05:
                    59:96:69:02:49:1e:03:22:8d:a0:71:95:3e:8c:b4:
                    1e:1c:72:4e:78:f3:9e:80:98:3c:22:54:29:90:9a:
                    c8:f7:af:8b:51:6d:d1:29:1e:71:73:3f:76:74:cd:
                    0f:9a:3e:c3:43:02:4b:81:84:a8:d7:f2:42:71:08:
                    01:bb:f1:86:5e:4a:77:d0:5c:2d:c0:c0:18:e7:19:
                    56:fa:50:bd:8f:d5:07:15:02:30:45:2e:0f:50:f8:
                    4d:f4:4c:81:82:43:bf:6b:1f:e5:72:4c:75:a2:8a:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:B4:3A:EE:99:35:FE:FF:39:F0:B3:7A:0E:69:BC:98:32:34:1D
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a6164383a633930303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:c900::/41

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:9c:6f:35:2d:39:bc:8a:48:b6:8b:54:f0:13:b6:fa:52:
         f5:24:8e:23:41:18:81:7b:8d:a0:09:a2:88:96:8d:aa:e4:14:
         3e:88:45:52:9c:1d:a0:b7:3e:4e:ce:07:10:85:1c:d9:cb:51:
         9d:b9:ef:55:85:53:d3:a5:92:7f:44:75:13:4f:14:18:bd:35:
         f0:3a:0c:1a:16:69:e3:04:a1:fd:10:ec:3c:31:b2:8b:7e:0d:
         55:ea:e1:b7:54:02:bd:b6:e4:a3:81:23:62:24:7f:3f:17:b7:
         cf:3e:bd:54:69:d6:8a:97:a6:8f:f3:f8:8a:3e:9b:82:78:b0:
         66:8f:b5:d6:15:f9:18:57:0b:4a:4a:45:c4:b0:82:45:92:5b:
         ae:52:e7:78:b0:9e:22:13:63:79:a3:5c:e6:be:98:3a:88:59:
         85:7c:64:5d:10:56:5f:d5:5f:92:18:1c:6c:8c:27:02:fe:83:
         2f:4b:d3:47:7d:08:e2:a1:dc:fa:e7:5a:38:5b:dd:4b:9c:0e:
         c4:6e:0a:5c:53:0b:11:11:57:e9:75:43:b4:6d:e7:7d:d9:65:
         0f:b8:ef:2a:e6:d8:45:b9:1a:42:f7:17:3f:51:b7:85:a1:8f:
         94:b5:d5:07:2d:22:34:81:71:8e:c8:6f:57:c0:db:0a:4c:63:
         ad:59:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org