Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38382e302f32322d3232203d3e20323632343934.roa
File:                     34352e3232362e38382e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          zHlOg0vSd2kKbEFdivWvDMKemu+n/aJoUCsWxrvaTHQ=
Subject key identifier:   CB:AE:74:7D:70:7E:9A:13:F1:CD:93:1B:90:06:C0:84:A5:BA:44:9B
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       756B2492B3AB23A28C7A75743EACBF32E4D855EA
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38382e302f32322d3232203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:09 +0000
ROA not before:           Wed 03 Apr 2024 18:55:09 +0000
ROA not after:            Thu 03 Apr 2025 19:00:09 +0000
asID:                     262494
IP address blocks:        45.226.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6b:24:92:b3:ab:23:a2:8c:7a:75:74:3e:ac:bf:32:e4:d8:55:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:09 2024 GMT
            Not After : Apr  3 19:00:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:f4:a2:08:6d:89:c5:21:51:e0:b4:3a:c1:
                    90:b2:7d:08:4f:1d:f7:eb:54:54:0e:5f:a4:3f:5c:
                    93:ba:07:e6:1d:3f:99:ea:f1:3d:01:8f:ad:d4:86:
                    20:6a:9c:1f:8e:70:1a:2d:cc:59:fc:de:bd:41:db:
                    f7:9a:fd:96:5d:28:ce:a2:73:dc:08:e1:82:84:40:
                    e6:77:de:e1:29:e5:75:1b:1d:d6:26:e2:93:f6:e2:
                    04:51:02:8f:7a:46:01:c6:86:2f:dd:fd:0f:9a:a1:
                    e4:92:86:4b:11:aa:1d:89:47:48:9e:ec:34:33:51:
                    1b:89:a1:e0:22:94:5a:59:96:80:f5:09:0f:c8:b2:
                    ed:09:00:91:48:35:b8:d5:ff:5a:e9:8b:2f:35:b3:
                    c4:64:75:b6:9b:fc:f3:f7:3d:00:d2:51:18:ea:6e:
                    b7:47:f1:64:ff:8a:4b:ab:eb:ca:73:ff:1d:ac:ed:
                    b5:25:20:be:58:fd:4b:1e:d5:47:f5:45:79:e2:99:
                    3c:a8:09:88:a3:bf:c4:b1:6b:5b:79:cd:b7:4d:5c:
                    8a:00:4b:6c:3e:e9:8f:87:4a:4c:f5:62:7b:bb:6e:
                    0c:65:28:43:41:76:3a:d0:9c:bf:07:13:54:f5:dd:
                    24:c4:8a:6c:29:76:86:4f:27:7f:73:a0:4d:3c:c9:
                    b4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AE:74:7D:70:7E:9A:13:F1:CD:93:1B:90:06:C0:84:A5:BA:44:9B
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38382e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:bc:e7:57:d2:bd:ca:7d:87:e3:1b:2e:89:6a:0d:1f:4e:5b:
         7f:e9:15:69:24:c1:38:4e:4a:0d:2f:21:8b:5c:a2:50:21:1b:
         a7:46:e0:0e:b1:46:55:b9:bd:d0:d5:c9:60:87:d9:4b:bf:be:
         ef:ee:88:18:1c:e7:eb:e5:51:04:4d:ef:49:9a:5d:62:9b:8c:
         53:dd:09:93:1b:73:c8:7b:d4:47:ab:dd:b0:77:55:16:50:77:
         31:d9:61:65:0b:dd:3d:8e:7d:5c:67:95:99:d7:48:e2:b2:3a:
         cc:08:0c:46:ce:70:73:6e:e2:70:7b:2d:83:12:97:7b:34:ac:
         27:47:ff:2c:2c:ae:61:38:1d:88:85:f8:5d:59:73:53:65:81:
         11:e9:60:22:84:c7:8a:2d:30:18:8b:4c:67:0b:fe:30:1b:a4:
         bf:03:64:29:bb:47:8c:fe:87:4c:6b:af:4a:ed:e6:64:be:6a:
         02:a6:ad:b1:7d:89:d7:de:b1:df:d8:6d:f1:16:69:0e:5e:82:
         fc:75:f7:cd:dd:21:97:a0:bf:06:36:50:5f:fd:59:53:5b:ab:
         96:3a:4a:87:73:02:b4:9e:10:c9:c0:89:3f:2e:c5:9d:71:54:
         b4:ac:10:86:ab:1a:06:ec:02:36:52:7f:6f:d6:3d:69:96:e9:
         a0:0f:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org