Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38382e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e38382e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          fHKV5EgCOUA6h7F87GTOCX+1eOpcEZ5fYOkg3O28Jik=
Subject key identifier:   67:63:CB:F3:33:7C:07:8F:B2:2C:AC:BA:88:C5:9E:1B:A0:93:73:D4
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       04EBBE1009F60BE797A5326494D3E0BFCC21EC70
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38382e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:06 +0000
ROA not before:           Wed 03 Apr 2024 18:55:06 +0000
ROA not after:            Thu 03 Apr 2025 19:00:06 +0000
asID:                     262494
IP address blocks:        45.226.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:eb:be:10:09:f6:0b:e7:97:a5:32:64:94:d3:e0:bf:cc:21:ec:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:06 2024 GMT
            Not After : Apr  3 19:00:06 2025 GMT
        Subject: CN=3082010A0282010100C73950AF92B91F54456E595412B9C93EA9784443BD35AEA5424E0F21C33AF858F6E93F537EA1045B4AA55AE82CAF6EE890CA22A3F7EC245CB0628E70431906CB7B15984B030B6A6A1C84669974737A8D631FBD739326C6BFF8A4ABA247A8039EAD15E80C800AFCAB751562ACAE46A12A953C18707298F160C9CAF2A0129D6AF8AF60D9E929642FBF07649935AA0E4433ABF6D086A9E627914C8DB4F7023300DFE1F28C808D971873EB1635B506CA8043573D0532FB2C7B7E8E016877C8DACC571D4984E94DF83F929DD42588E0705F8A313CB7F116A11263A1C1C38C83B48D25B73CA5CBE532BA4547707B7854CD2AA833543F35B59750A85432CA48AA36DEF10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:50:af:92:b9:1f:54:45:6e:59:54:12:b9:
                    c9:3e:a9:78:44:43:bd:35:ae:a5:42:4e:0f:21:c3:
                    3a:f8:58:f6:e9:3f:53:7e:a1:04:5b:4a:a5:5a:e8:
                    2c:af:6e:e8:90:ca:22:a3:f7:ec:24:5c:b0:62:8e:
                    70:43:19:06:cb:7b:15:98:4b:03:0b:6a:6a:1c:84:
                    66:99:74:73:7a:8d:63:1f:bd:73:93:26:c6:bf:f8:
                    a4:ab:a2:47:a8:03:9e:ad:15:e8:0c:80:0a:fc:ab:
                    75:15:62:ac:ae:46:a1:2a:95:3c:18:70:72:98:f1:
                    60:c9:ca:f2:a0:12:9d:6a:f8:af:60:d9:e9:29:64:
                    2f:bf:07:64:99:35:aa:0e:44:33:ab:f6:d0:86:a9:
                    e6:27:91:4c:8d:b4:f7:02:33:00:df:e1:f2:8c:80:
                    8d:97:18:73:eb:16:35:b5:06:ca:80:43:57:3d:05:
                    32:fb:2c:7b:7e:8e:01:68:77:c8:da:cc:57:1d:49:
                    84:e9:4d:f8:3f:92:9d:d4:25:88:e0:70:5f:8a:31:
                    3c:b7:f1:16:a1:12:63:a1:c1:c3:8c:83:b4:8d:25:
                    b7:3c:a5:cb:e5:32:ba:45:47:70:7b:78:54:cd:2a:
                    a8:33:54:3f:35:b5:97:50:a8:54:32:ca:48:aa:36:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:CB:F3:33:7C:07:8F:B2:2C:AC:BA:88:C5:9E:1B:A0:93:73:D4
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38382e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:99:b3:7d:ec:06:16:36:5e:77:f4:55:1c:87:2a:9d:d1:0d:
         a3:f8:12:9c:7d:42:9c:ed:11:58:73:b6:2b:b9:4b:0a:d3:0b:
         75:56:8a:b0:dd:73:3a:19:c1:6e:7e:e7:75:79:cf:99:15:02:
         2d:28:0e:ca:f9:d6:3e:8e:a4:a6:58:40:ef:50:e6:20:a2:cb:
         35:1d:c8:cc:75:c3:23:39:9a:18:be:c0:bf:b9:b9:f3:b3:60:
         76:fd:1a:3f:b7:d1:9f:7f:93:97:13:cb:95:9a:22:99:4a:12:
         f7:6f:c3:cc:fc:25:5c:11:2b:13:03:82:48:eb:0c:b5:71:84:
         11:25:0a:07:94:99:b4:e3:76:1f:b5:43:d9:3a:c5:80:cf:1a:
         3b:91:4a:ae:d1:2a:5e:f1:e8:23:97:d3:7c:54:95:f2:d8:97:
         68:b8:9a:28:1f:35:a3:46:9f:57:dd:8b:1e:8a:a7:64:aa:74:
         22:bb:3f:ed:97:38:a8:78:de:07:d6:d1:45:9f:ec:9d:f4:95:
         a4:80:9d:74:75:b3:87:67:7c:d1:5a:9a:cd:4c:fe:61:ba:42:
         f9:0c:51:c2:6f:eb:27:18:2d:ef:5f:fc:ab:4a:93:66:d6:d2:
         87:7c:29:15:b0:94:fb:f5:76:76:cb:79:a0:67:36:28:2e:27:
         fc:e3:ce:69
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUBOu+EAn2C+eXpTJklNPgv8wh7HAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDZaFw0yNTA0MDMxOTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzczOTUwQUY5MkI5MUY1NDQ1
NkU1OTU0MTJCOUM5M0VBOTc4NDQ0M0JEMzVBRUE1NDI0RTBGMjFDMzNBRjg1OEY2
RTkzRjUzN0VBMTA0NUI0QUE1NUFFODJDQUY2RUU4OTBDQTIyQTNGN0VDMjQ1Q0Iw
NjI4RTcwNDMxOTA2Q0I3QjE1OTg0QjAzMEI2QTZBMUM4NDY2OTk3NDczN0E4RDYz
MUZCRDczOTMyNkM2QkZGOEE0QUJBMjQ3QTgwMzlFQUQxNUU4MEM4MDBBRkNBQjc1
MTU2MkFDQUU0NkExMkE5NTNDMTg3MDcyOThGMTYwQzlDQUYyQTAxMjlENkFGOEFG
NjBEOUU5Mjk2NDJGQkYwNzY0OTkzNUFBMEU0NDMzQUJGNkQwODZBOUU2Mjc5MTRD
OERCNEY3MDIzMzAwREZFMUYyOEM4MDhEOTcxODczRUIxNjM1QjUwNkNBODA0MzU3
M0QwNTMyRkIyQzdCN0U4RTAxNjg3N0M4REFDQzU3MUQ0OTg0RTk0REY4M0Y5MjlE
RDQyNTg4RTA3MDVGOEEzMTNDQjdGMTE2QTExMjYzQTFDMUMzOEM4M0I0OEQyNUI3
M0NBNUNCRTUzMkJBNDU0NzcwN0I3ODU0Q0QyQUE4MzM1NDNGMzVCNTk3NTBBODU0
MzJDQTQ4QUEzNkRFRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxzlQr5K5H1RFbllUErnJPql4REO9Na6lQk4PIcM6+Fj26T9TfqEE
W0qlWugsr27okMoio/fsJFywYo5wQxkGy3sVmEsDC2pqHIRmmXRzeo1jH71zkybG
v/ikq6JHqAOerRXoDIAK/Kt1FWKsrkahKpU8GHBymPFgycryoBKdavivYNnpKWQv
vwdkmTWqDkQzq/bQhqnmJ5FMjbT3AjMA3+HyjICNlxhz6xY1tQbKgENXPQUy+yx7
fo4BaHfI2sxXHUmE6U34P5Kd1CWI4HBfijE8t/EWoRJjocHDjIO0jSW3PKXL5TK6
RUdwe3hUzSqoM1Q/NbWXUKhUMspIqjbe8QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGdjy/MzfAePsiysuojFnhugk3PUMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzM0MzUyZTMyMzIzNjJlMzgzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM0MzkzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3i
WDANBgkqhkiG9w0BAQsFAAOCAQEAYZmzfewGFjZed/RVHIcqndENo/gSnH1CnO0R
WHO2K7lLCtMLdVaKsN1zOhnBbn7ndXnPmRUCLSgOyvnWPo6kplhA71DmIKLLNR3I
zHXDIzmaGL7Av7m587Ngdv0aP7fRn3+TlxPLlZoimUoS92/DzPwlXBErEwOCSOsM
tXGEESUKB5SZtON2H7VD2TrFgM8aO5FKrtEqXvHoI5fTfFSV8tiXaLiaKB81o0af
V92LHoqnZKp0Irs/7Zc4qHjeB9bRRZ/snfSVpICddHWzh2d80VqazUz+YbpC+QxR
wm/rJxgt71/8q0qTZtbSh3wpFbCU+/V2dst5oGc2KC4n/OPOaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org