Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e38392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          ub7hVB6kM7ZCJnj3cEhH5kZI473GMmEfJnXVMxvhMOE=
Subject key identifier:   E7:2E:C4:65:4B:8E:9A:D2:0B:FB:C4:B4:85:AD:22:A8:1F:33:C3:33
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       1E9F774B53E04F3EE9EF45062C32091F93CC4CCB
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:05 +0000
ROA not before:           Wed 03 Apr 2024 18:55:05 +0000
ROA not after:            Thu 03 Apr 2025 19:00:05 +0000
asID:                     262494
IP address blocks:        45.226.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9f:77:4b:53:e0:4f:3e:e9:ef:45:06:2c:32:09:1f:93:cc:4c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:05 2024 GMT
            Not After : Apr  3 19:00:05 2025 GMT
        Subject: CN=3082010A0282010100CFD5763BBF56C8DDF78665178F674FFDA783976FC07A721213AEEA03E3CDC4AB2318EE2631F316FA68D572B6746D421B9F455CAEA00C2B6B434E3821313B6702EFA87EF3E096F035E7F2BAB89F6089F5B4229242698C349652C1901CE1E488A872C76C4CBEA62EB7AC8D6BDBB67611125F98BF85392C3E5A2119BC644795F49A21448D0CDC6BAD425B4703A51E630EE49476E53B98D3E741695A5F8902A8E30B7BA048DF05B30B3BD290B45C53F5F249E5D67DB2558F8ABCAD9E8DB8E0498DEF2B5856A0FEE494F784286935CD8017A7CF9C29A6404848B58CD8E6EDDF551503F3A8DFB0A085976546004F0C289CE069C11DCD6854B50A423850BAA59A0108790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:76:3b:bf:56:c8:dd:f7:86:65:17:8f:67:
                    4f:fd:a7:83:97:6f:c0:7a:72:12:13:ae:ea:03:e3:
                    cd:c4:ab:23:18:ee:26:31:f3:16:fa:68:d5:72:b6:
                    74:6d:42:1b:9f:45:5c:ae:a0:0c:2b:6b:43:4e:38:
                    21:31:3b:67:02:ef:a8:7e:f3:e0:96:f0:35:e7:f2:
                    ba:b8:9f:60:89:f5:b4:22:92:42:69:8c:34:96:52:
                    c1:90:1c:e1:e4:88:a8:72:c7:6c:4c:be:a6:2e:b7:
                    ac:8d:6b:db:b6:76:11:12:5f:98:bf:85:39:2c:3e:
                    5a:21:19:bc:64:47:95:f4:9a:21:44:8d:0c:dc:6b:
                    ad:42:5b:47:03:a5:1e:63:0e:e4:94:76:e5:3b:98:
                    d3:e7:41:69:5a:5f:89:02:a8:e3:0b:7b:a0:48:df:
                    05:b3:0b:3b:d2:90:b4:5c:53:f5:f2:49:e5:d6:7d:
                    b2:55:8f:8a:bc:ad:9e:8d:b8:e0:49:8d:ef:2b:58:
                    56:a0:fe:e4:94:f7:84:28:69:35:cd:80:17:a7:cf:
                    9c:29:a6:40:48:48:b5:8c:d8:e6:ed:df:55:15:03:
                    f3:a8:df:b0:a0:85:97:65:46:00:4f:0c:28:9c:e0:
                    69:c1:1d:cd:68:54:b5:0a:42:38:50:ba:a5:9a:01:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2E:C4:65:4B:8E:9A:D2:0B:FB:C4:B4:85:AD:22:A8:1F:33:C3:33
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:d2:3d:dd:dd:f7:db:cf:49:82:d4:cc:bf:66:f6:9e:c1:
         ca:76:43:ae:47:61:cc:47:f6:80:be:55:13:f7:27:74:9b:3d:
         87:6a:d9:7f:97:2e:18:32:62:37:80:e9:f9:ee:e0:3e:48:4a:
         fe:87:62:f2:55:1a:fe:d2:00:53:4f:03:4d:88:fb:06:65:02:
         60:43:03:47:59:76:62:37:5b:90:a2:94:bd:4b:7e:44:cf:39:
         29:ea:ec:a2:d7:c3:a8:8b:3b:79:dc:99:f1:d5:e1:06:1b:48:
         6e:57:b7:f1:2a:e7:35:8b:4e:1a:f1:1a:47:85:f4:14:1a:35:
         16:bf:e9:b3:94:55:43:cb:c5:78:77:9b:a0:2b:7f:33:ec:89:
         bc:5f:6f:7f:d7:b0:7a:0b:91:fb:64:5d:c1:b2:fe:9f:f9:37:
         fb:71:98:59:ee:78:2b:88:f7:32:2b:d7:2b:62:54:89:05:d7:
         6a:1a:09:82:98:f3:93:b1:6e:aa:c7:a3:37:29:f0:55:59:bc:
         fe:6c:f3:15:d7:40:fb:4f:7d:fb:f1:3e:94:6e:4b:c6:dc:f1:
         33:a1:a9:64:6b:5d:21:82:a0:40:87:02:4e:e4:19:1a:d1:06:
         38:e6:21:eb:cc:d9:93:9e:85:b0:5d:0e:2f:94:12:10:d5:cb:
         6a:9c:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org