Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39302e302f32332d3233203d3e20323632343934.roa
File:                     34352e3232362e39302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          amg/cW51uCqa2jluUqA1UOU9NyapmBA8ik55qIA7c4E=
Subject key identifier:   BA:D2:D8:0F:0E:3F:38:5B:DB:1A:95:F1:AC:EB:04:04:C3:47:04:72
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       399FAE2D2BDD0F0B14EF67F32A886814E797530A
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39302e302f32332d3233203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        45.226.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9f:ae:2d:2b:dd:0f:0b:14:ef:67:f3:2a:88:68:14:e7:97:53:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:f4:4e:3d:86:9c:03:06:27:08:60:d2:da:
                    68:ef:71:47:c9:3f:39:69:25:82:75:60:b6:6f:77:
                    69:93:72:b1:aa:dd:d7:93:ff:b6:3a:b4:16:cf:ca:
                    91:4d:67:86:29:f6:66:a7:af:f4:a8:0c:30:81:3d:
                    a9:71:5e:58:00:93:2c:21:e1:49:43:50:bd:49:6d:
                    8e:77:0f:57:30:44:b8:d4:d3:66:46:c0:c2:0b:7d:
                    4f:41:f0:49:89:96:ec:02:cb:ea:24:6b:38:7a:a2:
                    3b:8d:90:b2:af:db:78:64:c5:f3:81:50:09:9e:29:
                    d4:8b:12:59:3a:63:48:82:04:41:60:66:8a:e8:ed:
                    3e:7e:b1:d1:9c:16:ad:36:6c:1c:29:cb:4f:7b:8c:
                    f8:6e:a0:6c:e9:df:c8:2d:52:de:ef:57:a5:58:cd:
                    96:84:06:4d:24:02:b3:37:14:3f:d9:98:8b:97:6a:
                    fd:f4:20:95:fb:34:8b:64:1a:84:07:f6:d3:53:f3:
                    92:d5:7c:9a:db:b8:6d:3a:73:78:10:b3:26:80:ad:
                    84:5d:a6:58:50:b9:6f:00:8b:7f:cc:c8:df:8d:8d:
                    9b:b0:db:6c:3e:91:84:51:1c:25:7a:38:d6:7e:54:
                    47:87:c4:6f:04:ca:f5:34:91:09:12:46:0c:cf:3d:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D2:D8:0F:0E:3F:38:5B:DB:1A:95:F1:AC:EB:04:04:C3:47:04:72
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:46:f4:6b:ab:f0:35:6f:ce:b1:59:77:f1:ef:24:15:57:65:
         d1:1a:73:60:58:53:33:d4:b9:fb:f9:27:b6:c1:f8:56:21:c1:
         3e:29:5b:46:a5:43:9d:81:12:b4:14:74:98:ce:c3:82:25:c2:
         76:51:5f:44:bd:50:45:4c:d0:40:c4:da:10:64:01:a6:26:33:
         81:84:57:1d:7e:82:5f:2d:7a:c9:62:b5:ce:f9:5b:d1:0c:81:
         ab:2c:61:4f:07:75:73:51:04:3a:c7:a6:23:6a:13:be:c8:28:
         28:2e:ed:9f:c1:f6:99:78:a1:e6:d4:58:ff:df:29:29:d1:16:
         fa:72:4e:99:06:e1:5c:9b:f8:80:ba:bb:55:dd:6b:7e:5a:f8:
         3b:02:db:ae:5e:54:b8:23:c3:80:b8:df:75:e1:66:68:f4:fd:
         9c:1a:98:d3:4b:b0:9a:e1:07:de:0b:10:fa:2f:62:60:ee:57:
         21:23:fc:9d:a5:90:2f:92:83:b6:ae:fb:43:25:f2:5d:42:34:
         6f:41:57:b1:96:a3:97:d1:27:7a:df:91:96:1f:b6:59:a3:12:
         ba:bc:25:23:46:0f:2f:84:44:69:8d:fe:e2:e5:0a:69:fe:d8:
         e1:57:8f:62:46:0c:f4:33:84:e1:8b:ca:10:5c:b3:8e:79:0e:
         d4:b0:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org