Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39312e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e39312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          74GMMTiIQVVD09vrF6T97gqbZ29WSdaqvumLGyw5Nsg=
Subject key identifier:   B0:EB:EC:3E:9D:87:78:30:B6:8F:91:0D:FE:B8:D6:47:DD:C3:EC:61
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       136E63679EB9F4105CEBE5AA469E966C804A37CF
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39312e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:08 +0000
ROA not before:           Wed 03 Apr 2024 18:55:08 +0000
ROA not after:            Thu 03 Apr 2025 19:00:08 +0000
asID:                     262494
IP address blocks:        45.226.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6e:63:67:9e:b9:f4:10:5c:eb:e5:aa:46:9e:96:6c:80:4a:37:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:08 2024 GMT
            Not After : Apr  3 19:00:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:ff:47:89:9e:91:7b:56:2a:ae:9b:49:15:
                    95:3d:b6:75:10:c0:23:73:60:fb:39:ae:9d:db:8a:
                    85:28:4a:a7:ab:fb:51:b3:21:13:a4:24:b4:fd:22:
                    25:65:22:63:93:5b:7e:7d:0e:3d:6d:23:d8:0d:50:
                    8a:bc:72:35:0a:0f:1a:bb:1d:f9:b1:88:dc:ee:6b:
                    43:84:b9:da:0d:f1:66:6d:2d:32:e1:38:5c:23:32:
                    53:d8:ce:7b:91:b7:43:b5:7d:e4:03:44:cf:13:47:
                    ba:76:d9:4a:13:28:d6:7a:2e:bb:80:49:a3:e5:99:
                    17:cc:6b:9c:c4:e9:ce:fb:c1:81:62:ce:79:98:40:
                    a0:45:f5:82:53:1c:dd:5d:a1:8f:fb:22:02:35:7e:
                    5b:b7:17:3f:fd:99:dc:ba:01:10:8f:44:66:56:a3:
                    e8:ae:bd:02:42:b0:c0:a9:7f:7b:4e:4b:06:c2:4e:
                    da:9e:6c:42:25:fd:92:98:df:83:9c:9d:c7:3b:59:
                    23:7f:7e:44:68:9d:8d:58:e2:3e:b5:e3:93:09:41:
                    c2:4d:8c:28:be:14:5e:80:08:67:ad:26:1e:cb:47:
                    6d:0a:d1:a7:66:b8:cc:80:ea:7b:74:2f:6f:11:6c:
                    09:77:27:23:68:9b:98:f0:08:70:57:c0:cb:6d:77:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EB:EC:3E:9D:87:78:30:B6:8F:91:0D:FE:B8:D6:47:DD:C3:EC:61
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/34352e3232362e39312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:86:44:42:fb:c7:92:74:6c:2f:9f:bf:17:58:d5:c1:ff:
         34:92:a7:ae:0b:d8:85:64:d6:0b:ae:56:ae:fb:fb:0b:5a:1a:
         22:79:92:e5:2d:d7:e2:7d:bb:36:d7:fe:fb:9d:ab:c9:aa:fb:
         00:a1:62:05:86:59:e0:f0:4a:1d:7c:29:84:73:52:27:40:44:
         0b:6a:36:4a:8e:d0:f3:9a:bb:ec:50:36:54:30:30:8a:57:34:
         46:38:b6:c4:45:4b:f0:9d:ce:82:fe:f6:c0:9e:b3:fc:16:f8:
         31:43:2f:0d:5d:f3:30:5d:40:85:27:f8:36:01:49:92:5f:44:
         5d:d7:84:4f:02:8b:ee:a5:1a:a9:6f:c7:1c:8d:17:8f:4f:6a:
         d2:0b:90:13:2c:b1:74:10:cd:fe:0c:0d:02:20:95:cc:38:95:
         f7:a0:70:4c:16:43:44:84:3d:c2:e9:95:19:dd:25:7f:db:ba:
         25:51:a1:9b:b8:42:8c:21:aa:34:1d:e9:5c:87:73:fd:7d:d5:
         2f:c7:db:36:af:14:cf:52:66:0b:58:ac:b4:7f:56:21:f7:16:
         d7:08:3d:09:26:92:99:2f:76:9d:11:bd:3a:ee:10:ed:8d:2d:
         a7:5e:b4:65:f1:c3:34:05:57:2e:48:e2:1c:5f:70:e0:c1:ab:
         11:60:99:dd
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUE25jZ5659BBc6+WqRp6WbIBKN88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlBQTI4NEJFQkU4NTJENjg3MDc2RDRCMjVCNzAzMTJG
RTUyMjc0RDAeFw0yNDA0MDMxODU1MDhaFw0yNTA0MDMxOTAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U0NUZGNDc4OTlFOTE3QjU2
MkFBRTlCNDkxNTk1M0RCNjc1MTBDMDIzNzM2MEZCMzlBRTlEREI4QTg1Mjg0QUE3
QUJGQjUxQjMyMTEzQTQyNEI0RkQyMjI1NjUyMjYzOTM1QjdFN0QwRTNENkQyM0Q4
MEQ1MDhBQkM3MjM1MEEwRjFBQkIxREY5QjE4OERDRUU2QjQzODRCOURBMERGMTY2
NkQyRDMyRTEzODVDMjMzMjUzRDhDRTdCOTFCNzQzQjU3REU0MDM0NENGMTM0N0JB
NzZEOTRBMTMyOEQ2N0EyRUJCODA0OUEzRTU5OTE3Q0M2QjlDQzRFOUNFRkJDMTgx
NjJDRTc5OTg0MEEwNDVGNTgyNTMxQ0RENURBMThGRkIyMjAyMzU3RTVCQjcxNzNG
RkQ5OURDQkEwMTEwOEY0NDY2NTZBM0U4QUVCRDAyNDJCMEMwQTk3RjdCNEU0QjA2
QzI0RURBOUU2QzQyMjVGRDkyOThERjgzOUM5REM3M0I1OTIzN0Y3RTQ0Njg5RDhE
NThFMjNFQjVFMzkzMDk0MUMyNEQ4QzI4QkUxNDVFODAwODY3QUQyNjFFQ0I0NzZE
MEFEMUE3NjZCOENDODBFQTdCNzQyRjZGMTE2QzA5NzcyNzIzNjg5Qjk4RjAwODcw
NTdDMENCNkQ3N0VCNjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzkX/R4mekXtWKq6bSRWVPbZ1EMAjc2D7Oa6d24qFKEqnq/tRsyET
pCS0/SIlZSJjk1t+fQ49bSPYDVCKvHI1Cg8aux35sYjc7mtDhLnaDfFmbS0y4Thc
IzJT2M57kbdDtX3kA0TPE0e6dtlKEyjWei67gEmj5ZkXzGucxOnO+8GBYs55mECg
RfWCUxzdXaGP+yICNX5btxc//ZncugEQj0RmVqPorr0CQrDAqX97TksGwk7anmxC
Jf2SmN+DnJ3HO1kjf35EaJ2NWOI+teOTCUHCTYwovhRegAhnrSYey0dtCtGnZrjM
gOp7dC9vEWwJdycjaJuY8AhwV8DLbXfrYwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLDr7D6dh3gwto+RDf641kfdw+xhMB8GA1UdIwQYMBaAFEmqKEvr6FLWhwdtSyW3
AxL+UidNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3V2Q0OFV1TXVlVUN1
YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzEvNDlBQTI4NEJFQkU4NTJE
Njg3MDc2RDRCMjVCNzAzMTJGRTUyMjc0RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80OUFBMjg0QkVCRTg1MkQ2ODcwNzZENEIyNUI3MDMxMkZFNTIy
NzRELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80N1dkNDhVdU11ZVVDdWJUcVFa
THdqN0VNNlVoeXVwTnM1NmtSY1dYc0VKQy8xLzM0MzUyZTMyMzIzNjJlMzkzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM0MzkzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3i
WzANBgkqhkiG9w0BAQsFAAOCAQEAQBuGREL7x5J0bC+fvxdY1cH/NJKnrgvYhWTW
C65Wrvv7C1oaInmS5S3X4n27Ntf++52ryar7AKFiBYZZ4PBKHXwphHNSJ0BEC2o2
So7Q85q77FA2VDAwilc0Rji2xEVL8J3Ogv72wJ6z/Bb4MUMvDV3zMF1AhSf4NgFJ
kl9EXdeETwKL7qUaqW/HHI0Xj09q0guQEyyxdBDN/gwNAiCVzDiV96BwTBZDRIQ9
wumVGd0lf9u6JVGhm7hCjCGqNB3pXIdz/X3VL8fbNq8Uz1JmC1istH9WIfcW1wg9
CSaSmS92nRG9Ou4Q7Y0tp160ZfHDNAVXLkjiHF9w4MGrEWCZ3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org