Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32332d3233203d3e20323733363531.roa
File:                     34352e3138362e34382e302f32332d3233203d3e20323733363531.roa (raw, json)
Hash identifier:          SZrr1moloblEl7j8I+EwvgS6iQAAjLB7Zzas20BvVLo=
Subject key identifier:   66:39:92:63:94:18:96:31:D7:FB:D9:EC:95:65:12:2A:CC:A5:C6:6E
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       7BCEB9985FD57330225779752A6B43DEAFE37127
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32332d3233203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 13:20:21 +0000
ROA not before:           Tue 01 Apr 2025 13:15:21 +0000
ROA not after:            Tue 31 Mar 2026 13:20:21 +0000
asID:                     273651
IP address blocks:        45.186.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ce:b9:98:5f:d5:73:30:22:57:79:75:2a:6b:43:de:af:e3:71:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 13:15:21 2025 GMT
            Not After : Mar 31 13:20:21 2026 GMT
        Subject: CN=6639926394189631D7FBD9EC9565122ACCA5C66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:84:8b:4c:9c:8e:98:86:32:27:df:ed:67:
                    e7:f7:02:fa:96:a5:6b:2c:8a:52:02:8a:9b:f1:1a:
                    cf:dc:38:43:0e:99:34:99:01:af:39:3b:dc:87:16:
                    a7:9b:b6:a7:89:be:d2:42:8b:3a:be:14:59:61:71:
                    5b:50:58:e0:f9:22:bf:69:6f:fb:54:8d:fb:ae:c6:
                    27:92:25:0c:5c:68:2a:dd:ac:ec:cc:2a:88:0f:8d:
                    e3:68:40:1f:94:84:6f:4a:d8:76:30:fc:24:ad:3d:
                    38:ca:cc:24:31:b7:6e:23:25:13:4c:39:8e:7c:3b:
                    09:02:de:54:6e:37:e8:60:1a:d8:dd:d9:0b:78:1d:
                    82:75:8f:eb:ad:96:0d:e5:f3:c4:d8:45:7c:41:64:
                    17:1e:00:65:12:d5:69:d7:26:bd:1b:15:f8:de:ea:
                    bb:95:a1:5c:34:e6:5a:e6:69:d4:ce:c4:b8:82:3e:
                    42:cd:e5:67:3e:35:a2:ee:b1:3a:3d:c2:1a:b6:02:
                    e1:81:dd:df:3f:45:64:08:d3:d6:c3:91:90:93:95:
                    48:94:e8:e1:4d:d2:be:9a:33:e2:2f:9b:68:03:5b:
                    47:90:5e:c3:e7:a7:02:76:cb:62:aa:5a:fb:a3:e3:
                    1a:ca:09:f2:7a:15:d0:f4:f6:9d:c5:14:43:8d:39:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:92:63:94:18:96:31:D7:FB:D9:EC:95:65:12:2A:CC:A5:C6:6E
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32332d3233203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:59:d3:d0:53:4a:bc:2d:39:47:4b:3b:f3:dc:86:02:48:
         ec:b7:65:40:9b:0d:ef:cc:8a:27:6d:4f:6e:30:5c:92:f6:c4:
         18:b8:ea:1a:1f:89:49:be:d3:82:36:56:59:4f:12:f2:40:3a:
         a3:2f:00:09:33:9e:40:90:e5:18:20:07:16:b4:8f:d4:08:35:
         2a:b1:c7:f4:6f:67:f2:7c:dd:f7:74:4d:73:c8:19:12:d3:91:
         b5:89:c6:c9:8d:08:9c:fc:62:29:f3:fd:86:1e:fe:b3:11:96:
         6b:1c:1f:cb:e6:8c:ae:f7:d4:a4:51:4c:b0:e3:58:d2:4f:24:
         50:30:55:5f:6d:31:e3:f8:2d:9c:58:bd:d2:6d:d8:8e:63:f0:
         0e:82:0b:4e:bc:0d:e8:3f:56:16:34:8a:e5:95:e5:85:12:91:
         0e:28:a8:f3:88:60:8d:ef:dc:9d:8d:5c:c1:23:1a:19:3e:53:
         8b:4a:fc:12:fe:29:80:1f:df:37:1c:24:1d:49:e9:46:cd:27:
         07:fa:e9:01:91:a9:80:03:87:46:48:af:23:5e:e5:7a:f1:11:
         cb:c4:50:ff:30:13:3a:eb:8a:80:64:cd:53:01:be:cd:ce:95:
         d6:a7:46:6f:f1:82:5a:e9:16:67:97:6e:33:79:22:be:ac:ed:
         83:f2:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net