Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32342d3234203d3e20323733363531.roa
File:                     34352e3138362e34382e302f32342d3234203d3e20323733363531.roa (raw, json)
Hash identifier:          /nK/a+Z0XgZqf0svFlJWUYecodVD+dWqs5j8SRqWWB8=
Subject key identifier:   17:10:F6:7C:3F:79:7F:68:F5:5C:B3:A9:54:5C:64:7E:84:80:CA:70
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       5E1590B40C8160DAC00628715BF6CF11F376EA00
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32342d3234203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 13:20:44 +0000
ROA not before:           Tue 01 Apr 2025 13:15:44 +0000
ROA not after:            Tue 31 Mar 2026 13:20:44 +0000
asID:                     273651
IP address blocks:        45.186.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:15:90:b4:0c:81:60:da:c0:06:28:71:5b:f6:cf:11:f3:76:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 13:15:44 2025 GMT
            Not After : Mar 31 13:20:44 2026 GMT
        Subject: CN=1710F67C3F797F68F55CB3A9545C647E8480CA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:4b:a6:7f:61:6b:60:76:c8:cd:da:bd:3c:
                    70:30:39:e8:71:13:1a:b1:9d:86:40:22:07:9a:d2:
                    bd:df:f7:aa:a3:2f:71:92:bb:7b:f5:38:f3:f5:13:
                    45:be:62:a8:47:06:16:8c:1e:46:a5:b6:31:a9:1f:
                    ff:5d:db:08:81:04:f0:71:54:40:5a:f1:b0:f8:65:
                    1e:48:0e:f4:53:5e:aa:1b:55:4e:fc:bb:09:31:af:
                    0d:d7:7c:ed:92:5d:c8:0d:f4:a9:ae:71:14:a1:e3:
                    58:ea:e0:fb:20:2a:91:d8:78:b2:db:fe:50:0e:3b:
                    15:a3:33:1f:cc:db:e5:90:62:ba:01:13:71:8e:4c:
                    98:9d:d5:1d:8e:6d:df:a3:27:8f:0a:64:4d:e6:79:
                    09:5c:36:f3:8f:39:82:67:e3:21:5c:18:e8:87:1d:
                    0c:4c:88:52:64:69:65:bc:aa:e9:51:62:f9:94:e1:
                    fe:5e:24:4d:33:77:ae:66:20:23:67:44:5f:fe:99:
                    30:b9:9f:db:53:ab:69:9e:e4:c1:2a:af:0c:fb:f8:
                    79:b1:ae:6c:f4:6d:bc:b7:f0:21:dc:ee:f4:cb:47:
                    31:60:7e:7b:2f:1b:b1:81:a1:4e:2f:5e:cf:02:3b:
                    67:4b:11:f9:09:92:7a:92:c1:e2:14:2b:7d:b0:84:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:10:F6:7C:3F:79:7F:68:F5:5C:B3:A9:54:5C:64:7E:84:80:CA:70
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34382e302f32342d3234203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8a:3d:d6:43:56:d5:96:00:c1:b4:af:ed:fe:46:04:24:bb:
         bd:0b:d0:dc:6b:a1:99:43:1c:03:20:c2:2b:77:34:31:34:83:
         5b:32:1e:3d:d0:aa:e8:c9:df:d2:53:bc:33:f1:90:a5:3c:06:
         3a:37:32:5a:f1:3e:7f:8c:eb:51:40:fe:00:ba:19:85:6e:36:
         a3:09:4f:ce:ca:f7:26:bc:da:e6:b8:98:60:87:c6:7c:06:7f:
         16:da:b0:66:d8:a9:5c:53:a1:22:98:37:bf:c7:67:7e:f2:bd:
         40:06:44:9b:8c:25:54:8b:dc:f5:5b:a4:12:d3:0e:10:f0:f1:
         75:53:4c:24:f3:e3:90:2b:78:94:ee:a5:1a:a3:3a:18:98:d8:
         2c:2b:70:f3:9a:94:69:95:9e:47:10:b1:87:8a:85:ca:cb:a3:
         4f:49:ce:69:7a:42:b9:d0:7e:45:a9:b9:02:b7:2b:73:99:86:
         02:88:46:a8:bc:c1:a6:2c:c3:a4:9d:28:8e:a3:0d:6e:b5:09:
         6d:de:39:2c:44:ee:93:ff:35:cc:bc:ee:8c:82:6a:5b:ae:a9:
         ff:9a:53:2d:29:2a:19:e6:89:86:0a:20:b8:fe:5e:f7:d6:81:
         65:67:8c:6f:5f:58:be:e6:49:c2:76:a9:e7:d2:5e:6b:8f:d9:
         c9:21:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net