Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e35302e302f32332d3233203d3e20323733363531.roa
File:                     34352e3138362e35302e302f32332d3233203d3e20323733363531.roa (raw, json)
Hash identifier:          kSI8EDtOouLp7AMwSLXprqAiLmDN0j2wSj44fc64OcY=
Subject key identifier:   30:A1:AE:E7:1B:FB:46:0B:EE:D4:8B:AE:6F:06:FE:26:BD:A5:D1:11
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       0890D71ED34155E7FE1722BE897BD592B0F855F3
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e35302e302f32332d3233203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 13:16:40 +0000
ROA not before:           Tue 01 Apr 2025 13:11:40 +0000
ROA not after:            Tue 31 Mar 2026 13:16:40 +0000
asID:                     273651
IP address blocks:        45.186.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 19:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:90:d7:1e:d3:41:55:e7:fe:17:22:be:89:7b:d5:92:b0:f8:55:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 13:11:40 2025 GMT
            Not After : Mar 31 13:16:40 2026 GMT
        Subject: CN=30A1AEE71BFB460BEED48BAE6F06FE26BDA5D111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:99:ea:b1:7c:34:36:ee:fd:85:c8:3b:22:
                    8d:27:37:5b:a7:1d:1b:4c:c8:e1:9f:53:0e:ff:e4:
                    ed:ab:b8:c4:39:e6:20:98:4b:d2:ab:bb:ec:cd:07:
                    83:20:bd:b1:37:23:64:4e:21:fe:fe:b2:34:6b:5f:
                    98:16:93:3b:27:d8:d8:c9:e0:4d:44:49:38:e4:59:
                    ae:a9:ed:1d:79:a9:38:15:2c:a1:2f:1a:f1:c6:07:
                    b7:1c:fd:f0:ad:35:12:74:f3:2f:b4:23:df:82:25:
                    d7:78:95:c4:fd:5a:08:24:71:43:72:d5:3c:32:08:
                    60:1b:3e:29:8c:9a:13:b1:e0:1f:78:30:f8:38:a2:
                    32:e1:3c:d0:30:07:3c:6b:c0:0a:60:21:d1:e2:8c:
                    30:71:c9:f5:5e:54:31:26:11:ae:93:44:7c:e0:8a:
                    38:c4:6e:30:af:0a:14:49:6f:70:1d:54:3d:99:38:
                    85:12:82:ea:c8:fd:68:e3:d7:62:4d:9d:1d:bc:b2:
                    08:48:dc:0b:7c:10:a2:76:54:82:e8:cd:54:3b:1f:
                    ca:e1:02:eb:b8:d2:05:d2:90:0e:88:b5:1d:d0:13:
                    03:07:c1:93:e8:2a:fc:8c:d8:e5:60:68:36:93:b0:
                    bd:e8:61:ac:92:e3:f8:31:6c:ea:5c:66:22:9d:66:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A1:AE:E7:1B:FB:46:0B:EE:D4:8B:AE:6F:06:FE:26:BD:A5:D1:11
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e35302e302f32332d3233203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:2a:44:97:81:10:94:4c:91:4f:12:2d:f0:a1:99:a2:0f:
         43:56:3c:8a:ca:b6:7d:a4:9b:83:bd:cf:10:12:be:c3:ed:e1:
         b4:09:c8:61:56:77:7c:04:b5:4e:00:7e:10:76:68:6c:b9:0f:
         86:78:90:08:2e:a4:16:d5:67:e6:88:f7:63:ca:a5:60:69:da:
         cb:58:85:4e:20:22:02:bf:67:23:a1:38:02:65:aa:5c:d3:e5:
         e4:10:bc:46:30:7e:50:55:8d:66:90:c9:1a:c9:46:6b:66:07:
         06:3a:4f:0b:64:6b:24:27:c6:4e:42:46:fb:dd:66:c9:3a:2c:
         f9:b6:d6:a0:2c:27:c6:f5:f7:20:ca:4b:6e:df:46:08:e6:84:
         65:74:29:e5:66:d2:fa:c4:7e:84:00:29:d1:81:0b:5d:25:2a:
         28:17:5a:b1:d2:18:07:43:53:09:78:db:69:5e:58:a1:60:37:
         d1:cb:57:ae:b3:8c:23:47:3f:75:c9:2e:46:ca:12:89:a2:39:
         60:25:c0:64:2c:18:03:28:d6:4a:c2:69:93:c1:5f:53:51:95:
         80:4d:eb:49:b2:dd:ce:db:95:8a:aa:17:36:33:ca:a7:e8:cd:
         1c:b5:b6:b4:a3:cc:12:49:ab:f0:ba:04:f2:9e:0f:ea:c2:ae:
         6a:70:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:38 2025 by rpki-client on console.sobornost.net