Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32322d3232203d3e20323639333139.roa
File:                     34352e3138332e34382e302f32322d3232203d3e20323639333139.roa (raw, json)
Hash identifier:          YexS5OyoBXgmUPVPzNFLLELMWwwnWUvOgjGLpTkNB1A=
Subject key identifier:   1E:3E:87:4D:CD:BC:E1:98:F1:43:FF:A0:4C:CB:19:2B:FC:53:C1:9C
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       1B371C555672EFAF4ED2AEE87CFF57FF148D4A2D
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32322d3232203d3e20323639333139.roa
Signing time:             Sat 29 Mar 2025 00:55:54 +0000
ROA not before:           Sat 29 Mar 2025 00:50:54 +0000
ROA not after:            Sat 28 Mar 2026 00:55:54 +0000
asID:                     269319
IP address blocks:        45.183.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:37:1c:55:56:72:ef:af:4e:d2:ae:e8:7c:ff:57:ff:14:8d:4a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Mar 29 00:50:54 2025 GMT
            Not After : Mar 28 00:55:54 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:bf:ab:fc:6c:b3:b1:13:90:1f:9a:01:0c:
                    07:90:c3:12:97:42:d0:0e:6c:2e:bc:9a:6d:f7:55:
                    56:7c:68:30:fd:00:01:a8:87:d2:eb:c4:8f:21:9e:
                    28:47:73:22:6c:26:d0:4b:1a:2f:01:b3:7e:1e:50:
                    14:32:fa:ca:a9:d0:77:e3:b6:72:d2:bb:2c:05:d0:
                    63:ce:2b:6a:22:ad:c8:9a:2e:ef:40:92:1b:06:31:
                    75:7b:2f:b4:5d:e3:47:dd:87:c4:d0:bb:56:39:06:
                    32:e9:b4:50:3e:72:b5:c0:ac:ce:10:81:0c:a1:d9:
                    fc:48:ca:d6:b6:75:b1:df:bf:30:80:52:e5:3d:99:
                    20:da:19:92:ae:3e:fb:86:92:d8:3b:ba:6c:64:06:
                    29:5c:24:5c:71:36:32:87:41:60:7f:df:5e:c6:fb:
                    14:9e:a5:3c:0c:ba:a0:a6:5b:63:21:2d:64:bc:50:
                    e4:b4:ba:4d:c4:45:16:2c:ec:88:e6:45:11:ac:f8:
                    fd:04:d5:36:03:9f:c2:4f:6d:5c:f1:22:3d:69:f3:
                    9c:d7:18:b4:05:fe:e6:6a:10:72:aa:4d:1b:1f:f0:
                    db:19:4d:ec:8f:8c:75:eb:66:cc:da:73:f4:13:5d:
                    04:50:b5:b6:7e:44:51:ac:39:f4:4d:b3:68:d4:d6:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3E:87:4D:CD:BC:E1:98:F1:43:FF:A0:4C:CB:19:2B:FC:53:C1:9C
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32322d3232203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:43:30:90:9a:8b:d5:0a:8c:8b:51:ff:43:8c:4b:52:c4:
         61:1d:c3:ac:eb:51:d4:d6:4a:bb:52:95:50:22:96:51:db:6b:
         00:0b:68:eb:14:ad:89:76:a8:9c:4f:f8:8d:b0:bf:c1:d7:6c:
         97:84:ea:ce:74:b4:ac:73:58:9d:38:4a:ba:f8:78:99:16:f3:
         81:e3:e1:03:9f:b9:f4:e3:3b:fa:74:b0:c1:6d:24:5d:95:c5:
         96:9e:8f:6d:c6:ae:2e:a3:c3:ba:4d:9c:e1:00:be:de:a2:2a:
         ba:05:f4:88:2a:b2:58:55:ae:94:7b:31:65:eb:e2:19:58:d9:
         a7:ef:8c:a2:1f:d6:51:f8:10:40:d7:96:00:22:fb:5f:8c:97:
         98:bf:7d:9f:87:7b:84:69:0a:7d:6d:ac:12:cb:38:63:85:73:
         91:b3:18:c1:76:d2:20:3f:be:74:53:40:d7:68:57:63:af:e0:
         bb:fd:33:3b:2d:88:17:8e:b7:24:43:6f:5f:da:74:a0:91:d6:
         26:92:18:06:4d:03:1f:05:73:d9:28:b9:71:36:51:15:0c:3a:
         37:24:23:cd:51:2f:f2:10:f0:f3:ba:4a:62:27:4d:81:10:b4:
         1a:fa:0a:b6:f1:36:b7:12:98:04:42:6b:ea:44:91:52:85:9d:
         2c:95:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:10 2025 by rpki-client on console.sobornost.net