Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32332d3233203d3e20323639333139.roa
File:                     34352e3138332e34382e302f32332d3233203d3e20323639333139.roa (raw, json)
Hash identifier:          cWUSzAoLMuiILpt40cuvpNu5pKfW3VFfhimUHfT0VAI=
Subject key identifier:   10:0E:E7:E6:BB:5C:82:5B:8B:C6:89:CA:64:35:20:6F:12:C9:10:C8
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       44C4E195EFF465349E07CC0992BDC784FFBECF0D
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32332d3233203d3e20323639333139.roa
Signing time:             Sat 29 Mar 2025 00:55:57 +0000
ROA not before:           Sat 29 Mar 2025 00:50:57 +0000
ROA not after:            Sat 28 Mar 2026 00:55:57 +0000
asID:                     269319
IP address blocks:        45.183.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c4:e1:95:ef:f4:65:34:9e:07:cc:09:92:bd:c7:84:ff:be:cf:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Mar 29 00:50:57 2025 GMT
            Not After : Mar 28 00:55:57 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:a7:28:96:c1:ac:92:86:92:6f:7a:3b:af:
                    4f:d4:6c:ca:fb:81:a6:50:48:01:f4:3a:75:28:23:
                    20:04:f1:bd:19:af:39:be:35:b4:ca:2d:0a:f0:ca:
                    eb:78:98:fe:60:01:50:65:42:0a:da:01:3a:bb:78:
                    17:38:49:43:f0:fa:42:34:d4:f4:2c:2f:18:d3:8c:
                    78:aa:96:c8:40:f9:5b:fd:29:c2:d9:2e:23:66:d0:
                    ee:af:52:6a:30:a7:0a:b8:b6:20:be:97:49:c7:ae:
                    fe:a0:93:49:1c:4e:c6:0a:2f:f5:67:75:60:81:ad:
                    8e:cf:94:59:3d:db:75:ce:c9:86:19:48:84:bc:32:
                    d4:bd:4a:4f:72:37:de:5b:ef:50:56:19:79:2b:07:
                    cf:a4:ca:50:e8:ad:b1:02:80:c4:9f:7d:57:cc:10:
                    81:83:7e:fe:b5:00:ab:e6:4d:57:ba:ba:fa:e2:00:
                    b0:02:3b:16:1b:75:92:de:ab:69:5f:22:94:0a:49:
                    73:4a:d2:5e:28:ff:76:c6:7d:6e:c3:a3:57:10:b4:
                    7c:b6:4d:29:09:ea:2a:f6:a5:c4:f5:d3:fc:b9:30:
                    78:a0:10:95:cd:92:41:98:2e:fc:9b:c3:7b:fc:7f:
                    14:4a:41:9e:87:07:7e:67:d7:50:63:ba:67:e5:c6:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0E:E7:E6:BB:5C:82:5B:8B:C6:89:CA:64:35:20:6F:12:C9:10:C8
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32332d3233203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:02:ed:81:be:d5:de:8a:fe:2f:62:5e:c3:c8:fd:47:f4:
         94:9f:0a:94:4b:72:54:40:fc:23:f3:26:1e:67:47:d2:83:2d:
         91:32:84:d1:ee:01:88:d0:6e:c2:5e:8f:1d:ab:a9:fc:da:83:
         2c:5e:e9:b3:d6:32:63:62:e7:a4:1c:b7:a1:6a:89:77:0d:cc:
         85:42:f4:c4:e6:20:db:5c:4a:f7:02:35:d2:fe:79:60:a2:05:
         a4:bf:34:7f:35:06:7f:01:8d:b9:45:65:a9:63:67:b8:a0:19:
         39:78:b7:4d:31:e1:b8:46:94:1b:2d:29:7d:15:ba:9e:ad:3b:
         38:88:41:08:dd:a8:af:82:ec:78:d4:0f:9b:a8:f0:44:98:8a:
         bc:c3:88:31:15:32:59:b2:94:ee:0a:3c:bd:e8:c6:75:70:d9:
         b7:65:31:23:d6:ea:21:7e:57:c1:ec:18:53:25:f7:46:73:12:
         9f:17:99:af:4f:e2:51:81:7d:26:a1:88:ec:c1:ca:54:98:7c:
         ed:c7:ad:db:bd:7b:f1:55:04:79:a8:52:73:ca:78:85:c6:a5:
         69:1a:1a:d1:83:bf:1c:e4:dc:ab:7a:9e:19:4c:7b:c4:30:14:
         59:09:2a:28:9e:ba:38:c1:16:8e:d6:fd:35:21:ab:aa:57:d7:
         4f:6c:49:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:22 2025 by rpki-client on console.sobornost.net