Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32342d3234203d3e20323639333139.roa
File:                     34352e3138332e34382e302f32342d3234203d3e20323639333139.roa (raw, json)
Hash identifier:          knWYGT8JhXp2pnBenWofDUo1u9fvvDI5Erq7TenP3Dk=
Subject key identifier:   DE:EA:4F:1E:23:00:39:D5:9F:51:37:DD:55:8B:2B:BB:BF:10:83:DE
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       2332A74B21E2FE260A6796BB855172EB170905E7
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32342d3234203d3e20323639333139.roa
Signing time:             Sat 29 Mar 2025 00:55:56 +0000
ROA not before:           Sat 29 Mar 2025 00:50:56 +0000
ROA not after:            Sat 28 Mar 2026 00:55:56 +0000
asID:                     269319
IP address blocks:        45.183.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:32:a7:4b:21:e2:fe:26:0a:67:96:bb:85:51:72:eb:17:09:05:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Mar 29 00:50:56 2025 GMT
            Not After : Mar 28 00:55:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:5d:3d:d9:15:7e:33:f5:d9:f8:94:96:59:
                    80:0b:bf:94:05:d5:aa:c8:7c:7f:29:e1:12:a7:5c:
                    19:9a:79:bb:ce:51:78:98:49:90:ff:65:d5:0d:40:
                    ce:6a:c0:4a:d0:3e:49:de:99:bd:20:6f:3e:a1:4c:
                    37:44:73:1f:ef:bb:ae:5f:a7:d6:13:ed:96:83:d3:
                    e4:72:9b:84:e6:3d:e3:14:7e:72:5b:e3:c3:98:04:
                    97:09:70:66:34:1c:29:98:77:3f:e3:60:45:3b:0e:
                    ad:17:52:55:a5:2b:d9:87:9f:5f:a7:ec:6b:06:03:
                    b7:17:9e:3d:38:66:c8:43:5f:91:5e:e3:76:b5:5e:
                    7f:80:15:7e:53:b6:a1:fa:b3:7f:ae:21:80:25:f0:
                    b3:34:c3:84:d9:3c:5c:e8:c9:5b:83:8f:75:8c:8d:
                    48:6d:f2:65:18:2f:08:bf:4f:39:96:04:6b:4a:1d:
                    48:a4:ca:5d:b5:7f:84:03:6c:6e:2c:97:65:cc:59:
                    b0:bc:c8:c3:81:c7:1f:69:2e:04:3c:c6:7a:f8:59:
                    3e:9e:8e:f6:65:6b:17:65:fb:6e:b4:a6:98:5e:14:
                    1b:98:cd:af:05:9e:7e:90:5c:1a:7b:46:7b:61:80:
                    22:d1:d9:5e:31:20:dc:ba:bd:91:b7:d6:9a:d1:54:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EA:4F:1E:23:00:39:D5:9F:51:37:DD:55:8B:2B:BB:BF:10:83:DE
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34382e302f32342d3234203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:20:90:98:03:f8:32:51:2c:e3:1f:00:77:99:79:04:7c:
         d0:93:6e:a8:48:84:ab:e9:31:c0:3f:5a:41:1f:b3:6a:b5:b0:
         45:66:9c:bd:ca:f9:23:21:16:6e:ac:4a:9a:59:4d:0a:1b:3c:
         bf:db:3c:a7:f2:2d:b8:e6:3f:1f:0a:63:8b:2c:0d:3a:00:db:
         42:e7:4f:b3:37:21:b8:84:1f:bd:cf:f8:48:1b:04:76:66:d5:
         72:ff:a1:ca:4f:ed:03:63:ca:e0:6d:ec:6c:8c:83:3f:39:98:
         79:e4:00:1b:e6:3e:8c:ff:d5:bb:fb:42:00:33:9d:5f:92:0b:
         fc:d9:03:20:d6:f7:9d:28:ee:69:18:3b:99:9c:4e:ca:5b:3f:
         8f:54:60:d0:58:21:ea:49:55:fe:08:45:79:01:34:e6:c1:eb:
         01:4e:3f:45:17:82:14:bd:b0:cc:8d:10:0c:d8:d6:e5:fc:2e:
         5d:75:a0:c7:fb:20:16:bb:d9:71:e6:df:01:d8:6d:8b:30:31:
         78:89:c7:be:05:9c:f5:8e:27:6e:6a:06:ba:fe:a3:ba:bc:ee:
         ca:bd:f0:a2:f4:ca:aa:1b:9f:cb:09:ef:e3:82:13:d4:d0:3d:
         a1:7e:77:01:ea:2d:5f:03:05:d9:47:2d:96:84:71:f4:bb:41:
         c4:2b:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:22 2025 by rpki-client on console.sobornost.net