Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34392e302f32342d3234203d3e20323639333139.roa
File:                     34352e3138332e34392e302f32342d3234203d3e20323639333139.roa (raw, json)
Hash identifier:          vvXsl0JlihA1AmTOtewApWLoHGRGizYPwQpmLWJo/Ow=
Subject key identifier:   3F:69:4F:20:30:61:75:79:1B:43:9E:79:37:52:EB:65:EC:E0:0C:D8
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       5F8D4D0B658A76FA1A7D9207F4E9876AE5F991FA
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34392e302f32342d3234203d3e20323639333139.roa
Signing time:             Sat 29 Mar 2025 00:55:56 +0000
ROA not before:           Sat 29 Mar 2025 00:50:56 +0000
ROA not after:            Sat 28 Mar 2026 00:55:56 +0000
asID:                     269319
IP address blocks:        45.183.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8d:4d:0b:65:8a:76:fa:1a:7d:92:07:f4:e9:87:6a:e5:f9:91:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Mar 29 00:50:56 2025 GMT
            Not After : Mar 28 00:55:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:aa:e4:83:f6:83:17:f7:9b:0f:6e:8a:64:
                    7e:cd:e7:36:e8:17:db:86:51:3d:ea:23:0c:ae:21:
                    a1:d4:2b:a0:42:63:49:e3:8d:f9:b4:6d:7e:51:24:
                    d3:5b:63:b0:aa:e1:64:9a:ef:87:f2:c9:d4:4f:34:
                    6c:1f:e3:d2:fb:ab:2e:55:49:c2:d3:88:f5:43:81:
                    47:f8:5e:2e:a1:9e:1c:f8:f3:e5:78:1d:4f:00:5c:
                    df:45:06:5f:72:3d:bf:1c:84:d4:26:82:78:43:df:
                    4e:f2:67:ad:20:e6:98:b5:66:d4:0b:e3:99:49:9e:
                    87:4b:b0:45:c1:69:28:48:3b:9e:29:29:32:89:7c:
                    05:6e:b8:05:d3:01:27:43:bc:c1:6e:78:96:8c:5f:
                    02:d9:ff:54:14:ef:64:f1:34:2b:07:5f:cc:07:73:
                    1c:64:a1:5a:4e:be:50:9a:3c:b8:a0:9f:f7:9e:d9:
                    c7:08:33:cb:d6:be:eb:6e:ad:68:80:c1:f5:09:f5:
                    24:9d:9f:dc:80:2a:b1:44:2a:71:08:02:75:3f:ff:
                    41:47:e1:88:1b:e5:86:d7:fc:b2:24:98:65:40:02:
                    dc:bf:c1:7d:ae:ad:ba:60:45:8f:f4:71:a3:f4:b1:
                    19:7d:3f:91:dd:a7:f8:59:82:b6:0f:5b:c0:58:44:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:4F:20:30:61:75:79:1B:43:9E:79:37:52:EB:65:EC:E0:0C:D8
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e34392e302f32342d3234203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:7f:8d:d3:cd:3c:d7:44:32:18:a3:45:23:e0:ed:81:3e:
         d6:25:24:8e:ac:83:a2:9f:db:df:ff:0a:bf:f4:3d:74:e9:63:
         fe:c4:ed:8b:76:40:9b:04:f0:07:03:eb:a4:f2:23:89:11:ca:
         8f:33:60:47:d1:c0:68:e8:36:a5:ac:ae:3f:c4:9f:2c:b5:1f:
         4e:cf:0c:73:c8:48:21:9a:f2:a0:10:f1:3c:52:08:28:bc:69:
         17:64:8b:b5:f0:8a:c5:80:4a:5c:9b:d6:8d:d0:9d:6a:2f:30:
         8c:44:95:47:98:af:9e:18:f2:6f:80:29:09:56:f8:08:7d:c1:
         f6:4b:f4:65:73:b5:8e:fa:62:e7:72:06:5d:90:5d:88:5e:d5:
         58:26:fb:c4:d4:c3:b7:26:27:d7:af:ce:7e:81:0b:58:37:08:
         bc:2b:ad:00:66:a0:7f:9c:ab:02:95:9c:f4:30:f7:00:b6:19:
         0a:32:37:4e:7f:39:a3:71:e2:8e:91:1e:53:1a:de:11:ff:ab:
         0b:d8:b1:f6:a3:92:18:cb:14:76:75:3e:b1:fa:ad:2c:90:06:
         bb:82:c2:b8:31:ff:59:06:5e:7e:d3:ea:fd:bf:ad:2f:50:0c:
         94:8e:e9:fa:56:88:c1:fa:7a:b5:4a:10:7e:38:98:33:a3:2d:
         51:f0:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:54 2025 by rpki-client on console.sobornost.net