Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35312e302f32342d3234203d3e20323639333139.roa
File:                     34352e3138332e35312e302f32342d3234203d3e20323639333139.roa (raw, json)
Hash identifier:          aDcM1V2+4sROJprj08RnvRT/n+/NSJb2Dd4eC69/JJM=
Subject key identifier:   A5:E0:BD:5F:33:F6:A0:15:16:07:EC:39:AE:47:F1:A0:39:26:89:11
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       2700372EDA80704E3F83DCDE5D89914A539C1DA4
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35312e302f32342d3234203d3e20323639333139.roa
Signing time:             Sat 29 Mar 2025 00:55:56 +0000
ROA not before:           Sat 29 Mar 2025 00:50:56 +0000
ROA not after:            Sat 28 Mar 2026 00:55:56 +0000
asID:                     269319
IP address blocks:        45.183.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:00:37:2e:da:80:70:4e:3f:83:dc:de:5d:89:91:4a:53:9c:1d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Mar 29 00:50:56 2025 GMT
            Not After : Mar 28 00:55:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:e7:11:93:e8:8f:93:7c:b0:64:ce:92:1a:
                    ea:c6:3c:d9:14:06:be:4e:99:55:0a:0f:28:c8:c7:
                    6b:6d:4e:bb:5b:d9:50:46:11:55:7b:05:ce:50:4e:
                    a7:2b:c5:0c:1a:59:44:e0:c0:0f:5d:8b:3f:34:52:
                    5f:d4:18:44:0a:ea:c0:0d:4b:da:d9:48:b1:38:62:
                    3e:cc:01:32:11:c9:10:75:df:35:2f:a7:12:95:03:
                    20:16:b6:33:48:a0:5d:8d:5e:dd:08:ed:b0:37:e3:
                    a0:6f:72:a7:9d:27:f2:8e:77:92:3b:4d:18:47:cb:
                    60:24:71:b4:ce:7a:38:8a:38:e0:d4:92:c8:e3:be:
                    36:d5:53:69:b9:bf:a3:a1:9b:8d:cd:fe:f5:50:09:
                    37:57:69:42:a6:2c:a7:46:2e:39:52:8c:a9:1f:bf:
                    1c:ba:05:26:15:5d:f4:fb:96:4b:53:ca:9d:a1:ea:
                    db:fd:ec:78:15:19:f0:09:25:95:5d:d8:d5:0d:dc:
                    08:bd:9e:90:f7:7d:e2:62:4e:7e:19:93:c3:1b:33:
                    3a:e8:72:50:a3:6d:87:81:aa:6f:f4:14:e0:e0:7e:
                    b5:f6:a6:0c:9f:f2:dc:78:f7:3f:51:2b:e6:8f:03:
                    5d:ef:c8:bc:ec:70:1f:35:df:b5:50:a7:fc:8b:35:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E0:BD:5F:33:F6:A0:15:16:07:EC:39:AE:47:F1:A0:39:26:89:11
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35312e302f32342d3234203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:49:9e:db:f7:cd:2d:46:3c:d0:75:ab:ec:ab:9d:3e:f8:a8:
         ac:d2:4b:62:af:51:0b:62:54:3a:d2:8f:4b:4c:ed:06:9c:20:
         04:7d:d5:f8:2a:4c:1b:28:35:64:e7:d9:2a:73:5e:99:dd:8d:
         4c:7b:34:0b:3f:be:14:f9:4e:11:79:4e:e3:11:72:80:f8:29:
         f8:14:d5:8b:90:a1:a8:79:74:65:81:8d:5d:47:4e:32:5f:2e:
         09:c9:8d:1f:d3:16:ac:a2:65:ab:7b:fe:e8:d4:06:af:b4:b9:
         80:1e:07:27:ba:3d:ef:e2:20:69:53:98:34:0d:6c:3f:dc:3e:
         36:86:c1:6d:4a:9b:60:bc:08:6a:2a:bd:e3:71:ff:ad:99:1d:
         e6:72:4e:68:df:7c:5b:64:a8:27:91:63:96:89:cf:24:69:a3:
         de:ae:54:89:1c:d6:6a:a8:9f:59:fb:4f:d7:7d:b3:f3:52:75:
         14:ea:70:6e:e7:ad:72:68:69:8f:a4:8a:07:68:49:8e:e8:68:
         1b:c6:59:1e:b5:8d:4c:f2:c2:7c:50:be:96:32:60:73:5a:80:
         40:a4:92:81:f0:16:74:d5:dd:24:53:0c:f3:6a:ab:f8:03:f1:
         b7:1f:e8:fc:eb:1e:bc:1c:96:af:3c:10:ad:1f:f7:29:48:3d:
         2f:88:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:22 2025 by rpki-client on console.sobornost.net