Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35302e302f32332d3233203d3e20323639333139.roa
File:                     34352e3138332e35302e302f32332d3233203d3e20323639333139.roa (raw, json)
Hash identifier:          8lSfNMgZlFPsIoc2yvtqFz78lhnikRMdQnmMbY2sj84=
Subject key identifier:   46:39:73:03:5A:69:34:21:9F:08:8D:5A:0D:D5:98:44:2D:14:91:FF
Certificate issuer:       /CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
Certificate serial:       361BB5EE351A3FC3C21F1CDC1612807B0B7176B9
Authority key identifier: 63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35302e302f32332d3233203d3e20323639333139.roa
Signing time:             Sat 29 Mar 2025 00:55:55 +0000
ROA not before:           Sat 29 Mar 2025 00:50:55 +0000
ROA not after:            Sat 28 Mar 2026 00:55:55 +0000
asID:                     269319
IP address blocks:        45.183.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl
                          rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1b:b5:ee:35:1a:3f:c3:c2:1f:1c:dc:16:12:80:7b:0b:71:76:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA71C49B8F75EE0609181073EF8E8CD5E99AD6
        Validity
            Not Before: Mar 29 00:50:55 2025 GMT
            Not After : Mar 28 00:55:55 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:27:39:0b:73:d1:07:06:ea:b3:42:84:be:
                    2d:bd:09:03:99:96:40:7e:43:07:15:65:ae:5b:72:
                    b7:7a:5e:1e:51:9c:3b:12:f2:00:e2:11:af:c7:5f:
                    20:2c:c8:a7:6a:af:8c:94:7c:95:68:ab:47:a4:6d:
                    f8:61:76:71:41:c9:0b:0f:d5:47:32:b6:57:ac:d2:
                    8a:b1:c1:22:06:a8:53:3e:86:72:e8:db:b5:f3:2b:
                    6a:f2:6c:f1:0a:ef:28:45:46:22:cb:b4:f1:d8:29:
                    da:32:bf:a9:e4:db:4e:e5:09:86:47:ea:b3:f7:02:
                    b0:ef:37:98:0d:49:73:73:96:d8:cf:0d:58:9c:02:
                    44:7a:ec:d4:a1:88:98:b6:a9:ab:e2:fb:cd:b9:b6:
                    ad:1d:b0:5b:b3:49:38:c2:a6:5b:b6:d6:6e:66:01:
                    07:06:72:d5:90:50:8d:d3:8b:62:dc:85:f6:ca:75:
                    97:b5:e3:02:27:d1:98:97:cf:23:0f:75:fe:5d:1a:
                    c1:f5:cd:43:64:88:0b:0e:6f:a5:07:b6:bc:07:05:
                    d6:86:09:a4:de:ad:f2:8b:b1:69:12:13:b5:06:48:
                    a2:cf:65:83:91:8c:62:3c:5f:c5:63:60:c6:a4:ad:
                    39:d9:98:6f:e4:64:31:73:4f:48:41:64:7b:94:49:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:39:73:03:5A:69:34:21:9F:08:8D:5A:0D:D5:98:44:2D:14:91:FF
            X509v3 Authority Key Identifier:
                keyid:63:BA:71:C4:9B:8F:75:EE:06:09:18:10:73:EF:8E:8C:D5:E9:9A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BA71C49B8F75EE0609181073EF8E8CD5E99AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/1/34352e3138332e35302e302f32332d3233203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:a0:1d:ec:d4:20:48:b6:bb:70:06:08:9f:a0:e5:c5:f2:89:
         c3:6e:5e:fb:de:ca:7c:2d:7a:79:be:98:07:fc:94:db:74:4d:
         05:08:78:fd:5e:07:c9:10:cf:0b:a6:91:fe:69:b3:d3:38:aa:
         22:f2:08:3b:85:f8:80:1e:3e:5f:32:73:b6:54:38:28:e2:f2:
         8f:8d:30:87:d9:03:07:bb:ab:29:50:23:cc:8d:53:85:43:32:
         1e:d4:80:97:d6:4a:32:9f:54:af:97:27:2b:29:c0:8e:6c:8b:
         e2:18:65:75:b7:51:bc:04:0d:52:82:cb:c3:6c:26:12:ae:8f:
         ee:11:80:44:08:8a:a0:3f:24:a5:de:c2:0e:c2:cf:6b:2a:dc:
         62:e9:3c:75:2c:49:d6:52:07:0c:b3:a0:bc:91:5f:a8:c0:3a:
         c9:c9:e1:87:45:41:22:42:0d:39:82:a5:51:77:67:58:91:36:
         e2:f1:56:c2:da:2d:d3:d3:4f:07:11:df:ba:f2:58:c7:96:c1:
         6e:7e:69:c0:6a:e2:c1:55:65:fa:6a:29:e7:8c:65:66:ea:8e:
         c2:aa:10:89:8c:67:84:81:d2:ae:ba:f3:86:ae:b8:d8:fa:09:
         69:ba:53:45:65:f8:87:de:b8:fe:b9:5a:29:4f:b1:a8:33:d5:
         de:f9:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:02:37 2025 by rpki-client