Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32322d3232203d3e20323634353530.roa (raw, json)
Hash identifier:          Lsme45CwROWtPhUMetIZSEvwAgMo8XahDfUVrFtmitI=
Subject key identifier:   AB:BE:0C:2B:B5:FF:E1:AC:0F:7A:A1:00:33:9D:60:78:C2:1E:45:D9
Certificate issuer:       /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial:       51A0735AFB60445FD685F6F1525BD012E4EE8A3D
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa
Signing time:             Thu 10 Apr 2025 18:03:16 +0000
ROA not before:           Thu 10 Apr 2025 17:58:16 +0000
ROA not after:            Thu 09 Apr 2026 18:03:16 +0000
asID:                     264550
IP address blocks:        138.0.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:73:5a:fb:60:44:5f:d6:85:f6:f1:52:5b:d0:12:e4:ee:8a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
        Validity
            Not Before: Apr 10 17:58:16 2025 GMT
            Not After : Apr  9 18:03:16 2026 GMT
        Subject: CN=ABBE0C2BB5FFE1AC0F7AA100339D6078C21E45D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:13:86:fc:56:a1:fe:22:78:bc:23:81:fc:
                    bf:4e:3d:b1:88:32:03:8a:5e:3a:ac:1d:a6:22:36:
                    ab:31:16:ad:81:d5:d4:10:05:92:1c:16:44:a3:05:
                    5f:bb:29:f8:17:31:c2:3d:54:cf:5c:06:95:c6:fc:
                    ab:4c:37:c0:76:d6:69:b7:2d:d8:05:ab:c8:e7:96:
                    b8:52:c9:3b:0b:d3:75:8f:bc:8f:d5:f9:cd:6d:54:
                    eb:89:88:90:8a:02:46:52:49:e8:42:4d:8b:0b:18:
                    fc:db:39:18:e5:fb:0c:de:7f:0d:3b:37:54:79:37:
                    78:08:48:7b:b1:fb:cf:68:fe:45:43:50:e9:db:4c:
                    2a:f2:b6:80:57:c0:51:9c:2a:c7:5f:03:43:20:83:
                    98:4c:1b:29:e3:ea:1c:fa:f8:26:b6:d7:5f:4e:aa:
                    de:81:e8:14:10:08:de:c5:b8:43:eb:eb:f0:fe:79:
                    dc:20:08:df:48:84:a2:0c:5c:bc:d9:41:68:68:5b:
                    b3:7a:ec:d5:ee:4b:9f:bf:cb:2b:21:4c:cc:e3:ea:
                    05:67:ff:b8:09:f6:04:cb:77:01:76:7f:8e:89:37:
                    d9:6f:27:8b:99:93:3a:a7:9e:83:a1:fd:fa:9e:3f:
                    f2:e9:b2:ae:73:a5:f9:87:a9:7d:ec:ae:66:1c:33:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:0C:2B:B5:FF:E1:AC:0F:7A:A1:00:33:9D:60:78:C2:1E:45:D9
            X509v3 Authority Key Identifier:
                keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:87:c8:ef:7d:b6:b6:c3:bd:65:67:7d:cf:a3:73:1e:1e:cb:
         53:bd:24:dd:66:93:71:d6:85:74:fe:2a:3b:c1:8b:26:af:a6:
         db:a4:d1:0a:e6:67:af:00:03:9a:b4:89:7c:57:c8:98:fb:f7:
         1b:6a:68:69:f6:b2:d6:3e:28:f9:64:45:f9:d7:84:e0:00:40:
         2b:77:d1:f6:54:63:fa:c2:b5:b3:1b:0e:87:0f:32:ea:cc:5d:
         3f:51:88:89:7d:ff:49:0f:93:a6:7d:64:03:ac:28:f8:42:2b:
         ca:a9:40:e5:72:9e:f7:bd:8b:fc:4c:54:0d:58:cb:75:cf:ca:
         d5:e6:ec:56:93:19:38:d5:a8:7a:93:c0:a4:a0:02:13:2f:ab:
         95:cd:31:bb:cb:39:0c:3b:51:9e:6a:71:7d:f2:58:5c:7d:5b:
         8e:34:32:a5:2b:78:57:f2:3e:29:d7:5f:2c:23:82:6f:e1:c5:
         c5:e2:b2:b4:a2:af:3b:53:3d:53:bb:d1:28:3a:f7:9c:44:6e:
         f4:2f:76:88:79:19:db:90:79:10:e4:d4:9a:55:bc:85:cd:9c:
         4b:cc:0e:2d:6c:de:85:a8:14:c0:b9:c0:1f:a6:25:4e:f6:39:
         af:e6:c6:84:5d:88:8a:4e:3f:cc:71:1f:bd:0e:53:1d:6c:a0:
         f0:f1:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net