Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133382e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          adIund5eyrHkP5jc+2WOr+UE+Hfa4Sj5tcjhdJiSAbc=
Subject key identifier:   B8:26:37:5A:2D:11:F0:B3:58:C6:4A:17:70:B5:5E:AA:5A:99:EF:2C
Certificate issuer:       /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial:       1BEC9A1999610347BF19407515B11B4B139EE1BA
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa
Signing time:             Thu 10 Apr 2025 18:00:45 +0000
ROA not before:           Thu 10 Apr 2025 17:55:45 +0000
ROA not after:            Thu 09 Apr 2026 18:00:45 +0000
asID:                     264550
IP address blocks:        138.0.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ec:9a:19:99:61:03:47:bf:19:40:75:15:b1:1b:4b:13:9e:e1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
        Validity
            Not Before: Apr 10 17:55:45 2025 GMT
            Not After : Apr  9 18:00:45 2026 GMT
        Subject: CN=B826375A2D11F0B358C64A1770B55EAA5A99EF2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:d0:3d:8a:7b:39:e8:31:a7:f7:86:6d:ff:
                    b3:80:c0:ff:ad:35:f5:ef:35:a6:74:e8:53:68:6d:
                    41:c8:95:97:32:c4:de:05:6d:45:21:d0:05:21:2b:
                    f1:70:1c:b9:d7:e6:15:2c:1b:93:ab:9f:be:1e:a5:
                    0d:8e:66:9d:8c:e3:57:43:08:df:b3:8d:5d:04:e7:
                    fc:30:cd:39:52:c9:03:48:92:9e:96:f5:e3:65:88:
                    40:e9:f6:e6:d6:dc:59:be:d2:57:ca:df:ef:3c:25:
                    de:8d:a9:ac:ae:84:e3:3e:6b:48:3f:af:37:63:73:
                    e0:14:6b:46:0a:34:1a:12:9e:17:52:a3:6e:53:bd:
                    ae:3b:23:8a:05:2e:c5:a1:d8:26:99:46:4b:12:7f:
                    f7:27:86:c3:d6:46:d6:97:4b:34:80:22:de:71:1c:
                    38:38:d7:1d:95:7f:4e:ac:80:d4:26:99:33:2b:f2:
                    6e:b3:41:0b:f9:7c:2f:5b:20:80:ba:f3:98:69:c2:
                    01:13:64:5c:0f:0e:f7:dc:09:c6:32:2b:31:62:ff:
                    c2:1a:6a:d3:09:bb:21:05:72:c3:e4:b3:e7:3a:68:
                    f3:b2:f3:1a:17:17:c8:c3:8d:cc:bb:e9:28:4d:8b:
                    0b:5d:39:2b:05:d6:30:0c:f6:4b:21:23:97:22:f2:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:37:5A:2D:11:F0:B3:58:C6:4A:17:70:B5:5E:AA:5A:99:EF:2C
            X509v3 Authority Key Identifier:
                keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:ac:1d:c3:05:55:f4:59:7d:27:d8:5f:b0:88:2d:a9:78:
         af:f9:a6:a3:26:e9:61:9d:b8:25:44:4c:c1:8b:8b:b1:0d:a3:
         dc:c4:3b:50:2e:45:ba:53:98:88:1d:f3:3e:05:80:df:eb:1b:
         5c:df:c5:76:fb:80:95:81:e9:7d:35:fc:48:ca:0c:f8:e3:dd:
         95:43:56:df:8d:3e:20:7d:6b:89:de:ab:6e:38:87:ea:7a:1d:
         06:ff:8c:74:d6:90:d4:0e:10:57:bf:15:24:95:66:73:86:2c:
         89:22:f4:1a:00:a6:5b:45:78:3f:18:9c:ad:1e:3c:21:1b:30:
         b7:ab:78:02:15:0d:6d:15:e7:10:a9:0f:2a:45:0f:e9:9d:01:
         ca:1d:63:3c:78:31:b4:03:73:bd:b6:91:c6:03:6b:ba:7d:05:
         88:b1:03:db:d0:12:66:a1:4a:e8:76:f5:67:6e:1d:d6:ca:21:
         a0:a1:4e:ad:7a:08:19:ed:77:25:52:62:06:d6:03:13:60:23:
         c2:d2:46:a9:35:c9:3a:65:09:08:fd:f6:7c:2f:f4:92:13:a0:
         a1:ac:db:e8:24:e9:01:52:72:6b:1c:e2:9e:20:ae:2b:0c:d5:
         07:b3:1e:40:8f:96:b3:13:96:59:75:96:d5:d6:c9:56:33:af:
         3e:76:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net