Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
File:                     3133382e302e3133392e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          TjBwj5HnJ5WXG8Xg3bek03DgM6plXl/WNEnuQv+X+CI=
Subject key identifier:   33:69:F1:E3:56:A7:45:75:14:D1:45:86:38:83:9B:4F:45:9B:89:4B
Certificate issuer:       /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial:       2208845360963FB3A16F9EC95ED638B0F55CC59C
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa
Signing time:             Thu 10 Apr 2025 18:01:00 +0000
ROA not before:           Thu 10 Apr 2025 17:56:00 +0000
ROA not after:            Thu 09 Apr 2026 18:01:00 +0000
asID:                     264550
IP address blocks:        138.0.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:08:84:53:60:96:3f:b3:a1:6f:9e:c9:5e:d6:38:b0:f5:5c:c5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
        Validity
            Not Before: Apr 10 17:56:00 2025 GMT
            Not After : Apr  9 18:01:00 2026 GMT
        Subject: CN=3369F1E356A7457514D1458638839B4F459B894B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:4f:42:af:27:5b:ef:00:71:01:b5:14:5b:
                    56:31:5f:2e:a9:b9:6c:3a:8a:51:77:50:93:c6:2a:
                    65:30:86:28:5f:3f:2a:84:ee:13:17:56:ba:c2:a2:
                    d0:af:20:49:99:35:51:33:02:a8:e5:a6:f9:03:94:
                    cf:d2:02:6e:b6:79:1b:bb:a5:9d:ce:d7:73:ed:e9:
                    46:d4:db:e8:47:31:a7:a4:5b:59:97:5b:6e:6d:9b:
                    6a:d1:a9:e0:e3:77:be:a3:03:fa:1c:15:12:61:8c:
                    77:a0:12:bd:25:1e:06:cc:74:4e:86:94:03:e4:8b:
                    f8:a0:45:9d:12:fc:5d:36:fe:db:83:40:64:83:56:
                    d5:3c:a0:f3:54:e9:2a:6c:b0:d9:ce:33:ca:f8:31:
                    7f:4e:3e:af:08:12:28:0c:26:44:bc:21:b3:b3:26:
                    69:2f:a6:c2:6b:dd:50:95:1d:8d:42:82:6c:09:0e:
                    b1:a0:02:5e:83:f6:f7:3c:12:99:c5:94:1e:80:a9:
                    0f:52:69:a0:a7:e8:16:18:c1:65:e6:35:f0:21:44:
                    bd:39:3a:4a:fd:0f:ae:76:ad:50:4e:8f:4e:22:ed:
                    52:ae:20:22:17:f7:ef:b4:05:f7:85:9f:74:f9:6a:
                    75:e2:41:3e:c2:ef:ca:44:ed:db:ea:24:89:10:9c:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:69:F1:E3:56:A7:45:75:14:D1:45:86:38:83:9B:4F:45:9B:89:4B
            X509v3 Authority Key Identifier:
                keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133392e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:a5:28:54:85:ee:42:46:c2:23:1d:b9:57:9d:91:82:ed:
         70:db:81:36:00:98:a9:5f:b1:68:91:bd:57:6c:09:50:a4:f6:
         e7:8f:a1:13:99:3d:db:41:26:d1:86:46:50:8e:d2:62:c4:bc:
         ec:01:98:f5:45:cd:7f:44:44:3a:42:2c:fb:d4:67:66:c9:54:
         56:a0:7e:c1:9d:a4:d7:81:5a:f5:f4:b8:39:73:50:10:2e:fe:
         dc:28:db:c0:81:1e:53:fd:ef:67:47:be:aa:34:b3:9e:ca:3c:
         49:6e:de:0a:84:62:5e:69:9a:a9:29:38:73:bb:f2:17:ff:ca:
         1e:cf:e6:2a:d8:2b:65:00:41:b2:55:34:5d:94:c6:76:50:83:
         73:a2:33:f5:a1:92:61:a0:7b:ef:79:d9:c1:de:c1:b5:b5:66:
         89:27:c3:ae:be:1a:77:a8:be:c0:dc:a0:08:66:90:4c:07:c7:
         27:3d:d4:40:7d:a2:ae:5a:40:7a:85:73:ae:25:5d:ac:ef:85:
         d4:c2:e1:6f:55:7f:6e:6c:64:6d:1e:9f:15:17:cc:34:aa:8d:
         fe:cc:a7:bc:25:7f:19:4f:2a:4c:d9:06:81:df:c4:47:e1:06:
         a7:58:53:0d:15:c9:19:bb:62:16:d6:2e:71:07:95:f2:ac:38:
         99:a1:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net