Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
File:                     3137302e302e33322e302f32322d3232203d3e20323634353530.roa (raw, json)
Hash identifier:          cgBaGUHfx95hOaI++kNRZDJx/N6BN+0/+PhSlm1MC3Q=
Subject key identifier:   4E:C7:1D:31:52:10:C0:06:A2:23:EE:1B:47:58:E8:E9:57:D1:53:21
Certificate issuer:       /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial:       064B17B54AD27F06BE382E9E72FF908E8A33CC29
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa
Signing time:             Thu 10 Apr 2025 18:03:09 +0000
ROA not before:           Thu 10 Apr 2025 17:58:09 +0000
ROA not after:            Thu 09 Apr 2026 18:03:09 +0000
asID:                     264550
IP address blocks:        170.0.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:17:b5:4a:d2:7f:06:be:38:2e:9e:72:ff:90:8e:8a:33:cc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
        Validity
            Not Before: Apr 10 17:58:09 2025 GMT
            Not After : Apr  9 18:03:09 2026 GMT
        Subject: CN=4EC71D315210C006A223EE1B4758E8E957D15321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:0c:65:96:d8:c4:05:6a:66:1e:ee:8e:fb:
                    8d:a4:78:8f:94:8c:cf:dc:94:70:f8:d8:18:fe:c4:
                    bd:21:8d:6f:9d:57:e0:e1:02:45:89:18:16:97:0d:
                    3e:1e:11:6e:e5:fe:e2:56:da:ef:76:cb:0f:b7:74:
                    43:c0:30:72:64:89:78:d8:25:37:14:a5:b7:74:97:
                    d4:39:91:3f:8c:ef:15:78:a6:4f:cf:eb:4b:3c:79:
                    3e:c2:b1:36:ae:d9:b2:0c:65:93:4d:bb:74:f8:28:
                    a4:16:91:3d:50:a0:d3:f8:53:ed:77:62:58:e9:3b:
                    8f:65:b7:84:10:16:66:51:19:bf:37:2f:cb:e1:d7:
                    da:6f:cd:35:0d:88:a4:69:af:f2:6e:1d:3d:69:77:
                    db:8e:f0:87:c7:b0:46:d2:0d:7a:20:66:86:9e:c5:
                    d8:1a:03:ef:be:50:77:98:92:70:4f:15:28:3d:c3:
                    98:99:c3:b9:e5:b0:30:9b:50:dd:53:a1:fe:47:9c:
                    d0:ab:12:83:b0:25:be:e5:b2:6e:b6:f5:ef:05:84:
                    0d:d5:da:4b:12:f8:cc:a7:37:bb:f9:c8:24:09:d7:
                    84:fb:e5:1a:b8:83:89:f0:20:d5:5e:49:c3:0a:4c:
                    ce:2c:f6:ff:07:cd:22:a5:68:ca:94:4e:31:68:00:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C7:1D:31:52:10:C0:06:A2:23:EE:1B:47:58:E8:E9:57:D1:53:21
            X509v3 Authority Key Identifier:
                keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32322d3232203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:dd:c7:3a:93:a9:3c:35:e2:d1:d0:d7:b3:18:7f:02:11:
         ac:f4:06:2c:21:07:5d:92:f1:00:0a:c0:23:99:a8:1f:d5:d1:
         3a:60:fd:b0:0b:c8:81:d9:bc:6b:05:3b:a2:07:2e:da:6c:bd:
         22:96:5d:3a:66:63:47:28:0a:76:13:28:fb:e4:eb:24:e9:92:
         8a:5c:c8:ab:51:bf:db:9c:aa:e8:97:0d:c1:35:08:9e:dd:e3:
         9c:13:ba:f1:38:dd:98:9c:08:fa:67:77:4c:a3:22:38:31:c3:
         8c:d2:92:9c:50:e0:95:76:3c:26:fd:3f:22:5d:85:01:df:78:
         9d:cc:d4:83:ac:83:5b:28:95:a7:d4:79:56:3e:6f:57:c9:94:
         96:a4:c3:5a:a4:57:5c:08:fa:9d:74:07:04:04:23:be:48:d1:
         db:58:96:b8:80:8d:64:d3:23:a3:cb:58:7c:53:6c:81:2c:ab:
         da:d5:fe:4e:b3:44:1c:d3:43:e3:3b:a0:a9:c6:76:3b:72:10:
         f7:34:d8:1f:28:7e:88:0e:22:8d:cb:fb:77:99:f9:d2:5d:36:
         07:ce:3c:bf:4b:c3:28:a8:3b:de:c7:28:35:97:8b:fb:bd:ae:
         79:4f:cf:ef:7c:4f:8d:90:f3:e5:70:ac:bb:c3:16:d1:99:c1:
         a5:b9:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net