Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33322e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          +3m6w3uzlHn5pyvUMawDjRBQO74nsE8KWchzz2hMEIo=
Subject key identifier:   2F:F5:7F:EF:56:4D:76:10:34:1C:7B:D7:DF:6F:A1:C4:66:36:25:3F
Certificate issuer:       /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial:       7FCDF7792B8CCD67BF55B0115E90443DC2D62B83
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa
Signing time:             Thu 10 Apr 2025 17:59:33 +0000
ROA not before:           Thu 10 Apr 2025 17:54:33 +0000
ROA not after:            Thu 09 Apr 2026 17:59:33 +0000
asID:                     264550
IP address blocks:        170.0.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cd:f7:79:2b:8c:cd:67:bf:55:b0:11:5e:90:44:3d:c2:d6:2b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
        Validity
            Not Before: Apr 10 17:54:33 2025 GMT
            Not After : Apr  9 17:59:33 2026 GMT
        Subject: CN=2FF57FEF564D7610341C7BD7DF6FA1C46636253F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:16:42:52:e5:c1:49:03:97:81:0d:70:d1:
                    99:85:0d:c5:ab:d2:29:81:15:7e:12:98:b6:6b:75:
                    a4:ee:b0:2b:39:3b:bd:00:6e:61:de:4e:08:08:04:
                    ec:b9:d3:8b:6e:2e:28:c9:b9:27:9d:9c:0d:4c:a5:
                    81:53:01:31:32:66:ff:5b:15:12:6d:fd:60:ea:05:
                    1f:74:49:ed:c9:ea:52:7b:ca:cf:c0:f0:61:8a:67:
                    af:d2:93:fc:29:72:6e:7a:25:4d:a4:65:f7:d3:43:
                    1d:2d:0d:90:40:38:ad:d0:40:0b:7b:ea:dc:8e:05:
                    aa:b7:fd:72:c8:36:b1:ae:7c:3f:3e:58:9a:1a:de:
                    40:bf:29:68:1a:c8:bd:a7:30:54:12:c1:71:d3:37:
                    d4:9c:2a:8a:e0:91:75:dc:1e:8f:09:af:ae:2e:fe:
                    d2:82:f6:b1:6d:3a:b2:0c:41:d7:c2:06:ee:8d:1e:
                    a9:d9:e0:88:7c:18:67:4e:f7:c3:c9:b5:57:a1:f2:
                    f3:f0:17:72:92:38:9a:4e:e5:9d:b1:1f:5d:16:40:
                    5d:e0:da:ae:4e:39:09:58:e0:05:ef:72:20:14:5a:
                    ec:26:d0:24:3a:06:d8:f1:3e:85:8e:6e:20:48:3d:
                    f5:6c:85:95:27:4e:cf:b2:95:5e:23:25:a5:45:6f:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F5:7F:EF:56:4D:76:10:34:1C:7B:D7:DF:6F:A1:C4:66:36:25:3F
            X509v3 Authority Key Identifier:
                keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33322e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:85:6e:96:d5:2b:68:64:80:d8:56:0a:54:89:ca:b3:8d:af:
         bc:d2:1b:fa:13:ad:39:9f:9c:6a:7d:79:1b:f6:0b:0c:c2:e2:
         23:87:0d:10:b6:9d:98:56:e7:bd:81:4a:44:e8:71:04:35:06:
         46:aa:b2:1d:ac:52:8a:f2:8a:18:32:f7:d4:79:41:61:00:90:
         5e:30:54:73:b0:4a:e7:7d:11:a7:81:28:0f:ca:09:d0:e7:11:
         7b:4d:8b:b2:e6:25:59:38:38:e9:d8:b4:99:1f:b1:b8:23:46:
         dc:5e:f0:bb:fa:fa:69:ee:30:44:04:0b:80:e8:8e:17:99:47:
         13:e9:7f:c9:31:de:b9:37:5c:62:d8:74:7a:32:cb:ec:04:2f:
         a5:d6:44:82:7c:e7:ad:5a:09:29:55:cd:b4:70:ef:d4:46:27:
         7e:bb:20:69:a8:8c:f3:5a:87:95:50:07:be:56:66:2f:d7:fc:
         29:e9:a5:47:e3:00:4f:be:0d:e1:0c:8c:ca:ef:e8:7d:f5:79:
         8b:50:fb:1a:5f:49:44:42:c0:8b:78:b2:c5:fd:c4:f1:17:9b:
         f1:74:81:eb:b4:8b:33:0d:df:37:39:64:a3:2a:83:14:d2:a1:
         d9:a3:e3:ef:1d:29:f0:a3:4d:84:33:09:19:16:72:5e:9a:d6:
         78:e0:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net