Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3234203d3e20323634353530.roa
File:                     3137302e302e33332e302f32342d3234203d3e20323634353530.roa (raw, json)
Hash identifier:          izOr8pOr/SPwhq312A3tTbuqTGqg1gGovTJImlgyzTI=
Subject key identifier:   9A:5F:B2:B2:51:C4:41:24:2E:33:12:05:38:FE:23:8B:F3:CA:64:B2
Certificate issuer:       /CN=460AB498EE332630D0D0D3A518D373758466C069
Certificate serial:       4972C004E8036D14D3E30B31A5FF105521AED90A
Authority key identifier: 46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3234203d3e20323634353530.roa
Signing time:             Thu 10 Apr 2025 17:59:54 +0000
ROA not before:           Thu 10 Apr 2025 17:54:54 +0000
ROA not after:            Thu 09 Apr 2026 17:59:54 +0000
asID:                     264550
IP address blocks:        170.0.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:72:c0:04:e8:03:6d:14:d3:e3:0b:31:a5:ff:10:55:21:ae:d9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460AB498EE332630D0D0D3A518D373758466C069
        Validity
            Not Before: Apr 10 17:54:54 2025 GMT
            Not After : Apr  9 17:59:54 2026 GMT
        Subject: CN=9A5FB2B251C441242E33120538FE238BF3CA64B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:19:7e:1e:7b:7b:64:01:2b:2c:a4:f5:29:
                    be:37:2d:37:39:dc:7b:22:1a:89:23:b1:e3:8f:d8:
                    fb:f4:ba:ea:0f:9c:89:52:4c:90:00:4c:5a:57:30:
                    30:d6:63:3e:2c:c3:77:aa:d2:bc:7c:d6:af:1e:36:
                    39:61:91:f8:29:0d:12:28:e1:0a:a6:6e:08:18:9d:
                    ce:46:db:f8:45:86:41:3b:2f:79:3b:c8:95:2d:ec:
                    c9:63:31:ac:76:62:c2:42:de:d4:04:cb:c5:90:31:
                    55:09:3c:92:db:62:94:bb:d6:fa:d8:9c:76:63:26:
                    e7:60:69:10:2a:78:97:96:8a:f9:e1:05:5b:68:d4:
                    45:df:a5:34:f0:41:d9:a6:ee:29:51:3f:ae:40:74:
                    a8:c8:d4:78:ec:c1:4a:fe:bf:1d:c6:5e:12:f7:e7:
                    48:01:d0:73:b0:d1:a3:e9:4b:10:63:a6:8a:6c:6c:
                    c8:9f:10:b6:1d:f9:25:40:8d:d6:b1:e1:c9:30:07:
                    59:02:08:25:d1:80:35:56:77:34:81:f6:7a:00:b3:
                    ec:01:0b:0d:a4:0b:05:16:e4:77:67:1e:b3:1c:56:
                    5c:78:e5:b3:c8:f8:b9:cc:26:3c:cb:cd:63:db:85:
                    e8:d4:a9:ea:e7:27:f1:89:ef:f7:09:a0:41:54:78:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5F:B2:B2:51:C4:41:24:2E:33:12:05:38:FE:23:8B:F3:CA:64:B2
            X509v3 Authority Key Identifier:
                keyid:46:0A:B4:98:EE:33:26:30:D0:D0:D3:A5:18:D3:73:75:84:66:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/460AB498EE332630D0D0D3A518D373758466C069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/460AB498EE332630D0D0D3A518D373758466C069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3137302e302e33332e302f32342d3234203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:d5:77:2a:a2:d8:4c:07:89:da:ae:a8:0f:85:6e:f6:f9:
         49:2b:dc:d8:e0:9f:1e:6b:c2:1b:82:10:16:ff:29:06:e6:1b:
         75:aa:20:39:fd:fb:8f:9c:30:6f:0b:6b:0c:d2:c6:33:77:11:
         43:7b:e9:21:65:79:dd:4b:b2:5d:f6:13:84:05:da:86:8e:9e:
         95:70:47:7d:cb:11:77:96:77:5e:6f:d6:c9:2d:47:d3:c9:ee:
         c2:f7:4b:2c:c3:fa:f1:bf:4d:7e:4f:6d:42:d0:1f:b8:3f:fd:
         b7:fc:1c:8a:f0:2b:d2:dd:be:aa:69:48:d3:dd:a9:51:29:b8:
         38:0c:6c:f1:4c:e4:cd:17:b1:54:9b:2e:a3:fc:85:0a:4f:94:
         19:4b:17:5c:b6:e3:eb:3c:b4:41:98:59:6d:8e:df:d7:28:cc:
         a3:c9:4d:1f:0f:2d:48:0a:90:37:b2:0d:9e:58:ff:2b:32:0f:
         96:32:65:9f:2f:45:f1:51:6e:dd:55:79:65:77:6f:e8:6d:ae:
         2a:18:f8:60:76:9c:bc:76:b0:ad:9d:59:8a:83:2d:ca:11:e9:
         20:11:ae:1c:4d:00:1e:54:02:ac:9e:89:90:88:80:83:a7:de:
         09:c0:bf:85:b6:c1:cd:e8:b6:e4:91:bd:57:2f:3e:7f:24:93:
         00:34:94:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net