Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
File:                     3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa (raw, json)
Hash identifier:          EhnP/DbU2CFt0WzfIaoYEngRCwAdxxvDzbnrttcFgTw=
Subject key identifier:   3C:B8:38:69:E3:44:41:82:5C:4C:EA:AB:2A:DE:81:32:03:AA:2A:FD
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       019C9AC9A45C0DD0B882FE043587B666D96609D4
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
Signing time:             Wed 03 Apr 2024 18:32:00 +0000
ROA not before:           Wed 03 Apr 2024 18:27:00 +0000
ROA not after:            Wed 02 Apr 2025 18:32:00 +0000
asID:                     263917
IP address blocks:        138.204.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9a:c9:a4:5c:0d:d0:b8:82:fe:04:35:87:b6:66:d9:66:09:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Apr  3 18:27:00 2024 GMT
            Not After : Apr  2 18:32:00 2025 GMT
        Subject: CN=3CB83869E34441825C4CEAAB2ADE813203AA2AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:a2:71:3c:68:c0:71:4f:2d:68:98:df:38:
                    a4:3f:ea:88:db:6f:88:12:5b:57:8a:f7:b8:00:06:
                    1d:81:ae:de:4e:ee:74:01:2d:f6:1a:0c:53:09:22:
                    e2:b6:7d:0b:9d:fa:2c:80:9d:51:5c:88:22:8e:5d:
                    58:df:b0:2e:05:d6:a9:e0:16:b1:4f:9d:40:f9:90:
                    97:8a:ea:3c:a9:7e:f5:bd:e3:db:75:52:9c:7f:ef:
                    36:ae:a1:39:e4:af:0c:05:9e:d3:be:d4:f2:6c:10:
                    95:f6:ce:37:30:53:36:60:b2:1a:8b:7b:84:c2:d1:
                    79:75:08:bd:26:c8:8c:86:98:e4:a8:a1:69:f5:ca:
                    23:5f:36:c8:70:69:f9:4d:82:84:73:d2:e0:5e:5a:
                    cd:3d:5e:3d:65:a3:59:6c:f9:a6:2c:04:45:c3:db:
                    f2:67:1e:68:02:58:4b:32:46:9e:8e:ab:c5:28:4e:
                    d9:3d:3c:31:08:5f:40:15:bc:41:36:d4:bd:9b:10:
                    e3:f5:d6:bd:5d:40:35:bc:c3:77:e8:9c:b2:ce:57:
                    8b:a7:75:83:c2:b1:d7:c5:93:eb:28:31:e6:3f:62:
                    09:99:f9:bf:78:53:a5:71:8b:d7:c7:b1:db:32:f8:
                    38:65:a8:84:57:c5:f0:5f:99:f5:c4:d0:ca:e7:7f:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B8:38:69:E3:44:41:82:5C:4C:EA:AB:2A:DE:81:32:03:AA:2A:FD
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:d7:4f:a1:7d:37:36:6c:38:63:e8:07:43:7c:4f:52:b6:
         9d:64:6c:6b:12:fe:10:4b:a3:de:74:35:26:10:98:e0:0e:32:
         fd:59:7d:d6:5f:82:e3:1a:ee:d4:7f:b2:2f:52:6b:5f:c9:ac:
         ab:9c:00:6c:df:13:eb:6b:7d:49:05:17:a8:4a:0e:83:74:91:
         fd:de:0c:56:aa:d2:b2:fd:c4:52:83:79:75:e7:20:b0:54:d9:
         dc:75:b4:09:d7:5e:6f:2e:34:52:ca:dc:18:fe:6e:67:59:88:
         a3:76:4b:6f:88:1a:f5:d0:2e:6e:14:f0:c4:e5:36:53:18:52:
         1f:2e:22:c6:91:89:b2:af:22:97:67:22:c1:70:fb:ff:09:03:
         2f:c6:1d:fc:d0:c1:9d:b3:b1:c7:ea:a5:aa:f2:b8:84:70:4a:
         33:7d:78:36:9a:23:a4:c2:70:64:2f:15:0d:a7:6f:25:05:a7:
         1d:c3:9f:f3:02:e8:7b:fe:cc:0f:d4:69:c6:8a:37:af:e4:89:
         f3:f4:b4:d6:91:4d:36:ae:4c:e3:81:3d:53:ca:8e:7b:82:7d:
         3a:6b:71:d1:ee:70:e2:50:fb:c5:f2:5f:25:d8:5c:b2:49:dd:
         7b:5f:3c:2d:1c:0d:ab:54:c5:c1:ad:01:69:2a:9e:72:4e:c5:
         fe:c5:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org