Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa
File:                     3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          vWsQORMDzWxQb0F9CPDP9oDvXtM9bjCbdxkH2cFl6IM=
Subject key identifier:   2E:DA:A3:3B:61:38:20:EF:8F:31:A4:B8:C1:96:38:39:ED:BB:DB:6F
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       4C874CEFFDAB5ACD88FD002887F2487F9AC73620
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa
Signing time:             Wed 03 Apr 2024 18:32:01 +0000
ROA not before:           Wed 03 Apr 2024 18:27:01 +0000
ROA not after:            Wed 02 Apr 2025 18:32:01 +0000
asID:                     263917
IP address blocks:        138.204.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:87:4c:ef:fd:ab:5a:cd:88:fd:00:28:87:f2:48:7f:9a:c7:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Apr  3 18:27:01 2024 GMT
            Not After : Apr  2 18:32:01 2025 GMT
        Subject: CN=2EDAA33B613820EF8F31A4B8C1963839EDBBDB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:e5:b5:ae:24:bd:bb:c5:68:6b:98:f1:92:
                    7d:27:2c:91:0c:07:28:f6:35:bd:98:23:af:18:89:
                    28:08:16:43:41:fd:cc:c6:ea:0d:3e:0f:3e:a0:f8:
                    27:bb:1c:72:07:7e:02:05:fc:f8:79:d2:8b:16:31:
                    4b:32:bf:bf:93:1d:a9:8d:6e:b4:cd:25:40:7c:36:
                    10:54:02:c1:c4:f7:49:14:ab:ad:3a:db:55:fd:97:
                    2a:21:3a:85:6f:a7:2f:3a:73:42:fe:50:a4:d7:f0:
                    3e:8e:8d:18:b5:90:80:a7:cf:28:43:00:cc:ae:65:
                    28:b9:ee:0d:23:5b:01:5f:d8:cb:8e:56:22:62:2a:
                    58:2b:38:fb:4a:48:46:fa:de:db:7a:9c:e8:52:2d:
                    2a:f0:b2:f0:6d:81:29:01:09:68:7b:8e:26:0c:11:
                    ce:3c:f9:20:f1:5b:89:96:8f:a3:06:fb:ca:2e:59:
                    cf:b6:4b:bf:13:2f:9b:bd:07:43:a6:31:70:56:ae:
                    0f:26:1c:ba:a6:97:77:4c:c7:e6:ed:1c:b9:13:b7:
                    40:1f:31:98:52:9c:55:52:d7:88:26:8a:79:f1:fd:
                    ad:37:ca:01:d8:86:24:b5:4d:cd:b3:7b:0c:61:31:
                    ef:ae:f2:18:7c:29:df:46:72:f1:56:0e:07:64:d1:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DA:A3:3B:61:38:20:EF:8F:31:A4:B8:C1:96:38:39:ED:BB:DB:6F
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:f9:4e:2a:b0:a9:ee:c3:65:08:be:06:58:46:22:a4:b3:
         80:f1:89:bf:83:3b:28:93:72:92:1c:20:96:96:b4:21:fb:72:
         dc:21:cf:2c:16:36:e6:b0:f3:91:67:6b:56:5b:50:08:2b:94:
         c3:d3:b3:65:b5:8f:40:0c:c3:ba:e7:52:ed:de:7d:e8:5e:c7:
         a1:19:ef:a6:ff:d2:19:45:06:9e:bf:91:e9:39:16:20:0a:b0:
         5c:81:eb:54:e4:25:40:6d:f0:4f:53:30:a0:66:0b:18:9c:e1:
         67:3d:4b:00:1f:df:7e:2e:b0:c0:85:0b:96:78:5a:42:48:24:
         fa:78:43:7a:b8:b4:86:5e:97:36:de:a5:47:e1:60:26:84:71:
         69:77:21:7a:10:1c:23:a2:7b:ae:8c:52:0d:d6:13:ba:87:fa:
         69:cc:57:c7:3d:01:51:b2:49:3c:39:8a:03:7b:52:f7:68:44:
         b6:3f:0c:94:de:d9:37:14:24:60:31:60:b6:b6:c3:02:06:b3:
         42:f5:09:51:06:d8:6b:30:44:39:73:0c:fd:2d:47:f0:26:6a:
         ed:54:af:a2:c7:84:bc:57:95:3c:7b:2c:ac:7c:3b:50:0d:06:
         f3:bf:1d:d8:cf:63:c7:16:3d:33:b4:a7:dc:5c:cd:cb:7a:97:
         c6:48:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org