Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa
File:                     3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          aS9VnixAFxvup+/zzNlE5v7saBJTfxKk1GWRWQUMrWg=
Subject key identifier:   CF:61:04:D7:6E:3E:56:D9:33:D5:E5:5B:4D:BB:FC:26:29:B2:E7:40
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       549C5FCD05F89106C1633EBE3AE1E03FC16CB45C
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa
Signing time:             Wed 03 Apr 2024 18:32:00 +0000
ROA not before:           Wed 03 Apr 2024 18:27:00 +0000
ROA not after:            Wed 02 Apr 2025 18:32:00 +0000
asID:                     263917
IP address blocks:        138.204.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9c:5f:cd:05:f8:91:06:c1:63:3e:be:3a:e1:e0:3f:c1:6c:b4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Apr  3 18:27:00 2024 GMT
            Not After : Apr  2 18:32:00 2025 GMT
        Subject: CN=CF6104D76E3E56D933D5E55B4DBBFC2629B2E740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:33:23:71:78:c5:9c:ae:5f:c0:7d:8a:7a:
                    b5:e7:bb:e8:09:db:b2:d4:3c:5a:29:3f:87:3d:cb:
                    70:ee:7c:20:24:aa:29:6d:b5:f6:b4:53:eb:92:39:
                    fe:0c:1c:c6:de:1e:04:d6:de:9b:74:8f:e5:3f:0c:
                    44:df:87:a4:60:d2:75:96:45:99:34:ce:3e:a4:40:
                    06:6e:cb:21:33:ee:77:a9:d4:63:24:51:83:77:22:
                    7c:64:cf:17:29:6f:84:56:d2:e9:17:6f:aa:e0:e3:
                    bc:2a:cf:5c:86:ac:be:19:14:0a:1c:0d:a0:65:e1:
                    0b:4a:b5:bc:c9:fd:e8:8b:3a:d7:73:3c:28:c7:a2:
                    a8:3b:6e:fa:7a:a2:91:49:a3:bd:a4:27:4e:5a:43:
                    8a:f2:03:79:e2:41:c2:6c:41:61:65:20:6c:17:b1:
                    25:9c:62:8a:30:f7:44:83:bc:22:e0:c1:e3:5c:22:
                    cf:1b:61:b5:87:48:65:bb:e2:55:26:32:73:06:6a:
                    1d:3e:b2:23:e1:8c:b8:82:65:a9:f7:be:a7:56:7e:
                    92:69:1b:a3:5a:63:ae:4c:8d:da:4d:be:f0:12:af:
                    4d:e4:f5:c6:5d:2c:c8:5c:86:a5:1e:56:fa:d1:ae:
                    b2:2b:82:9f:c9:c2:50:7b:69:ae:20:7d:1e:a8:03:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:04:D7:6E:3E:56:D9:33:D5:E5:5B:4D:BB:FC:26:29:B2:E7:40
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233352e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:b8:e2:89:25:b0:ba:4d:21:bb:be:3a:c3:d8:58:9c:22:
         d5:1b:b8:32:a7:7b:18:5b:22:a4:bd:ac:05:6e:50:87:60:ab:
         fd:18:b2:2e:d5:38:6c:66:90:f1:c0:d7:2d:9b:f4:bb:49:65:
         07:66:7c:e1:3d:b0:b7:b6:e7:7d:5c:df:3a:59:6f:b5:b8:16:
         f7:8d:fe:34:f2:d5:71:1e:2d:e5:19:d5:db:0c:c6:0f:31:21:
         88:6f:0e:64:16:0e:0a:3a:9c:6c:79:21:1d:d2:82:22:89:38:
         39:ac:67:03:a3:9d:4b:91:49:2a:ab:fa:9a:38:d2:a9:cb:a2:
         97:fb:77:fd:0b:33:b3:ca:22:38:b3:11:70:c8:32:b8:67:aa:
         97:34:2a:a5:a7:df:55:bc:23:ab:05:71:d2:e7:ba:f7:07:df:
         ca:e0:9d:0f:7a:a5:9d:87:c0:e5:ee:b6:b0:13:e0:b0:91:c8:
         fe:1a:6f:2c:92:f7:77:eb:56:34:95:16:62:f1:a7:74:e3:61:
         f0:c7:11:a0:0a:21:6f:49:1f:d0:ea:4b:8a:46:fa:9f:89:2b:
         6d:8c:ec:2e:cf:de:d0:06:54:fc:98:f5:2b:25:86:6d:bb:ae:
         67:80:0d:23:25:4b:a6:fa:ef:4c:ff:6f:09:5e:b9:a8:62:0c:
         33:5a:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:25 2024 by rpki-client on console-ams.rpki-client.org