Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          kMMoCIwhmzeM3aJx/rtqePFNUT9D39UdFPjuOrawft8=
Subject key identifier:   A7:55:B8:F1:5F:9D:7E:15:DD:32:E3:A6:A2:16:7C:1F:5A:EA:4D:AC
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       1BE5FD35A17638B84DB69D6248D54A094BB0C2DB
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:43 +0000
ROA not before:           Fri 20 Sep 2024 01:00:43 +0000
ROA not after:            Fri 19 Sep 2025 01:05:43 +0000
asID:                     263917
IP address blocks:        2804:27b0:8005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e5:fd:35:a1:76:38:b8:4d:b6:9d:62:48:d5:4a:09:4b:b0:c2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:43 2024 GMT
            Not After : Sep 19 01:05:43 2025 GMT
        Subject: CN=A755B8F15F9D7E15DD32E3A6A2167C1F5AEA4DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:9d:52:84:3b:e6:cc:61:6f:22:02:a6:16:
                    47:63:79:55:a7:27:50:eb:d6:06:b8:08:30:7b:3a:
                    d9:e9:a7:17:9b:de:cb:93:cb:56:7d:13:01:f1:e2:
                    67:11:e4:c5:8d:dc:c9:57:21:ac:ef:50:c2:82:8e:
                    58:74:44:35:54:3c:e8:5b:ee:1e:8d:3d:7c:f3:f1:
                    0a:2e:16:0d:6e:d1:1d:fe:e0:c0:4e:9b:3c:00:6d:
                    42:bb:2a:ac:87:d0:f5:5c:66:39:76:92:a8:48:ab:
                    7d:43:ab:86:e2:03:45:e3:44:42:02:b6:a1:6a:08:
                    aa:69:79:6d:fc:75:0a:83:e2:b8:dd:97:f9:e2:2e:
                    00:e7:fd:34:68:57:01:39:9b:b2:bd:8a:62:9c:7a:
                    e6:2a:74:88:42:4b:c3:59:74:ff:8a:dc:55:5e:6f:
                    03:d8:fe:db:04:f0:76:05:16:c4:43:0f:78:18:2c:
                    2e:74:0e:e4:a6:91:86:40:ad:23:5c:4d:21:01:a7:
                    36:bb:e6:c5:c1:f4:a9:51:52:e5:dc:01:86:3f:1c:
                    e0:2d:dd:08:a7:63:50:d8:a6:25:05:f8:a8:96:17:
                    f0:86:dd:4a:d8:b5:6f:43:43:e0:1b:35:d9:f3:64:
                    41:5e:e3:15:a0:05:5e:a2:9c:87:e8:e7:e8:79:fe:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:B8:F1:5F:9D:7E:15:DD:32:E3:A6:A2:16:7C:1F:5A:EA:4D:AC
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:85:5e:33:d0:ca:9f:d6:8f:2a:78:2d:87:27:12:07:18:
         bf:ed:12:f3:39:91:bc:58:ff:f3:bc:7a:c6:ae:1d:64:a6:b7:
         02:bd:3c:8a:af:39:87:73:b7:a7:c6:60:0d:30:a7:e4:c8:2c:
         24:fd:21:cd:8a:34:0d:72:9a:d8:15:a8:28:25:cc:fc:5e:d0:
         00:a6:54:fc:4b:84:08:7d:32:4a:9b:07:46:db:7e:bd:76:b3:
         dc:dc:9a:f2:9f:73:41:35:84:27:1a:2a:b3:34:ee:88:81:e2:
         32:42:4a:34:21:d7:75:55:0c:7f:df:37:8b:a5:dd:a4:84:4b:
         e1:4b:52:5a:c8:31:aa:0c:8f:8c:36:51:6b:7a:af:48:3b:ac:
         43:41:b0:d7:e0:8e:a0:e5:93:7a:9d:bb:a1:83:8c:bc:52:b2:
         d3:83:17:1d:32:dc:5f:43:bc:bc:e7:e5:b4:ae:97:4b:ee:e4:
         dd:cf:00:4a:81:8b:7e:62:ca:69:02:59:56:fd:8b:f6:32:34:
         38:e1:6e:87:a3:45:56:e0:39:dc:68:be:99:5f:cc:37:4e:f4:
         0e:b6:c2:75:91:ab:3d:27:e4:3d:0d:0d:11:55:6d:46:17:3a:
         5b:d5:50:49:7b:5d:b7:b9:45:99:6f:d0:5d:6e:70:88:51:09:
         fd:f8:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org