Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383238623a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a383238623a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          YUhwV4cS6E6PuIstdoaCBbUOBgOdpo2v1LSQ7/aFf18=
Subject key identifier:   B9:2F:B1:F1:D2:61:7C:68:84:90:4D:4A:CA:68:4B:0D:6A:EB:B2:1A
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       52AEC04E0F40899CA641BBE2368863B4C0C5EBAC
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383238623a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:41 +0000
ROA not before:           Fri 20 Sep 2024 01:00:41 +0000
ROA not after:            Fri 19 Sep 2025 01:05:41 +0000
asID:                     263917
IP address blocks:        2804:27b0:828b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ae:c0:4e:0f:40:89:9c:a6:41:bb:e2:36:88:63:b4:c0:c5:eb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:41 2024 GMT
            Not After : Sep 19 01:05:41 2025 GMT
        Subject: CN=B92FB1F1D2617C6884904D4ACA684B0D6AEBB21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:bb:c7:74:77:11:aa:77:b9:48:d9:b2:a8:
                    26:53:b5:90:10:53:e6:05:4a:43:a5:df:cd:2e:f4:
                    5e:41:61:d4:cb:d6:94:85:1b:a7:6d:e6:b0:d4:7b:
                    02:f6:ba:bb:43:c4:62:fb:d1:3b:12:14:cf:c5:80:
                    fa:ad:3b:c3:df:6d:ae:5d:de:e3:12:dd:a1:0a:ff:
                    98:e5:ac:4b:05:2e:c4:0c:d9:61:8c:97:fc:e0:23:
                    88:3a:18:2e:d7:a5:68:50:eb:4d:d5:08:55:cf:fb:
                    1a:82:be:c2:18:6e:38:0a:4a:18:ea:ed:99:b0:58:
                    34:b7:11:ea:ef:d7:f6:bc:e7:6d:9b:04:f6:ad:64:
                    f0:86:2d:2d:2f:41:72:d0:c1:da:44:53:11:7c:cf:
                    c3:56:cb:01:ba:2e:a1:da:e6:c0:4f:6b:1f:62:7d:
                    47:8e:3e:dd:53:7e:ef:4f:9e:6a:f6:7d:a7:09:31:
                    b0:af:4f:8a:b5:72:67:df:0b:a5:0e:c0:e8:00:0d:
                    a0:0e:b9:19:9b:d2:70:ea:5c:74:8e:61:f5:f4:c2:
                    d4:1f:3e:be:30:f6:65:3e:50:ee:01:11:dc:32:19:
                    db:cd:fa:1c:63:d9:6e:4d:7d:6a:49:fd:21:87:ab:
                    47:49:c4:eb:66:3d:0e:fe:38:6b:b4:13:60:e0:8e:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2F:B1:F1:D2:61:7C:68:84:90:4D:4A:CA:68:4B:0D:6A:EB:B2:1A
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383238623a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:828b::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:62:ce:7d:24:46:28:4c:dd:0d:b8:59:9b:19:e3:a1:dd:
         57:45:11:91:01:6e:53:17:51:31:4b:12:1e:5f:70:d6:b9:13:
         c9:eb:bb:8c:31:3a:60:61:f1:5a:53:d9:c9:11:a3:8b:e4:a9:
         df:42:08:6e:60:b5:ec:40:3a:61:9e:63:2e:13:da:db:59:ca:
         aa:b8:09:bd:4f:8a:6d:a2:c8:3b:65:2c:6c:b6:7f:e1:f5:25:
         92:a6:b5:26:b2:e1:3c:a4:73:c0:a1:3a:7e:bb:d2:fd:db:e1:
         f1:b6:81:a3:44:41:d5:84:5c:04:74:67:08:56:71:4c:ba:49:
         a4:70:ea:e6:bb:ee:f3:3e:b8:9a:73:2b:77:c2:5f:de:d9:f4:
         65:f7:73:21:17:df:9f:36:00:4c:4f:24:d4:f5:5a:77:bd:a1:
         25:6f:27:c9:79:4d:bb:f2:fd:0d:e7:2e:b1:c7:17:02:8d:76:
         e8:3c:f4:43:32:da:06:0f:1a:54:a1:55:17:1d:90:76:b6:85:
         e6:f5:98:b7:5f:56:86:17:22:ee:af:b8:82:78:83:c2:90:f4:
         bc:64:28:4a:f2:06:7d:7c:f0:59:45:2b:36:97:0b:c3:3b:b5:
         1e:f3:96:7d:fd:2a:a9:12:6a:92:56:44:6a:a8:eb:05:b1:5d:
         36:7d:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org