Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3332203d3e20323633393137.roa
File:                     323830343a323762303a3a2f33322d3332203d3e20323633393137.roa (raw, json)
Hash identifier:          WbUGyyn+Mij0iPOXK4L5ChPUfu4U6oS0gwBaMdNGWpk=
Subject key identifier:   90:02:75:AC:B4:B0:BE:27:AC:2B:6D:66:C6:9D:53:36:5E:D5:44:7D
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       7DA310F7D3F60156809CE6EF784F9F197F7E8154
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3332203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:41 +0000
ROA not before:           Fri 20 Sep 2024 01:00:41 +0000
ROA not after:            Fri 19 Sep 2025 01:05:41 +0000
asID:                     263917
IP address blocks:        2804:27b0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a3:10:f7:d3:f6:01:56:80:9c:e6:ef:78:4f:9f:19:7f:7e:81:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:41 2024 GMT
            Not After : Sep 19 01:05:41 2025 GMT
        Subject: CN=900275ACB4B0BE27AC2B6D66C69D53365ED5447D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:2c:d0:85:00:9c:39:e5:27:17:4b:59:0c:
                    eb:60:12:d2:dc:23:31:29:e5:23:4c:7e:54:ea:32:
                    da:aa:b3:21:a7:6b:0a:a7:27:1f:04:f2:2b:30:75:
                    9c:e9:12:4b:5e:a3:12:e5:ae:d7:1d:49:b8:8b:6c:
                    c6:20:ac:25:f3:54:1e:cb:f2:7f:ce:a5:09:f0:08:
                    e0:f4:ab:e5:b9:5e:8f:7c:8f:b8:98:33:98:de:15:
                    cc:dd:ae:aa:14:c1:47:3b:14:9b:b6:33:83:a3:eb:
                    7f:08:2c:73:53:08:40:ac:e1:93:45:6c:36:8d:f5:
                    40:dd:48:4c:36:a6:f7:43:1c:d3:58:17:06:f5:0a:
                    cb:49:52:f6:10:87:f4:4f:29:5a:29:31:36:f1:d2:
                    5b:b0:21:a7:11:d0:6b:82:85:17:43:94:b0:3b:ba:
                    5c:42:9c:80:97:84:28:62:c8:c8:87:c2:4f:60:ff:
                    b0:8a:e3:fc:bb:81:19:b2:46:8b:2e:cb:90:96:04:
                    54:10:00:20:c7:a5:65:1a:25:f5:cb:e0:70:c0:36:
                    50:87:d6:c9:83:6c:6f:43:8e:f9:b5:ee:81:40:82:
                    73:c1:ed:6f:20:eb:92:3e:a2:ca:07:63:47:c2:4f:
                    03:3a:3d:fe:94:0a:6f:83:58:9c:80:e0:84:99:bb:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:75:AC:B4:B0:BE:27:AC:2B:6D:66:C6:9D:53:36:5E:D5:44:7D
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3332203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:ae:ce:da:49:f7:86:ed:ce:a5:ee:e9:fb:6d:b5:83:5b:65:
         03:ca:3f:a1:3c:73:b6:e5:9d:eb:49:83:e6:4c:fb:14:e8:56:
         74:ed:a3:1d:19:de:d8:47:2b:84:28:14:62:d9:80:47:de:d9:
         c8:2e:cf:5c:b2:34:67:01:f2:8b:0e:63:e4:24:15:36:d3:bd:
         72:10:e3:0e:f0:7d:36:8b:72:8d:89:97:24:ae:d0:3c:f2:5a:
         22:22:c4:e7:66:1a:90:99:8f:b3:0c:2c:93:54:fe:63:f5:f5:
         33:44:c2:6a:22:cc:25:fd:16:2d:e0:32:ed:fc:62:f0:bf:0d:
         21:28:7d:9f:6c:e0:30:31:4e:7f:6d:93:e6:7f:91:c2:4e:be:
         70:11:89:d3:40:88:19:52:69:49:be:fe:03:4c:3c:13:27:70:
         e2:28:6a:ea:82:d0:bc:7e:eb:cd:b6:38:f4:71:d0:de:6c:90:
         eb:73:ce:3c:a7:92:bd:f4:88:1d:7b:ec:05:32:65:e7:20:04:
         81:73:70:bc:88:e5:f4:52:7b:d9:ef:0c:d2:c2:68:ad:2e:01:
         42:da:e6:7d:cf:74:69:54:c3:59:c8:58:1b:99:4b:8e:94:97:
         b3:b1:4d:a9:a7:d1:e7:f9:4c:66:b6:52:e1:ea:ca:a2:eb:7e:
         80:05:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org