Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3438203d3e20323633393137.roa
File:                     323830343a323762303a3a2f33322d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          N7VDFZMF2Pcpb0sX3hSuod3OKH/rzC8DZ4mYZuEpH3c=
Subject key identifier:   49:CD:46:B5:67:36:A5:3E:DE:4C:3C:30:F7:CB:52:7B:E1:F8:05:EB
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       4BEF61D6D6DB4E5C95E798152EFCC1778E46B950
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:04:09 +0000
ROA not before:           Fri 20 Sep 2024 00:59:09 +0000
ROA not after:            Fri 19 Sep 2025 01:04:09 +0000
asID:                     263917
IP address blocks:        2804:27b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ef:61:d6:d6:db:4e:5c:95:e7:98:15:2e:fc:c1:77:8e:46:b9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 00:59:09 2024 GMT
            Not After : Sep 19 01:04:09 2025 GMT
        Subject: CN=49CD46B56736A53EDE4C3C30F7CB527BE1F805EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:36:ae:6a:b0:5d:da:9c:c4:25:3c:86:98:
                    6c:1d:6c:f5:3b:18:ac:c2:8f:7d:5a:67:25:e6:70:
                    68:c6:88:29:ca:a6:50:4d:b5:48:57:58:7c:36:b6:
                    ba:8b:ea:06:be:81:17:eb:4b:9b:90:d4:64:2d:41:
                    fc:26:58:25:73:37:98:b0:6f:a4:81:f8:64:ea:ac:
                    a5:64:ad:4e:7b:79:59:ab:7f:40:b3:c1:6a:8d:67:
                    97:aa:11:ce:55:05:9f:58:d1:28:f4:93:3d:2a:60:
                    38:c4:fb:b5:5f:83:37:70:ec:61:e2:b8:03:56:cb:
                    16:f0:2b:bb:fd:98:32:dc:fe:a4:1c:fb:e4:19:18:
                    b5:81:66:96:15:bb:75:12:36:e9:26:fc:aa:aa:c5:
                    e4:ae:e0:7a:4d:44:c1:13:dc:42:89:d7:a4:f7:6e:
                    55:05:12:84:fb:a6:70:4f:82:24:0e:96:2e:9d:aa:
                    54:63:6c:14:15:ab:2d:75:66:77:d5:e3:bc:8a:3c:
                    f8:3d:4e:3f:47:bd:16:d4:d7:79:0f:1e:89:1f:2a:
                    91:35:1b:86:fe:f8:f8:7b:bc:00:77:d5:54:ea:f2:
                    0e:65:04:66:ad:dc:89:01:01:1d:a6:9e:f9:70:e9:
                    ee:30:67:c4:2a:ff:57:d4:0f:04:39:67:27:3e:48:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CD:46:B5:67:36:A5:3E:DE:4C:3C:30:F7:CB:52:7B:E1:F8:05:EB
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:65:c1:10:2c:64:05:f5:42:c9:34:ab:a3:94:dc:77:65:5d:
         c2:be:bc:0a:64:b2:c3:80:5d:3c:a6:f9:4f:96:d7:14:c2:07:
         a6:96:cd:81:8c:a7:a1:e8:d4:c8:ea:af:b9:63:71:c8:8c:c4:
         90:f8:16:7b:fc:90:83:15:7c:19:89:6a:28:91:1e:54:d1:d6:
         1c:7a:01:4c:16:39:9e:5c:fb:17:b4:4d:1d:fb:10:5e:26:51:
         1f:c8:ff:c3:51:a5:09:a8:92:c4:46:c7:64:fd:50:9a:70:8b:
         4d:cf:71:30:9c:c0:8e:a3:55:6d:f9:06:f3:e7:59:88:45:21:
         0d:9d:40:de:f4:b6:81:40:26:dd:b6:bf:27:fd:6f:b9:e3:75:
         2a:4b:5d:c2:7b:fc:c0:c1:ec:6f:8f:35:d1:3d:74:6e:16:93:
         04:5c:a6:c2:de:0f:cc:3e:ec:f1:95:b4:80:97:cd:6c:9c:d3:
         72:b2:4f:f1:d6:7f:cf:cf:57:11:5d:0f:e7:7d:b4:95:b8:9c:
         c1:9c:62:99:b3:c5:83:43:f3:79:2a:3c:19:6c:3f:8e:2b:9c:
         f0:21:64:10:ce:ce:63:5a:1a:83:1e:65:e6:90:37:4b:4d:7a:
         36:df:f5:44:0c:3c:c5:bc:8c:4f:b8:d2:db:c7:31:dc:86:aa:
         0c:20:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org