Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33332d3333203d3e20323633393137.roa
File:                     323830343a323762303a3a2f33332d3333203d3e20323633393137.roa (raw, json)
Hash identifier:          6Xbz26E85+LtmNoXFyLOQXVDEO/1Yb9lTNic2ba3gOI=
Subject key identifier:   A5:72:E9:2C:56:FA:7E:B7:92:80:DC:0B:78:AD:2D:81:15:0B:74:20
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       4527E306E4EB15451F03C2DE0736722D0290D8D8
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33332d3333203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:42 +0000
ROA not before:           Fri 20 Sep 2024 01:00:42 +0000
ROA not after:            Fri 19 Sep 2025 01:05:42 +0000
asID:                     263917
IP address blocks:        2804:27b0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:27:e3:06:e4:eb:15:45:1f:03:c2:de:07:36:72:2d:02:90:d8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:42 2024 GMT
            Not After : Sep 19 01:05:42 2025 GMT
        Subject: CN=A572E92C56FA7EB79280DC0B78AD2D81150B7420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:30:d2:e0:4d:59:75:07:2a:a5:24:fe:4b:bc:
                    f2:8b:0e:11:26:ea:39:e8:2d:7d:72:c2:2d:a2:a5:
                    0d:5d:41:cc:2a:e0:8e:f6:e2:c4:13:37:e5:86:f6:
                    7e:60:7e:b0:d0:d5:77:50:f2:80:d9:80:9f:02:25:
                    bb:db:2d:a7:d8:4e:94:05:79:0f:43:be:6c:8c:af:
                    a6:0e:e6:3e:a4:28:24:cb:21:9f:85:e5:87:e0:d6:
                    ce:17:b4:a6:ab:84:82:27:60:54:ae:36:07:a7:51:
                    bf:25:b4:96:9c:cf:52:56:76:e6:14:7b:7f:71:1c:
                    8e:e6:0d:a9:e6:94:e4:5a:13:d1:1a:dc:53:66:7c:
                    01:ea:a0:82:3f:4f:71:df:a6:f0:b3:6c:12:e2:d9:
                    c8:67:bc:15:d0:ca:cd:6f:7d:7f:86:17:b3:3e:9a:
                    2a:0b:d0:94:e2:4b:ee:2d:f4:2a:35:df:8c:47:f3:
                    10:59:24:38:4a:27:1c:26:5e:2f:92:0d:f0:75:2f:
                    51:76:0e:67:d5:2b:1c:9e:08:51:9b:ba:0b:00:d7:
                    b8:7a:fc:ca:6d:83:35:34:53:66:7a:af:1d:10:97:
                    cc:54:33:1d:85:0d:31:2a:1c:04:38:d3:75:3e:33:
                    26:de:7d:e3:0b:59:4f:54:af:dd:19:bc:89:4a:a3:
                    93:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:E9:2C:56:FA:7E:B7:92:80:DC:0B:78:AD:2D:81:15:0B:74:20
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33332d3333203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:7d:43:59:82:64:7b:08:2a:75:27:ee:78:2e:1b:8a:5b:3d:
         d2:de:75:19:81:26:46:24:37:1f:f6:8e:d0:07:8c:30:34:5a:
         79:ea:bc:41:11:5d:aa:9a:ce:43:09:15:2c:87:58:a5:3c:21:
         73:39:5d:9e:d0:7a:91:65:45:2e:86:90:de:ef:5f:03:21:01:
         10:0e:d5:a5:bc:58:0e:6b:77:25:8e:60:21:04:34:31:76:9f:
         d8:1e:53:ae:cb:dc:06:9d:f3:8a:61:0a:30:1e:3d:e6:df:9d:
         7f:67:6f:df:9a:91:8b:98:39:15:75:c7:85:45:cc:41:fa:b1:
         87:97:51:14:0b:15:be:ac:4f:6f:b5:f0:1e:f9:b0:a7:54:31:
         7b:f6:65:c6:41:1b:69:4b:b7:b7:fc:7a:eb:f2:b5:40:e0:26:
         0a:44:26:d3:33:39:d5:a1:6e:97:aa:f2:d0:f9:0d:9a:c6:f4:
         5a:ec:a9:ca:12:3d:59:22:b5:01:8d:5f:7e:43:5a:3a:6b:d3:
         86:5b:79:84:94:42:73:2f:44:63:fb:a7:95:8f:ff:ca:bb:61:
         80:99:99:c7:8e:fc:c7:ac:25:4a:c7:cc:43:47:d7:19:d0:29:
         1c:59:2e:2c:68:5f:8b:1f:99:16:4b:4e:11:76:1b:84:14:45:
         cd:87:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org