Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          KWtWHlAGaOUjXH92QEnzTyxkKKR1BmleFP3GOOHZjyE=
Subject key identifier:   AB:B6:77:33:F8:14:0C:EB:DE:7A:1F:FA:1A:47:94:CC:E1:A6:B5:78
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       34C3B065C28C314CAAD8CD441B9A05D064A08490
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:43 +0000
ROA not before:           Fri 20 Sep 2024 01:00:43 +0000
ROA not after:            Fri 19 Sep 2025 01:05:43 +0000
asID:                     263917
IP address blocks:        2804:27b0:a725::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c3:b0:65:c2:8c:31:4c:aa:d8:cd:44:1b:9a:05:d0:64:a0:84:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:43 2024 GMT
            Not After : Sep 19 01:05:43 2025 GMT
        Subject: CN=ABB67733F8140CEBDE7A1FFA1A4794CCE1A6B578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:ca:3f:8b:c9:e2:45:88:c0:3b:39:d8:04:
                    83:c9:d3:e0:ee:9e:87:8d:57:54:82:fb:ef:fd:d9:
                    1e:a4:b7:3d:db:ea:3f:ab:87:f8:64:ca:16:d4:be:
                    87:36:dc:08:64:c9:5d:e3:56:da:b1:c2:6a:4a:15:
                    18:da:49:3b:23:d0:15:59:11:cb:36:55:a5:64:fc:
                    9a:be:24:51:54:ad:ea:03:8d:e9:6a:97:39:da:91:
                    d9:02:c9:79:4c:33:b9:d5:cc:c5:b5:5e:be:7a:ff:
                    ac:5e:21:5d:1e:30:91:aa:fc:62:ee:db:08:e7:7b:
                    82:65:bc:f9:8c:48:46:a1:01:fb:40:b9:0b:87:4b:
                    fc:53:57:78:7a:4e:6b:80:e9:c3:8f:c9:ef:b9:9c:
                    40:8a:22:60:c3:82:d2:9c:90:05:c6:e7:69:29:a5:
                    a7:15:2b:de:fa:29:4a:6a:fc:3b:28:b6:5c:d7:e6:
                    89:a5:af:93:0e:f3:ad:44:47:67:8a:b3:ca:da:d9:
                    18:9e:3f:91:15:6f:a1:0b:27:56:2c:a8:45:00:10:
                    da:76:ec:eb:9b:f3:46:0c:2a:42:b8:b6:35:49:c7:
                    a8:62:f2:36:28:20:17:4d:cc:0d:8e:9e:c6:4d:6e:
                    0d:8e:d5:7f:a1:8f:06:29:b9:5d:3c:3d:98:26:bf:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B6:77:33:F8:14:0C:EB:DE:7A:1F:FA:1A:47:94:CC:E1:A6:B5:78
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:a725::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:b6:57:61:c7:59:72:d2:4e:ca:18:d1:27:02:9e:92:9e:
         eb:9f:6f:26:f4:d7:9e:b2:2d:9f:75:5b:71:42:5d:78:6a:51:
         f6:c7:97:e8:d7:a3:7b:5c:f9:68:e3:5b:f6:64:86:a4:3c:84:
         5c:77:eb:82:ea:9a:f5:14:a8:fe:68:1a:b4:e6:23:e3:1b:b0:
         86:f7:5b:b4:6d:96:25:7f:11:90:c6:fd:9d:8b:bb:60:f1:c4:
         33:02:06:c3:14:a5:af:be:b5:83:5d:cb:a1:58:89:0f:d2:7e:
         3b:ef:3a:ee:af:6f:36:a0:fe:9e:18:c7:92:18:28:81:6e:f4:
         34:4f:3a:70:c0:e1:86:a8:4e:62:9b:c5:b9:31:3b:6d:93:17:
         1a:45:8f:ed:9e:7c:92:f2:36:ac:fd:b2:49:2a:59:fc:48:5a:
         d4:3d:c0:d1:34:b9:90:ee:44:bb:17:e8:3d:56:23:cd:f5:ec:
         20:5a:ae:fb:37:eb:48:89:90:97:cb:75:46:79:e4:88:47:f9:
         63:ba:ea:db:93:46:d8:55:08:ed:00:5d:d6:78:93:24:21:f9:
         00:6d:6c:cf:8a:18:89:e8:bf:95:53:bc:94:40:9a:3d:a3:51:
         7f:42:74:cf:e8:16:3f:c6:e5:fb:eb:bb:61:0a:6c:f6:36:91:
         f3:0e:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org