Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          ttl5qhR8BJprkeaxex1BAq3U865+jsNMdsei8+2Rx9Q=
Subject key identifier:   9F:0E:B4:5F:4D:FC:F0:5E:59:0F:A9:01:21:D1:8D:5F:3A:ED:3A:A6
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       131B24E88ED618E247C7F55A16CF0AF91D5A06F8
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:41 +0000
ROA not before:           Fri 20 Sep 2024 01:00:41 +0000
ROA not after:            Fri 19 Sep 2025 01:05:41 +0000
asID:                     263917
IP address blocks:        2804:27b0:a842::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1b:24:e8:8e:d6:18:e2:47:c7:f5:5a:16:cf:0a:f9:1d:5a:06:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:41 2024 GMT
            Not After : Sep 19 01:05:41 2025 GMT
        Subject: CN=9F0EB45F4DFCF05E590FA90121D18D5F3AED3AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:69:f4:26:0c:43:d8:72:8b:6f:c2:03:b4:
                    49:ea:ae:53:24:ed:dd:dd:54:b7:c6:fe:9a:24:39:
                    32:a4:13:26:e0:8d:3c:94:3d:8f:0b:30:08:1c:11:
                    de:8b:c7:29:db:79:81:58:64:7c:df:0a:cb:d5:12:
                    b9:18:af:82:1a:f7:13:a0:78:76:22:3a:d9:0c:c1:
                    78:96:65:ae:ed:d4:0f:19:59:72:af:bd:be:37:88:
                    2f:38:82:a3:f8:f8:81:bd:98:92:65:1d:fd:bd:fb:
                    88:15:94:f2:89:83:d1:65:57:d6:97:0c:c5:b7:d2:
                    ec:eb:1f:05:4f:0a:b4:42:f8:a0:82:d3:f5:d4:1e:
                    87:15:7e:65:43:1d:56:73:6d:23:d9:e0:ab:73:da:
                    56:5b:a3:15:7a:aa:5f:d4:09:1c:e1:4e:ca:f0:1c:
                    21:63:4f:f1:ac:4a:c3:ef:12:89:ac:e1:61:f0:46:
                    f5:5a:65:ea:86:fb:37:12:fc:19:5b:ea:55:09:62:
                    d8:15:6d:49:74:91:ba:08:24:b6:74:73:b9:da:9d:
                    be:46:52:1f:52:ae:d9:c0:e0:b4:8b:12:50:12:76:
                    e9:7f:13:63:3f:1b:35:3c:fc:5f:59:e3:ab:73:c6:
                    57:31:a3:51:88:71:c5:28:56:3d:f8:7f:4d:f7:94:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:B4:5F:4D:FC:F0:5E:59:0F:A9:01:21:D1:8D:5F:3A:ED:3A:A6
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:a842::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:98:db:ca:ec:2c:f3:6d:c7:de:97:8e:f1:86:47:70:6f:87:
         69:f2:81:c5:38:fa:9e:e3:3f:82:b9:3d:70:13:12:34:61:d2:
         4c:21:af:7c:3c:0b:36:98:75:e0:7c:23:6b:86:4f:bf:43:15:
         23:26:04:21:68:d6:42:4a:12:20:b0:80:6b:1c:9c:13:13:44:
         70:9d:10:15:89:9b:aa:25:97:8d:9d:85:1c:a3:bb:8b:4a:75:
         c4:fa:97:29:8f:8e:7e:eb:29:23:2f:09:56:b3:0c:82:52:7a:
         da:2e:65:db:3c:30:bf:51:58:34:91:5d:be:3d:b2:2f:b1:67:
         ce:90:1b:fe:0a:94:e7:a6:3f:a1:a1:32:a9:4b:41:04:eb:25:
         5a:37:88:9d:ea:91:f6:51:0d:10:3f:f2:69:91:39:cb:ae:11:
         9b:4e:08:3f:56:73:64:73:6d:f3:cd:a6:c4:15:c6:ae:e1:8b:
         81:d0:0b:b4:36:59:fd:5e:8d:b0:21:49:e6:03:b8:de:2f:03:
         64:37:9a:05:ba:f6:95:e9:00:1f:13:57:29:3a:c6:fd:58:fb:
         7f:9e:af:b2:17:8e:c3:1c:84:c6:f0:97:04:11:47:dd:09:ea:
         e4:cf:91:cf:de:fc:7a:a7:74:5a:5f:f8:59:30:9c:8b:7c:15:
         4d:3f:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org