Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613934303a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a613934303a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          vzkbvzxmwKmwS8zAJVryJ7ITWZQjf8wU0X9TX7RG7S0=
Subject key identifier:   38:BC:7A:13:65:B5:68:A0:63:A4:5C:CA:7B:CC:F6:3B:1D:53:69:E8
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       4185F0D0420545303A003225C31AFD0ECF54D427
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613934303a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:42 +0000
ROA not before:           Fri 20 Sep 2024 01:00:42 +0000
ROA not after:            Fri 19 Sep 2025 01:05:42 +0000
asID:                     263917
IP address blocks:        2804:27b0:a940::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:f0:d0:42:05:45:30:3a:00:32:25:c3:1a:fd:0e:cf:54:d4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:42 2024 GMT
            Not After : Sep 19 01:05:42 2025 GMT
        Subject: CN=38BC7A1365B568A063A45CCA7BCCF63B1D5369E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:45:e0:be:66:53:d2:23:6f:6e:97:9e:ef:
                    18:94:2a:87:13:9a:b1:ac:2b:63:4f:97:a1:a2:77:
                    2e:4a:26:89:7c:4f:28:ec:f7:4f:5d:c0:c0:75:6a:
                    74:6a:0a:c2:16:bb:c0:5b:6a:d2:2f:95:b2:81:f8:
                    04:07:f9:a1:1c:5c:bc:42:3c:a4:79:5b:87:ef:3c:
                    23:ed:49:c4:a1:c8:d3:16:73:01:85:47:0f:ca:45:
                    f9:8f:b7:22:f9:09:2a:80:b3:c4:29:c7:4a:4c:a5:
                    a1:2f:5a:1b:6e:a8:d2:ff:c2:e6:b1:55:73:11:65:
                    76:23:9b:77:75:28:fb:98:3b:ab:08:b8:cf:f3:4b:
                    66:4d:cd:70:fb:e0:8f:54:f8:00:3e:6a:03:a8:b0:
                    b2:49:d8:a0:c2:7e:db:f1:9c:3d:1e:b0:17:9a:0f:
                    53:a9:e3:b7:49:89:7b:7f:b2:56:54:d2:e5:c1:2e:
                    bd:eb:a2:d5:c1:ff:8e:8d:1d:9d:16:ff:98:bd:83:
                    d0:ad:9b:62:47:c6:19:a1:1f:9c:b5:31:ea:c0:e0:
                    e0:4c:a5:79:7d:ce:39:68:91:18:5f:9b:91:b6:9c:
                    bc:f5:73:5a:a8:1c:2b:90:f9:db:07:91:3d:e3:5c:
                    61:f5:39:5a:1b:76:dc:61:eb:ba:41:fa:2c:0e:21:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BC:7A:13:65:B5:68:A0:63:A4:5C:CA:7B:CC:F6:3B:1D:53:69:E8
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613934303a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:a940::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:2f:38:16:be:ec:1d:82:3d:3d:62:ec:0f:59:7f:cc:36:
         e3:e7:b4:e4:80:ef:69:c1:9c:11:2f:62:37:9f:01:d0:1d:ab:
         80:ac:29:79:58:ae:c5:d8:5e:7f:26:3b:f4:42:c7:c1:27:56:
         03:07:a0:f3:59:5d:0e:83:10:d4:a1:7e:44:b1:f9:e4:f4:b4:
         3a:d6:96:ce:1c:93:87:5c:2e:5b:02:9b:5c:ec:35:cf:9c:53:
         b4:ba:73:16:14:c6:da:b4:a9:d4:a3:81:25:e9:da:9f:19:89:
         d2:db:fe:5b:fd:b4:24:4c:21:b2:73:70:49:5e:f6:e4:c9:42:
         f8:5d:ec:ad:b2:0a:b9:60:39:8a:ac:cf:98:ae:21:65:ba:0a:
         f4:49:53:47:d3:15:8d:89:86:ec:85:f4:45:35:f1:21:74:b0:
         7e:14:3f:00:67:90:ca:70:51:1f:2b:04:73:e6:2c:4f:2d:6d:
         6a:14:d5:41:3e:f7:e1:aa:c8:ca:cd:22:cc:30:6d:b1:7a:ec:
         a5:39:fa:13:c0:fd:8b:ed:01:eb:43:f7:07:de:9b:e3:6a:6f:
         75:38:97:eb:22:56:86:46:b8:4d:19:dc:b9:92:76:f1:9e:d0:
         20:f2:6c:c2:8b:40:2a:6f:c7:d1:44:46:3f:d0:c6:0a:09:e1:
         88:5c:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org