Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a623930323a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a623930323a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          WXLH10tBxOwtyQs+P+gRmoNzzz5Lodd7o+TI7c+WFvc=
Subject key identifier:   32:26:2C:16:51:12:E4:E6:AA:79:16:75:FC:F4:B6:95:E2:46:99:FB
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       6399DFE5D1982BD7802795C4A2A9312BDF8A8887
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a623930323a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:43 +0000
ROA not before:           Fri 20 Sep 2024 01:00:43 +0000
ROA not after:            Fri 19 Sep 2025 01:05:43 +0000
asID:                     263917
IP address blocks:        2804:27b0:b902::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:99:df:e5:d1:98:2b:d7:80:27:95:c4:a2:a9:31:2b:df:8a:88:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:43 2024 GMT
            Not After : Sep 19 01:05:43 2025 GMT
        Subject: CN=32262C165112E4E6AA791675FCF4B695E24699FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:77:82:da:b8:95:86:38:9a:b4:1a:2a:b6:
                    c6:17:91:af:a4:94:e5:19:70:f0:b3:5d:fb:9f:21:
                    a5:2b:8f:2a:ce:6b:24:7c:ef:5e:f7:b0:72:0c:0e:
                    df:6f:b5:1b:23:02:cb:74:7a:5e:28:d1:23:a6:f2:
                    c1:bc:ea:8b:35:22:19:6b:2c:e1:f5:50:28:b9:90:
                    9b:dd:99:fe:a5:ca:c7:24:94:74:71:d7:4f:de:9f:
                    29:c6:1f:da:40:7a:87:7d:6f:2f:04:ca:d7:92:1b:
                    a6:a9:fa:23:c4:37:3e:2c:09:1f:6b:3a:23:03:6f:
                    cd:14:35:7f:86:ac:e1:48:8d:a1:4f:15:34:e5:c5:
                    fd:e6:98:11:67:01:29:27:d8:93:a1:a5:b6:21:af:
                    47:c2:97:e6:ad:75:99:eb:18:8c:52:24:69:d5:b2:
                    ec:8a:47:ac:f1:35:59:f0:d8:5c:12:0d:7a:69:8e:
                    99:e0:98:f6:31:33:71:1f:f0:83:26:2d:b4:28:05:
                    40:a9:01:d6:09:75:67:2e:55:59:6a:0f:64:bf:97:
                    7d:a7:78:32:2e:c7:76:b4:c7:46:18:08:52:df:5a:
                    30:e0:2c:67:13:45:e9:a7:97:5e:17:58:4a:02:fa:
                    2a:7f:04:ea:d6:11:d0:91:b4:51:86:f0:79:7c:00:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:26:2C:16:51:12:E4:E6:AA:79:16:75:FC:F4:B6:95:E2:46:99:FB
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a623930323a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:b902::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:e6:52:c1:b5:ae:38:a0:5b:65:c9:31:a6:e4:d3:84:03:
         2e:5d:9b:b6:84:76:62:4e:a8:3c:3c:7c:1c:ff:b8:e0:99:77:
         c9:a5:ad:0c:09:86:7f:ec:b4:0e:55:67:72:69:48:69:2e:07:
         87:c3:2f:19:6c:2c:38:e8:ba:64:dd:24:aa:ac:12:ae:9a:92:
         7a:34:8e:0d:5c:68:ca:dd:e6:05:ce:d8:26:7d:d4:2f:49:bd:
         24:c5:31:55:84:61:9b:2e:7b:84:f4:0d:1d:24:52:54:f8:67:
         1d:3b:53:09:3b:01:f7:37:11:80:80:53:f6:a9:95:07:9e:e0:
         b7:61:82:15:4f:2b:fd:ec:74:97:42:27:cb:4d:ad:2e:31:a0:
         69:36:9f:11:7a:dd:8a:9a:6c:0d:f1:58:8d:74:f0:bc:77:5f:
         5c:ab:b4:33:09:8b:8b:da:6f:a4:90:df:cc:4f:77:d9:4d:13:
         d5:34:bf:04:6d:67:48:1a:d3:75:47:f6:74:20:de:1d:63:3b:
         27:77:10:d4:be:73:40:00:d5:8b:69:7b:39:47:aa:a9:cf:37:
         a8:a3:6b:5c:ac:63:20:de:66:24:0c:cc:94:58:0e:2d:61:4a:
         48:2a:ad:4f:11:0c:a6:97:a5:28:b3:b5:2c:0e:6a:82:af:3f:
         84:a2:e1:14
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUY5nf5dGYK9eAJ5XEoqkxK9+KiIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxQkNEMTE3QUYwM0YzMDA4NkEzOEJEMTQ3OUFBRkU1
QkUyQTgxMjAeFw0yNDA5MjAwMTAwNDNaFw0yNTA5MTkwMTA1NDNaMDMxMTAvBgNV
BAMTKDMyMjYyQzE2NTExMkU0RTZBQTc5MTY3NUZDRjRCNjk1RTI0Njk5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdHeC2riVhjiatBoqtsYXka+k
lOUZcPCzXfufIaUrjyrOayR87173sHIMDt9vtRsjAst0el4o0SOm8sG86os1Ihlr
LOH1UCi5kJvdmf6lyscklHRx10/enynGH9pAeod9by8EyteSG6ap+iPENz4sCR9r
OiMDb80UNX+GrOFIjaFPFTTlxf3mmBFnASkn2JOhpbYhr0fCl+atdZnrGIxSJGnV
suyKR6zxNVnw2FwSDXppjpngmPYxM3Ef8IMmLbQoBUCpAdYJdWcuVVlqD2S/l32n
eDIux3a0x0YYCFLfWjDgLGcTRemnl14XWEoC+ip/BOrWEdCRtFGG8Hl8AAVHAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUMiYsFlES5OaqeRZ1/PS2leJGmfswHwYDVR0j
BBgwFoAURhvNEXrwPzAIaji9FHmq/lviqBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZUQlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4x
WlUvMS80NjFCQ0QxMTdBRjAzRjMwMDg2QTM4QkQxNDc5QUFGRTVCRTJBODEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MUJDRDExN0FGMDNGMzAw
ODZBMzhCRDE0NzlBQUZFNUJFMkE4MTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWVEJaWEgxOG5NQnJzMzJqdXRDc2d4UVBGakwxcWlHdHdVZHFQRTVOMVpVLzEv
MzIzODMwMzQzYTMyMzc2MjMwM2E2MjM5MzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMzM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJ7C5AjANBgkqhkiG9w0BAQsF
AAOCAQEAIdTmUsG1rjigW2XJMabk04QDLl2btoR2Yk6oPDx8HP+44Jl3yaWtDAmG
f+y0DlVncmlIaS4Hh8MvGWwsOOi6ZN0kqqwSrpqSejSODVxoyt3mBc7YJn3UL0m9
JMUxVYRhmy57hPQNHSRSVPhnHTtTCTsB9zcRgIBT9qmVB57gt2GCFU8r/ex0l0In
y02tLjGgaTafEXrdippsDfFYjXTwvHdfXKu0MwmLi9pvpJDfzE932U0T1TS/BG1n
SBrTdUf2dCDeHWM7J3cQ1L5zQADVi2l7OUeqqc83qKNrXKxjIN5mJAzMlFgOLWFK
SCqtTxEMppelKLO1LA5qgq8/hKLhFA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org