Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636330303a3a2f34362d3436203d3e20323633393137.roa
File:                     323830343a323762303a636330303a3a2f34362d3436203d3e20323633393137.roa (raw, json)
Hash identifier:          vUV/ACavtts/NnCU5tA2ypZtzgoD+8OE4ILMLrh47XA=
Subject key identifier:   03:D7:C8:C3:4D:A3:35:12:8C:2B:E4:27:95:0A:96:ED:5D:82:F0:ED
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       772EFAFCD3964D63F1C1F4A745410E11283BEEB1
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636330303a3a2f34362d3436203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:41 +0000
ROA not before:           Fri 20 Sep 2024 01:00:41 +0000
ROA not after:            Fri 19 Sep 2025 01:05:41 +0000
asID:                     263917
IP address blocks:        2804:27b0:cc00::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2e:fa:fc:d3:96:4d:63:f1:c1:f4:a7:45:41:0e:11:28:3b:ee:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:41 2024 GMT
            Not After : Sep 19 01:05:41 2025 GMT
        Subject: CN=03D7C8C34DA335128C2BE427950A96ED5D82F0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:0d:f6:39:6c:c0:91:77:62:50:81:c6:d2:
                    ec:b4:7f:a0:8b:50:56:21:23:41:7a:1b:65:26:2c:
                    b1:cd:0f:a2:6a:99:c2:94:f3:47:0e:22:0b:cb:55:
                    f6:c5:88:f4:de:f2:9c:50:e1:e3:5d:e9:cc:2a:80:
                    eb:cf:cc:8b:7d:75:a1:36:f2:35:e7:d4:46:8c:d1:
                    8e:a6:49:b9:53:b8:fd:ff:20:9e:e8:d9:fb:e1:3b:
                    95:50:66:d2:0c:89:0e:04:76:0a:ab:99:57:fb:a5:
                    ec:17:4a:63:6b:76:80:6e:0b:4c:73:84:4e:8b:0a:
                    4b:ba:bf:f9:25:3d:45:f1:63:a2:15:9a:33:6a:50:
                    62:cc:0a:2b:ac:2d:d7:18:64:a1:83:f3:4f:6a:69:
                    83:be:2b:86:71:2b:71:e7:82:af:95:20:b3:cc:b0:
                    29:06:8f:30:6b:b7:eb:66:ac:7e:cf:95:aa:95:94:
                    40:c7:43:d9:8f:5e:ba:45:2a:a0:f7:03:13:9d:d5:
                    f2:cf:3c:52:19:53:92:4f:aa:3f:30:d2:5c:36:81:
                    c2:e5:82:10:cb:47:8c:a8:0d:71:99:50:01:69:46:
                    d6:23:22:fe:8d:7b:43:0d:df:4a:66:1e:8d:00:4f:
                    68:50:73:d4:ef:98:cc:a5:4e:43:e1:3d:12:ea:db:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:C8:C3:4D:A3:35:12:8C:2B:E4:27:95:0A:96:ED:5D:82:F0:ED
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636330303a3a2f34362d3436203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:cc00::/46

    Signature Algorithm: sha256WithRSAEncryption
         87:58:a0:c3:4f:1f:ef:15:be:6d:81:69:e3:f7:84:a3:66:c5:
         5b:65:4c:2c:d9:41:1c:70:9f:9d:e0:08:c7:21:29:4b:23:9d:
         6b:7a:ca:72:13:78:6a:44:ce:21:0d:9f:41:56:1c:96:fa:71:
         52:1e:8f:0b:b1:b0:05:1e:86:5b:5e:12:59:24:63:63:5d:a2:
         fb:3e:89:61:c6:d5:12:76:7f:b9:1b:a1:56:1b:4e:b5:fa:99:
         bd:ea:ae:15:37:ef:61:40:c5:bf:81:ed:f9:3b:9a:af:4f:56:
         ef:3a:28:07:d4:57:0e:43:07:a9:b6:57:95:5f:b5:cf:22:69:
         08:66:58:05:b9:00:56:b2:5d:be:85:8b:f7:54:96:ea:85:01:
         55:21:a3:48:f6:ad:d9:51:9f:6b:06:c5:1a:73:9e:25:0f:17:
         1c:5d:0b:0f:ac:f4:44:1f:da:ad:2c:06:57:70:cc:68:17:ca:
         d2:71:4d:ee:3a:8a:63:e0:db:7a:ce:e4:eb:e9:50:c7:77:bc:
         de:48:70:09:58:05:39:09:15:07:d2:8f:e7:83:5d:50:6b:89:
         1a:6a:17:50:bd:a7:61:c6:3f:8c:07:74:93:83:1f:ca:d6:43:
         04:00:fb:db:09:35:e7:d2:6d:fa:0a:5a:73:ac:b0:b1:d5:94:
         b3:46:b7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org