Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          xtx0BXMtcjflJdZ+fqQlzn5Iy91tctl1DJGEdtB6jh4=
Subject key identifier:   B0:4D:F4:6D:AC:D7:27:B9:D3:57:9A:45:2C:F0:89:D0:BB:40:BB:03
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       3F551744EC512BC5D59F90763476A9F33E1B88B3
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 20 Sep 2024 01:05:42 +0000
ROA not before:           Fri 20 Sep 2024 01:00:42 +0000
ROA not after:            Fri 19 Sep 2025 01:05:42 +0000
asID:                     263917
IP address blocks:        2804:27b0:ccff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:55:17:44:ec:51:2b:c5:d5:9f:90:76:34:76:a9:f3:3e:1b:88:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Sep 20 01:00:42 2024 GMT
            Not After : Sep 19 01:05:42 2025 GMT
        Subject: CN=B04DF46DACD727B9D3579A452CF089D0BB40BB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:de:4d:40:7b:8e:37:8f:9a:04:d8:5e:75:
                    55:c6:4c:33:9e:df:26:b7:3a:d3:db:1e:12:88:74:
                    6c:59:27:07:b1:cf:7b:18:5c:81:74:2f:61:d4:b5:
                    a7:9b:6b:1d:74:25:b7:c8:62:cd:9e:53:60:30:f5:
                    fd:6f:77:be:a5:94:f1:65:61:2b:be:83:f3:25:48:
                    bd:03:92:b4:e4:ba:82:ba:92:c4:bb:a5:b2:db:cc:
                    f5:28:d5:a2:bf:f1:5d:87:0c:c8:06:49:51:c9:2f:
                    22:73:77:a0:e4:f2:37:26:dd:ba:6b:26:43:45:f2:
                    c1:be:a0:07:c2:4e:87:0a:a5:b4:19:bd:b3:4d:e0:
                    2c:2f:b0:4f:56:49:91:09:2c:7c:0f:2b:15:8a:e6:
                    7b:b7:8c:03:81:0f:c9:57:83:0e:95:61:f2:1e:0e:
                    51:91:61:0b:24:93:f1:5e:03:a2:07:18:68:e5:05:
                    a8:89:2f:1a:26:49:00:23:81:ee:49:f9:7c:7b:63:
                    14:b1:87:10:89:10:6b:6b:c3:b6:df:06:45:cf:4b:
                    7a:db:e0:40:b8:82:d8:12:88:1d:a3:4a:ff:a7:34:
                    b2:d0:04:cb:23:6a:69:2e:3f:a8:ed:f0:7e:50:86:
                    e8:40:07:fe:cd:2a:b7:d6:d9:1c:22:d5:e6:07:70:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:F4:6D:AC:D7:27:B9:D3:57:9A:45:2C:F0:89:D0:BB:40:BB:03
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:ccff::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:b0:b6:7a:94:fd:91:64:b4:b2:05:dc:88:9c:18:aa:d1:
         d2:e7:c1:b7:08:94:af:de:02:d9:76:2d:06:f8:eb:73:61:20:
         81:81:53:60:5f:e2:ce:07:2a:96:95:d1:fa:38:e9:4d:52:68:
         e0:00:0b:46:16:97:93:d2:1a:55:b7:f9:f3:f9:3e:4c:5d:20:
         b2:c5:47:37:27:ce:44:9f:0c:39:b9:0c:3c:54:bd:11:44:a5:
         62:12:a1:a0:d9:3c:40:0f:c5:9f:21:b4:45:2b:0b:b4:18:a6:
         28:f7:01:5a:9d:dc:48:c9:d4:6a:db:47:2c:30:82:08:52:a0:
         b2:cd:c7:ea:4a:fe:9a:5d:dd:52:a6:08:42:b3:1b:b3:21:e7:
         e4:d3:8a:1a:46:b3:72:b9:16:7f:1d:30:c2:27:58:19:3b:c2:
         c6:4c:b6:d5:95:ae:8b:a1:4f:a6:7e:ea:b5:65:07:d0:87:75:
         7e:38:aa:d2:40:d7:5f:6b:ff:52:3e:c2:dc:bb:66:8a:9f:89:
         f8:00:dc:fe:b1:19:f3:ba:83:14:74:91:d3:1c:f3:8e:53:6f:
         ff:44:e8:96:42:e2:14:7c:4d:42:77:7e:0b:b0:6e:70:80:fd:
         31:5c:26:61:a9:81:19:0d:63:db:10:de:2e:14:56:3b:ce:ca:
         02:9b:e4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org