Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          oqy0CpNlBdxb+rOm3nvEtpPQRD2RaZBicG5O0QgMj8s=
Subject key identifier:   0F:60:21:F7:53:4E:A5:5B:67:1C:84:C9:BB:E0:F8:91:C4:DE:58:DA
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       7A115B7525D5AB36FAE5F3E214C8B14EFD57B956
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:02 +0000
ROA not before:           Fri 22 Aug 2025 01:55:02 +0000
ROA not after:            Fri 21 Aug 2026 02:00:02 +0000
asID:                     263917
IP address blocks:        2804:27b0:8005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:11:5b:75:25:d5:ab:36:fa:e5:f3:e2:14:c8:b1:4e:fd:57:b9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:02 2025 GMT
            Not After : Aug 21 02:00:02 2026 GMT
        Subject: CN=0F6021F7534EA55B671C84C9BBE0F891C4DE58DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:02:93:2b:2c:1b:a8:87:3d:71:57:05:25:
                    ff:82:41:a6:bb:32:9e:92:73:00:6b:8b:e1:6b:3b:
                    a2:ee:4a:f8:30:ec:ce:e7:10:ba:73:70:a9:49:07:
                    f5:96:1f:9e:3e:2a:53:57:d6:c2:94:66:de:07:28:
                    d1:db:11:c5:10:38:73:c5:b3:ca:67:b1:48:db:e5:
                    8c:c8:13:84:11:b4:8d:6a:24:c4:d7:9d:0b:fb:9f:
                    7c:a5:5d:1f:04:5a:5e:ee:d3:59:5a:07:0d:2b:af:
                    e7:59:56:47:85:fc:36:86:8d:7a:db:26:4a:cd:be:
                    ac:f2:a7:5c:93:1d:47:30:7b:9b:34:a2:20:f5:d3:
                    0d:90:ea:0b:12:5a:a4:1b:6e:24:8f:9e:07:1b:eb:
                    bd:f6:02:e8:35:f8:f9:c3:c4:99:6b:71:f5:df:9e:
                    0e:09:3d:1d:8f:81:52:e1:be:fe:75:9c:46:10:28:
                    54:ae:81:1b:14:3b:07:da:0a:68:38:93:91:c2:30:
                    80:09:da:0c:9f:27:4b:21:00:a1:d3:05:2f:9d:7d:
                    79:60:4a:82:e1:a0:76:0b:77:ec:bf:cd:c3:aa:f5:
                    92:ed:10:e8:92:4c:ea:0d:0a:df:f4:cb:b0:28:95:
                    71:13:e2:34:83:f9:2d:b5:ad:cf:8b:bf:b4:e0:cc:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:21:F7:53:4E:A5:5B:67:1C:84:C9:BB:E0:F8:91:C4:DE:58:DA
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a383030353a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:72:8f:1e:32:46:6d:95:90:77:dc:95:76:34:ba:d1:52:c8:
         1a:e1:f6:d4:ad:07:08:9f:86:61:d0:c4:28:2f:68:b6:87:8e:
         c3:93:29:67:d0:99:c9:8e:ed:06:ad:6a:47:d6:c7:20:b8:54:
         60:b9:e9:57:8c:e4:ee:24:66:0d:12:71:0b:2d:e4:ac:7d:60:
         dd:ca:2c:7a:57:17:9f:e8:ef:77:e8:f4:a8:01:47:c3:eb:5f:
         f2:8b:23:bf:80:d1:ec:1b:e9:1a:53:1a:d6:24:49:32:98:6e:
         ae:ec:d0:60:aa:39:f1:8d:bb:db:2c:dd:0d:5d:1f:ec:1a:14:
         8b:3c:3e:da:41:2f:8e:4f:f0:d4:ec:24:d3:81:9b:35:f7:75:
         69:4b:99:23:01:05:4c:1b:54:f4:fc:de:b9:ca:e4:fd:4c:e3:
         77:09:07:ca:b9:7c:12:7e:02:12:25:ca:af:c7:96:e7:d5:9f:
         b2:c4:15:ad:1c:40:40:c8:bb:3e:85:e2:38:2f:1e:23:7d:77:
         45:73:ac:76:a1:2b:fe:17:0c:1d:7b:ba:bc:fe:dc:95:e1:53:
         21:78:49:76:39:0f:a8:89:ff:73:4e:3d:ee:a6:67:02:37:e4:
         d6:aa:d9:3d:1d:fe:d5:e1:57:ac:27:bf:e7:1b:47:16:65:e3:
         8d:07:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:16 2025 by rpki-client