Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3438203d3e20323633393137.roa
File:                     323830343a323762303a3a2f33322d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          aaRyBQIM2Bui2d4CREqOAHV8sWumzNjUnHu31xCFF7U=
Subject key identifier:   B5:32:B3:78:38:F1:39:81:28:43:2F:61:3D:4D:4D:6C:9C:7C:F9:72
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       5A4A21C9DA51D4D32494AD5267AA51BED448D516
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3438203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:02 +0000
ROA not before:           Fri 22 Aug 2025 01:55:02 +0000
ROA not after:            Fri 21 Aug 2026 02:00:02 +0000
asID:                     263917
IP address blocks:        2804:27b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4a:21:c9:da:51:d4:d3:24:94:ad:52:67:aa:51:be:d4:48:d5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:02 2025 GMT
            Not After : Aug 21 02:00:02 2026 GMT
        Subject: CN=B532B37838F1398128432F613D4D4D6C9C7CF972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:b6:6c:53:e8:31:39:44:50:30:68:39:f3:
                    76:5f:18:fd:80:49:75:82:51:9d:70:f5:62:29:7e:
                    67:09:97:34:74:8d:33:12:d7:ed:b2:7a:6d:4d:bf:
                    6b:ea:4e:27:52:ff:bf:e4:5b:2b:8b:6c:10:c0:0e:
                    44:6c:41:16:6e:74:c2:84:d8:82:78:ef:e3:de:ee:
                    ab:d9:dd:d8:c7:8e:47:5d:70:e3:88:3d:b2:1f:5f:
                    60:3c:e9:15:3a:50:b5:cb:cf:f2:c9:d3:73:cb:e5:
                    52:3e:8d:1f:84:49:41:06:cd:0e:ae:9e:32:cf:53:
                    cc:d6:51:90:a6:6a:fd:32:d0:c6:3b:03:11:fd:9f:
                    70:2f:95:71:b8:43:52:0a:25:aa:52:a5:b8:2a:95:
                    b1:67:5e:a4:6b:2b:c9:d7:9b:c1:43:9e:af:cd:3f:
                    87:61:e1:ee:90:b7:7b:e0:7f:25:0a:ce:f0:d8:02:
                    13:f8:48:4c:2d:c4:55:63:2c:d8:b9:5d:12:0f:64:
                    80:97:fa:3c:cd:e5:5e:11:2c:92:a0:f1:2d:86:9c:
                    8f:51:91:00:15:58:0a:31:26:a3:c5:41:09:78:85:
                    04:e9:d0:14:95:5f:05:30:3d:ed:d2:9d:d9:36:31:
                    9d:16:bc:43:7c:9b:af:db:fe:38:14:01:fc:99:44:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:32:B3:78:38:F1:39:81:28:43:2F:61:3D:4D:4D:6C:9C:7C:F9:72
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a3a2f33322d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:c3:eb:75:95:d4:18:02:01:13:bf:6b:d8:c5:f9:06:f4:
         1e:bc:1e:61:04:7c:6c:9c:01:6a:98:77:08:2c:3e:05:db:f9:
         59:15:11:47:0d:49:a0:7d:b1:b2:17:83:ce:af:69:39:0b:bb:
         1d:5b:80:d7:55:ca:65:ec:0b:ea:77:49:df:b2:97:8c:f6:9b:
         f9:a1:02:89:89:f7:fe:c1:d8:53:cd:27:28:0d:c6:ae:65:c7:
         5e:80:19:85:15:8c:19:a2:cf:cd:a5:fd:2c:7b:27:02:84:94:
         09:ee:3b:40:dd:22:12:6a:14:ec:15:c4:29:9e:a1:dc:6f:50:
         fe:d7:0a:99:d7:23:65:08:bb:81:0e:60:68:9b:ac:d8:49:c2:
         dd:07:a0:77:2f:4c:6e:5c:c8:2b:8d:c4:42:b4:79:1f:91:9b:
         52:e5:07:db:57:e5:82:c1:66:74:bc:45:25:74:1f:4a:8c:59:
         17:53:cd:cc:80:d4:57:11:48:23:30:3c:6a:5a:d7:01:40:1d:
         e6:9a:99:c9:54:fa:c0:ee:86:c0:d0:97:b3:2d:38:75:a0:f3:
         b9:41:07:2f:aa:b5:c6:4c:9a:5c:eb:db:09:92:ba:21:1e:f7:
         7d:69:bb:87:69:e1:d9:fd:c0:50:7f:b8:92:7d:56:cd:d1:8f:
         f5:22:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:21:02 2025 by rpki-client