Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          mKU0HP3yQgCs4/VLxPFeVQs/Kf1skx+JNCy4PE3CWMU=
Subject key identifier:   1A:46:83:F5:D8:35:20:E2:5E:D6:FE:27:2D:92:0E:72:E4:A3:CE:D1
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       4C84BF1CB96FA458098DACF0C0C4A72EA58E37F6
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:02 +0000
ROA not before:           Fri 22 Aug 2025 01:55:02 +0000
ROA not after:            Fri 21 Aug 2026 02:00:02 +0000
asID:                     263917
IP address blocks:        2804:27b0:a725::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:84:bf:1c:b9:6f:a4:58:09:8d:ac:f0:c0:c4:a7:2e:a5:8e:37:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:02 2025 GMT
            Not After : Aug 21 02:00:02 2026 GMT
        Subject: CN=1A4683F5D83520E25ED6FE272D920E72E4A3CED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:08:49:45:b1:75:a0:1b:43:ce:60:fd:0e:
                    10:f3:64:94:5b:e8:e2:b3:00:45:8b:1f:f2:80:33:
                    92:98:8a:58:17:c0:b9:bc:bb:0c:4a:8e:ee:46:60:
                    55:bc:1b:13:89:b7:71:7f:80:77:97:22:ca:94:0f:
                    7f:ad:18:3c:de:d8:7b:42:38:dd:25:63:ce:3e:2b:
                    4e:c9:f1:ef:d8:9e:94:70:cc:85:9c:1e:e8:42:62:
                    ca:9e:09:4a:26:3d:43:d3:10:23:19:77:24:3f:ae:
                    90:85:b2:6d:b2:67:6a:f3:0e:93:20:4f:6d:24:6b:
                    72:33:88:f2:6d:32:33:8a:24:9c:61:85:22:b1:48:
                    49:11:77:b1:07:4e:5c:2e:70:3a:f4:07:70:9c:96:
                    1e:31:39:78:6d:64:6f:d5:ff:c2:d5:c7:c4:aa:a9:
                    01:c4:8f:76:2c:80:79:9b:7c:96:38:c3:c4:fb:5e:
                    95:93:e2:8b:f9:99:d9:2b:94:53:bb:ad:11:87:3f:
                    37:46:63:23:a4:a5:ba:ae:85:3c:c6:52:6a:9f:c8:
                    59:d0:ea:37:1d:76:a5:be:4a:84:01:64:b3:dc:5f:
                    13:07:02:e0:6d:68:b1:87:7a:70:7e:ce:9b:96:ca:
                    9a:88:1e:06:4c:b6:02:6c:8f:97:a9:46:f1:2a:b7:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:46:83:F5:D8:35:20:E2:5E:D6:FE:27:2D:92:0E:72:E4:A3:CE:D1
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613732353a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:a725::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:d9:e0:87:02:81:eb:11:fd:91:20:05:89:1e:e1:07:a7:
         df:76:51:d4:38:11:a4:8d:df:46:2a:c4:92:2f:f1:d1:f4:94:
         e3:c5:f2:d7:86:23:12:2a:65:85:43:39:7f:2b:fe:bf:27:89:
         5c:22:58:16:4c:05:fc:93:fa:d6:1d:54:d5:d6:16:d3:fb:8b:
         a0:90:ac:42:ff:18:ad:a0:7b:05:27:f8:23:e4:4c:66:68:9d:
         00:1f:e7:80:67:5f:41:fe:f9:8f:b3:1e:19:7c:0d:9f:d6:2c:
         dc:44:a7:b7:69:74:19:ae:62:ae:37:b9:bb:16:8a:c1:9b:3a:
         37:72:f2:15:91:82:54:21:76:82:aa:58:ce:51:f0:12:eb:9f:
         a1:47:a8:7b:3e:4b:89:a3:fa:86:57:01:87:0a:5c:54:df:e1:
         86:d4:f2:70:01:04:0a:06:4e:69:c7:44:bd:d1:d0:58:bf:cc:
         51:47:cc:22:68:b0:d5:96:05:37:e9:f8:98:ea:18:3b:ab:70:
         16:0c:33:68:98:a0:9b:bf:e4:dc:23:f6:a1:2e:5b:01:62:5e:
         6c:9f:4c:f3:bf:46:f7:3d:15:4c:df:2c:87:5a:63:8a:8a:d5:
         df:3e:d6:aa:5d:4e:33:23:92:4c:29:3e:3c:13:33:0b:8a:d0:
         77:a1:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:20 2025 by rpki-client