Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613833303a3a2f34352d3435203d3e20323633393137.roa
File:                     323830343a323762303a613833303a3a2f34352d3435203d3e20323633393137.roa (raw, json)
Hash identifier:          yxuK3gLWuWkJFDc0UFThsl9z6249/GqiFK4Aqyl3DxE=
Subject key identifier:   F0:1C:D1:07:EC:15:90:B1:A3:25:7B:5A:D5:1C:2E:82:B2:6A:E5:50
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       520DBE55C6CEFFE263EDE47BDE0D2F04E4B69BE3
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613833303a3a2f34352d3435203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:03 +0000
ROA not before:           Fri 22 Aug 2025 01:55:03 +0000
ROA not after:            Fri 21 Aug 2026 02:00:03 +0000
asID:                     263917
IP address blocks:        2804:27b0:a830::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0d:be:55:c6:ce:ff:e2:63:ed:e4:7b:de:0d:2f:04:e4:b6:9b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:03 2025 GMT
            Not After : Aug 21 02:00:03 2026 GMT
        Subject: CN=F01CD107EC1590B1A3257B5AD51C2E82B26AE550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:42:44:d6:2c:f7:ff:31:e3:d9:de:c4:50:
                    fa:11:b0:97:5d:58:27:39:48:3e:80:bd:e0:23:28:
                    f4:b0:75:bc:2d:2f:fe:97:d7:f3:cf:a2:30:58:1a:
                    cd:05:7c:7f:70:a0:6f:03:94:85:d9:c3:ff:1e:ad:
                    1f:f0:34:f8:9c:50:1b:b8:a7:e5:66:09:de:f1:0a:
                    1e:fc:84:f5:10:24:9a:74:f1:96:34:96:e9:83:5c:
                    30:bc:e1:bd:0f:97:38:e3:e0:2e:02:2f:af:c9:41:
                    2b:b9:fe:f9:00:7d:91:55:2f:db:5b:3c:57:ec:6d:
                    1b:4a:b7:a2:bb:39:42:6c:2b:d8:ea:82:25:5c:d9:
                    76:f4:1c:2a:12:08:3d:71:67:9f:cc:e6:8c:3a:04:
                    51:53:69:4a:5d:59:bb:e3:3b:92:63:61:9a:96:08:
                    00:45:f0:b4:62:9c:9e:bc:74:40:b6:f5:1a:41:91:
                    d9:ca:0b:c1:a9:74:4c:0c:be:6e:c3:4b:ac:bf:30:
                    86:e9:f7:28:e3:0b:b0:da:28:a4:9e:d8:58:37:d8:
                    3f:1d:0f:c9:8d:a7:4a:3c:d5:23:ed:58:81:b0:a5:
                    55:d5:38:d8:c3:7c:6d:7e:6f:05:9e:47:eb:b1:91:
                    9b:8b:56:a0:e6:36:76:3a:b8:57:8e:e7:9a:bc:6d:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:D1:07:EC:15:90:B1:A3:25:7B:5A:D5:1C:2E:82:B2:6A:E5:50
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613833303a3a2f34352d3435203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:a830::/45

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:6b:44:b9:d7:69:b4:cb:c0:af:68:44:77:a2:9f:4d:18:
         b9:87:fa:14:69:46:ad:9c:3d:4e:1e:50:33:ff:32:97:f6:5e:
         e3:d6:36:30:08:05:78:4e:1f:73:34:00:d1:10:d1:b6:4d:95:
         9b:0c:9c:78:c5:90:e9:f2:cf:f7:eb:7b:2c:37:ba:e1:7f:97:
         e9:33:54:06:d3:17:1b:43:f0:de:6b:be:5d:6c:3e:e0:68:d9:
         38:0b:a0:c9:6d:bf:a7:b9:8e:fa:46:d7:9d:4a:65:ec:aa:83:
         07:2d:47:53:c7:61:d0:58:18:8e:8e:bf:94:1f:02:6a:af:15:
         e9:33:8c:bb:61:a3:c9:80:41:e6:1a:c1:0c:14:2a:ca:f9:db:
         dd:a2:41:89:98:03:77:d6:20:09:93:ec:05:81:c4:2e:cc:35:
         e9:61:a4:f7:52:0a:77:61:08:b7:52:06:24:19:6d:55:fb:a9:
         a9:01:a8:de:b9:3c:0e:42:ab:ec:5a:ad:ba:ef:eb:97:47:a3:
         ba:98:df:73:a6:62:95:1a:f6:68:61:c4:19:93:77:b0:74:1f:
         66:77:08:ea:ca:f1:6e:8c:83:7d:85:16:c3:85:62:b9:f7:24:
         64:f8:c5:e6:b8:6a:b7:4e:2d:8a:a1:8f:8a:1c:72:d5:6d:5f:
         b6:ec:84:a8
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUUg2+VcbO/+Jj7eR73g0vBOS2m+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxQkNEMTE3QUYwM0YzMDA4NkEzOEJEMTQ3OUFBRkU1
QkUyQTgxMjAeFw0yNTA4MjIwMTU1MDNaFw0yNjA4MjEwMjAwMDNaMDMxMTAvBgNV
BAMTKEYwMUNEMTA3RUMxNTkwQjFBMzI1N0I1QUQ1MUMyRTgyQjI2QUU1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWm0JE1iz3/zHj2d7EUPoRsJdd
WCc5SD6AveAjKPSwdbwtL/6X1/PPojBYGs0FfH9woG8DlIXZw/8erR/wNPicUBu4
p+VmCd7xCh78hPUQJJp08ZY0lumDXDC84b0Plzjj4C4CL6/JQSu5/vkAfZFVL9tb
PFfsbRtKt6K7OUJsK9jqgiVc2Xb0HCoSCD1xZ5/M5ow6BFFTaUpdWbvjO5JjYZqW
CABF8LRinJ68dEC29RpBkdnKC8GpdEwMvm7DS6y/MIbp9yjjC7DaKKSe2Fg32D8d
D8mNp0o81SPtWIGwpVXVONjDfG1+bwWeR+uxkZuLVqDmNnY6uFeO55q8bSwTAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU8BzRB+wVkLGjJXta1RwugrJq5VAwHwYDVR0j
BBgwFoAURhvNEXrwPzAIaji9FHmq/lviqBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZUQlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4x
WlUvMS80NjFCQ0QxMTdBRjAzRjMwMDg2QTM4QkQxNDc5QUFGRTVCRTJBODEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MUJDRDExN0FGMDNGMzAw
ODZBMzhCRDE0NzlBQUZFNUJFMkE4MTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWVEJaWEgxOG5NQnJzMzJqdXRDc2d4UVBGakwxcWlHdHdVZHFQRTVOMVpVLzEv
MzIzODMwMzQzYTMyMzc2MjMwM2E2MTM4MzMzMDNhM2EyZjM0MzUyZDM0MzUyMDNk
M2UyMDMyMzYzMzM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygEJ7CoMDANBgkqhkiG9w0BAQsF
AAOCAQEAIqhrRLnXabTLwK9oRHein00YuYf6FGlGrZw9Th5QM/8yl/Ze49Y2MAgF
eE4fczQA0RDRtk2VmwyceMWQ6fLP9+t7LDe64X+X6TNUBtMXG0Pw3mu+XWw+4GjZ
OAugyW2/p7mO+kbXnUpl7KqDBy1HU8dh0FgYjo6/lB8Caq8V6TOMu2GjyYBB5hrB
DBQqyvnb3aJBiZgDd9YgCZPsBYHELsw16WGk91IKd2EIt1IGJBltVfupqQGo3rk8
DkKr7Fqtuu/rl0ejupjfc6ZilRr2aGHEGZN3sHQfZncI6srxboyDfYUWw4Viufck
ZPjF5rhqt04tiqGPihxy1W1ftuyEqA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:05:39 2025 by rpki-client