Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          4YLyIjmaCEF+Rdy5vfBSdypLQMe3k92hzYKK/IV7KBA=
Subject key identifier:   0D:0A:8E:70:DA:1B:60:72:FD:46:65:90:70:0D:BE:04:A0:B5:69:BC
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       70A013784B8C10502F4ABDB5BC48E82A4D9C4882
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:04 +0000
ROA not before:           Fri 22 Aug 2025 01:55:04 +0000
ROA not after:            Fri 21 Aug 2026 02:00:04 +0000
asID:                     263917
IP address blocks:        2804:27b0:a842::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a0:13:78:4b:8c:10:50:2f:4a:bd:b5:bc:48:e8:2a:4d:9c:48:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:04 2025 GMT
            Not After : Aug 21 02:00:04 2026 GMT
        Subject: CN=0D0A8E70DA1B6072FD466590700DBE04A0B569BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:c7:56:56:bb:88:e4:d5:b4:19:81:64:06:
                    92:f5:29:16:22:3d:4c:6b:37:78:e2:6b:ed:60:e2:
                    1b:30:84:0b:db:82:94:b6:fd:87:be:28:49:8c:64:
                    97:a1:4b:4b:73:04:c7:22:da:8f:91:79:eb:56:b0:
                    cd:61:c6:ff:03:b6:a1:73:84:b4:b3:30:34:a5:32:
                    32:38:28:5b:1f:6c:68:8f:fe:c6:bc:ff:06:d6:6f:
                    1b:3e:03:1f:4d:81:75:46:bd:56:0c:f0:a2:3f:af:
                    45:fe:6f:8a:b1:e2:3f:d2:64:dd:86:ca:ab:8d:ec:
                    74:fe:72:ae:43:1a:f5:3a:22:af:32:2c:9f:7e:38:
                    1b:84:d6:ff:50:68:a7:5f:9d:0e:d3:1d:7c:43:3a:
                    f7:b0:25:ca:cd:ca:53:63:fa:63:52:f8:9c:39:a6:
                    d4:dc:92:17:b7:a6:38:a0:57:28:67:b5:7c:14:53:
                    6c:f2:1d:45:45:18:65:3d:0b:64:eb:7f:2a:dd:62:
                    52:1d:30:97:04:8d:0a:c8:bd:22:e6:e3:47:b7:61:
                    1c:e0:25:1d:c2:a3:d7:4e:0e:0c:45:45:f1:f4:d0:
                    b3:fb:54:4f:74:55:c8:6b:80:9c:f1:40:78:9a:fb:
                    54:65:17:7c:1c:88:3a:c8:fe:4d:da:ed:1c:33:ac:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0A:8E:70:DA:1B:60:72:FD:46:65:90:70:0D:BE:04:A0:B5:69:BC
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613834323a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:a842::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:d5:40:99:71:fc:39:96:65:f6:7e:2d:3d:8f:a7:53:43:
         72:fb:97:1b:7b:3c:d9:06:4d:cf:2a:28:5b:8b:4b:91:8f:73:
         30:f2:e7:b6:d5:5f:72:5f:c2:ac:a7:c4:bf:f6:85:23:84:c6:
         96:38:66:c3:fc:88:d7:1d:e8:29:7a:44:31:7f:5d:7d:13:eb:
         08:7b:d0:f6:a1:3f:f0:ab:55:97:e0:8d:82:16:c3:cf:49:e5:
         02:63:ee:64:b2:fc:cf:51:81:20:e3:ef:9c:0a:f5:1d:86:d8:
         33:e6:62:06:07:a8:2c:ab:46:68:81:bf:3e:65:29:db:24:d2:
         1b:7b:8d:52:1d:e2:88:94:1f:ac:f4:30:f3:3d:0c:e2:9f:c7:
         88:7c:94:09:7d:14:7d:f3:a7:e3:de:31:ef:99:7e:10:a0:da:
         d4:67:4d:ca:a0:88:47:fd:20:9b:c5:39:82:10:ec:31:b3:12:
         86:ea:a5:06:2d:7c:6c:2b:36:5f:79:11:d6:1d:03:46:45:20:
         d3:4f:3c:2e:12:85:e9:c7:34:12:1e:46:e2:0f:93:2d:75:8e:
         57:df:29:78:47:86:93:08:34:be:02:dc:2b:d6:e8:5a:1f:42:
         d7:99:b7:f9:7c:1c:06:1a:8e:61:3f:66:23:53:3f:6d:7b:b6:
         dd:57:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:01:17 2025 by rpki-client