Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613839373a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a613839373a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          HxR1O4QFSvC5G0/0Oep4184zKdrK6NtytfspBxyjH3Y=
Subject key identifier:   91:66:B2:F7:3C:8D:E2:67:6E:AC:40:8C:6F:C0:BB:93:A1:6F:76:AF
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       3B64882886BF06234DC14CFDCD9F79E7BA8D8607
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613839373a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:01 +0000
ROA not before:           Fri 22 Aug 2025 01:55:01 +0000
ROA not after:            Fri 21 Aug 2026 02:00:01 +0000
asID:                     263917
IP address blocks:        2804:27b0:a897::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:64:88:28:86:bf:06:23:4d:c1:4c:fd:cd:9f:79:e7:ba:8d:86:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:01 2025 GMT
            Not After : Aug 21 02:00:01 2026 GMT
        Subject: CN=9166B2F73C8DE2676EAC408C6FC0BB93A16F76AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:3f:a7:0d:53:0a:08:3d:95:41:18:1f:df:
                    fb:27:03:9c:49:b9:ae:f1:3b:e2:0d:7f:8a:c1:56:
                    05:0a:95:92:5a:1a:2a:38:4f:e5:a4:54:96:0a:ec:
                    9a:f6:d7:85:56:29:c8:b5:f9:30:91:0e:1b:03:7b:
                    39:85:6d:d8:fc:08:d3:be:5f:82:73:d9:d4:25:45:
                    94:a0:28:34:44:8e:91:ee:19:f2:0c:13:aa:b4:dc:
                    cd:fa:37:7b:16:e9:1e:4f:d1:81:58:8c:b3:1a:db:
                    74:25:78:94:37:81:28:de:a6:9a:91:d8:2c:94:7e:
                    35:a4:08:f3:7a:b4:c0:3d:b1:ef:7c:6f:ea:14:cf:
                    6b:b6:02:ef:32:2e:b7:5a:76:3d:b8:6f:48:54:10:
                    6b:08:0e:77:65:ae:24:6c:7e:ca:60:e3:da:8c:26:
                    5e:73:fc:53:ad:5e:b8:ca:5c:80:93:2e:21:28:66:
                    f0:fb:64:76:cb:5a:8b:e5:31:60:a4:fd:e0:e4:f4:
                    06:67:08:b5:b7:8f:cd:54:89:b0:b5:a8:44:49:ba:
                    a7:76:11:bc:44:d0:00:c8:65:f4:0b:dc:7d:20:02:
                    8a:4e:1b:5e:9b:b9:1f:76:75:9d:1e:1a:b4:8e:64:
                    15:d0:2b:64:76:26:0b:72:7e:e9:99:04:37:8b:f2:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:B2:F7:3C:8D:E2:67:6E:AC:40:8C:6F:C0:BB:93:A1:6F:76:AF
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a613839373a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:a897::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:f1:eb:5c:61:e0:86:85:c9:83:0f:96:fb:91:db:9a:0d:
         b5:d4:04:42:91:db:74:98:9b:03:67:f6:34:c7:44:6f:5e:74:
         5d:77:9e:79:16:88:02:62:4c:f5:78:bd:60:ff:b7:6f:fb:91:
         ee:87:9e:bd:84:9b:3f:b2:a1:35:27:74:5e:9e:10:cf:ce:4b:
         73:b9:11:c4:fd:60:65:41:5d:88:72:01:87:32:3e:f5:48:e3:
         35:01:53:91:f9:45:f8:42:1d:ee:7b:c6:cf:de:a4:72:e8:c1:
         95:df:10:a4:48:ff:9f:70:3d:92:21:4f:65:dc:65:65:94:04:
         ff:90:01:e5:db:00:69:45:80:65:99:aa:e2:04:6f:32:ff:c5:
         5b:6b:2a:dc:41:a3:01:e8:fc:25:a3:fe:43:57:99:12:3d:1a:
         f6:c5:de:dd:fb:50:e8:c8:ca:b6:6f:ab:52:ad:a4:ee:de:30:
         4f:26:8d:61:7b:90:2a:26:8c:01:a5:f3:ef:b7:95:e7:42:4e:
         a1:7e:5c:12:3e:51:cc:f7:2a:e9:47:4a:6e:f0:79:7d:8a:f4:
         7a:13:6b:81:50:f5:38:04:ff:41:0b:68:b0:5c:61:80:03:bc:
         92:86:96:0c:db:fc:fb:2c:39:28:e2:95:3b:21:fd:be:70:95:
         dc:f4:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:56:09 2025 by rpki-client