Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a623839333a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a623839333a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          8USZp6gK+AHRJ+i1SHGvDuYsVbSk9fu+SsT9BnsGyeI=
Subject key identifier:   0D:93:4F:AC:47:75:AD:08:46:D7:46:ED:FC:6F:B1:16:4F:2D:41:CE
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       59D5ED443494A484EE84B8E7CE85A3888E1277AE
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a623839333a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:04 +0000
ROA not before:           Fri 22 Aug 2025 01:55:04 +0000
ROA not after:            Fri 21 Aug 2026 02:00:04 +0000
asID:                     263917
IP address blocks:        2804:27b0:b893::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d5:ed:44:34:94:a4:84:ee:84:b8:e7:ce:85:a3:88:8e:12:77:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:04 2025 GMT
            Not After : Aug 21 02:00:04 2026 GMT
        Subject: CN=0D934FAC4775AD0846D746EDFC6FB1164F2D41CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:1e:d2:09:39:b6:34:c4:8f:df:b4:ba:c1:
                    9f:3b:b4:cd:3c:8c:91:0e:ff:ca:82:35:c7:08:46:
                    10:a6:3d:ca:7b:b7:7b:28:80:7d:67:28:c3:18:8b:
                    aa:00:e2:80:71:ad:b1:b0:3c:11:8c:43:ea:fc:dd:
                    d6:4e:ea:2c:2f:39:b4:25:e2:de:40:c1:45:9f:7c:
                    a0:43:66:6c:05:9c:47:c3:af:5b:07:be:fa:2d:b8:
                    a5:6b:6b:18:0e:9c:f7:c1:71:c5:22:3b:86:26:84:
                    90:27:74:f1:8b:13:d4:75:02:d5:dd:ec:aa:37:1b:
                    d3:08:42:b4:35:5f:7a:7c:4e:63:2c:78:36:e8:8b:
                    97:f5:f6:fc:03:3e:3e:bc:68:f9:e1:0b:44:56:38:
                    aa:5e:6e:c5:1a:61:96:c1:91:a1:3f:fc:43:27:1e:
                    74:1c:67:71:15:0b:61:8f:cd:b8:28:6c:02:e0:df:
                    6c:9e:83:82:28:58:0b:9c:64:d3:ed:a4:f0:55:ef:
                    f6:1e:56:4b:46:6e:41:a1:ea:48:47:b1:f3:8a:59:
                    7e:a2:b6:45:bb:99:82:30:f0:df:54:7a:6d:b0:f2:
                    1e:50:5b:da:82:db:db:a2:4a:4a:b1:c1:9b:c6:2b:
                    81:ed:db:45:4a:2c:9a:26:d9:4d:27:19:a3:50:75:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:4F:AC:47:75:AD:08:46:D7:46:ED:FC:6F:B1:16:4F:2D:41:CE
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a623839333a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:b893::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:11:e1:d5:e0:45:cf:b8:80:f6:33:5d:0a:18:55:ee:39:3f:
         78:3d:19:22:ab:c1:ff:71:eb:be:c4:ea:a3:85:4f:6d:81:aa:
         22:e1:28:b9:79:7f:82:16:ca:0b:c8:9f:fe:6a:b5:e9:41:84:
         82:5f:94:db:40:12:b7:77:46:4d:3c:3d:2c:9c:84:2f:9f:62:
         02:0a:1f:7e:65:4f:58:c0:7b:91:a8:47:eb:2a:96:a3:74:e1:
         45:34:32:76:77:9e:13:eb:4f:5f:57:05:ce:3f:2f:a1:46:fd:
         67:bc:42:d9:26:2a:f8:40:90:47:a8:67:b7:a3:bf:9a:25:ab:
         6a:50:93:8a:92:6c:0c:66:b9:a9:ab:83:31:10:38:67:6a:c0:
         19:ed:2c:dd:6e:7a:4b:52:a4:9e:12:4d:0c:b2:9f:e9:e6:4a:
         f6:b8:cf:0b:84:4c:0a:b7:ee:1b:32:23:6d:1f:0e:5f:a6:bf:
         a3:70:c2:f2:0c:1d:23:ad:4a:5e:01:e5:83:e4:68:8d:bb:95:
         e3:72:94:cc:97:62:4a:a1:70:0b:4d:6e:05:3f:f3:87:bc:ff:
         d5:c7:fe:f9:f0:4f:14:be:e7:38:71:ec:ec:da:dd:db:5e:e4:
         52:df:b3:68:bc:f0:e2:3e:e7:04:7e:b3:e2:ce:13:3e:47:12:
         01:a2:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:03:06 2025 by rpki-client