Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa
File:                     323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa (raw, json)
Hash identifier:          iovjXbR5OR1gQPHbZ67RvqRljXcVSC5MRJoR0PYqRTs=
Subject key identifier:   6D:C8:C3:4A:F0:05:B9:12:84:7D:5D:20:E8:1C:73:45:F9:5B:C5:73
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       40D2B975A3F0CCD21E1B3E6F0ADEDBDFD46BE7D3
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:00 +0000
ROA not before:           Fri 22 Aug 2025 01:55:00 +0000
ROA not after:            Fri 21 Aug 2026 02:00:00 +0000
asID:                     263917
IP address blocks:        2804:27b0:ccff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d2:b9:75:a3:f0:cc:d2:1e:1b:3e:6f:0a:de:db:df:d4:6b:e7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:00 2025 GMT
            Not After : Aug 21 02:00:00 2026 GMT
        Subject: CN=6DC8C34AF005B912847D5D20E81C7345F95BC573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:bd:9e:2e:cb:cb:bc:2e:c4:1f:c5:66:73:
                    3d:2c:c3:64:85:70:a8:43:a4:46:c3:85:97:05:ca:
                    10:8f:7a:d4:4a:ef:c6:16:f6:40:30:03:97:87:40:
                    e1:3f:60:21:f7:17:82:8d:10:e3:66:7f:b4:36:44:
                    f6:6f:9a:c1:b1:2e:51:c2:1e:ef:8b:8c:9a:01:d3:
                    c9:69:72:d2:8c:fc:f0:9d:ed:6c:64:ee:45:5b:e0:
                    fd:1a:98:3d:61:5d:9b:44:de:c6:e8:35:e4:9e:76:
                    46:ae:04:e4:66:a6:3b:34:7e:08:01:22:9e:fd:be:
                    6c:07:39:4a:9e:b2:44:63:bf:3e:e6:c7:c3:af:42:
                    22:ee:16:53:f0:b8:ed:8c:04:a0:2d:32:8b:81:db:
                    e9:fc:ea:21:38:95:53:b4:be:d3:ee:80:ab:9f:5e:
                    52:47:18:dc:c1:e2:e4:84:1c:33:cb:79:a5:a2:bc:
                    c4:1d:45:bf:e9:19:61:56:54:cb:7e:a3:3c:e6:dc:
                    52:48:1a:cf:3d:92:b6:86:a0:2c:91:2d:a0:42:a8:
                    17:4d:c4:e3:5f:a1:3a:3a:9e:4c:7a:60:bd:1f:20:
                    86:3b:67:20:c9:fa:0f:0b:69:3d:df:57:ed:e8:c9:
                    e2:dd:e9:47:72:7b:1f:88:72:a6:96:82:d0:0d:0d:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C8:C3:4A:F0:05:B9:12:84:7D:5D:20:E8:1C:73:45:F9:5B:C5:73
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a636366663a3a2f34382d3438203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:ccff::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:f9:85:09:a0:eb:23:a4:69:a5:73:29:23:d7:d8:1d:de:de:
         01:b3:81:f1:0f:5b:4c:5e:1f:57:50:98:95:1a:80:7f:26:1a:
         ec:f6:4f:8f:99:07:a9:a5:2b:38:aa:d7:50:4a:ad:8f:a7:7e:
         16:0b:ba:fa:a6:c1:e9:e4:87:21:81:68:ca:31:12:db:6d:a0:
         2e:0e:ba:d0:08:6f:b7:3c:c5:23:50:5e:11:bd:98:cf:e5:2d:
         cc:52:99:82:65:ee:9e:ea:ae:56:db:1f:ad:09:8c:e2:42:4e:
         62:bc:29:a9:3b:65:f9:11:fc:bd:09:b8:4c:f3:da:9e:24:9c:
         8d:9e:b6:73:d4:c4:17:c9:ca:ba:0b:84:1d:d9:f9:0a:8c:36:
         0b:7d:83:d9:78:e5:27:22:39:51:3e:6d:9a:ce:98:1f:61:99:
         30:5c:ce:3e:2b:5e:82:a3:41:21:ac:8a:52:73:3b:ae:30:37:
         b9:a1:6a:63:6e:24:d5:88:06:bc:4e:10:9d:b1:fd:81:a8:d3:
         25:48:38:ae:71:fb:91:ab:54:d5:ec:86:34:19:17:0d:c4:29:
         40:6b:54:01:4c:46:ab:86:6f:d9:77:ca:b7:58:18:fe:12:da:
         97:1d:97:e5:06:d2:10:a7:59:d5:b2:d3:f9:92:5c:06:ef:93:
         1d:97:0a:8e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUQNK5daPwzNIeGz5vCt7b39Rr59MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxQkNEMTE3QUYwM0YzMDA4NkEzOEJEMTQ3OUFBRkU1
QkUyQTgxMjAeFw0yNTA4MjIwMTU1MDBaFw0yNjA4MjEwMjAwMDBaMDMxMTAvBgNV
BAMTKDZEQzhDMzRBRjAwNUI5MTI4NDdENUQyMEU4MUM3MzQ1Rjk1QkM1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCL2eLsvLvC7EH8Vmcz0sw2SF
cKhDpEbDhZcFyhCPetRK78YW9kAwA5eHQOE/YCH3F4KNEONmf7Q2RPZvmsGxLlHC
Hu+LjJoB08lpctKM/PCd7Wxk7kVb4P0amD1hXZtE3sboNeSedkauBORmpjs0fggB
Ip79vmwHOUqeskRjvz7mx8OvQiLuFlPwuO2MBKAtMouB2+n86iE4lVO0vtPugKuf
XlJHGNzB4uSEHDPLeaWivMQdRb/pGWFWVMt+ozzm3FJIGs89kraGoCyRLaBCqBdN
xONfoTo6nkx6YL0fIIY7ZyDJ+g8LaT3fV+3oyeLd6Udyex+IcqaWgtANDfzBAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUbcjDSvAFuRKEfV0g6BxzRflbxXMwHwYDVR0j
BBgwFoAURhvNEXrwPzAIaji9FHmq/lviqBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZUQlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4x
WlUvMS80NjFCQ0QxMTdBRjAzRjMwMDg2QTM4QkQxNDc5QUFGRTVCRTJBODEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MUJDRDExN0FGMDNGMzAw
ODZBMzhCRDE0NzlBQUZFNUJFMkE4MTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWVEJaWEgxOG5NQnJzMzJqdXRDc2d4UVBGakwxcWlHdHdVZHFQRTVOMVpVLzEv
MzIzODMwMzQzYTMyMzc2MjMwM2E2MzYzNjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMzM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJ7DM/zANBgkqhkiG9w0BAQsF
AAOCAQEALfmFCaDrI6RppXMpI9fYHd7eAbOB8Q9bTF4fV1CYlRqAfyYa7PZPj5kH
qaUrOKrXUEqtj6d+Fgu6+qbB6eSHIYFoyjES222gLg660AhvtzzFI1BeEb2Yz+Ut
zFKZgmXunuquVtsfrQmM4kJOYrwpqTtl+RH8vQm4TPPaniScjZ62c9TEF8nKuguE
Hdn5Cow2C32D2XjlJyI5UT5tms6YH2GZMFzOPitegqNBIayKUnM7rjA3uaFqY24k
1YgGvE4QnbH9gajTJUg4rnH7katU1eyGNBkXDcQpQGtUAUxGq4Zv2XfKt1gY/hLa
lx2X5QbSEKdZ1bLT+ZJcBu+THZcKjg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:44 2025 by rpki-client