Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a646430303a3a2f34362d3436203d3e20323633393137.roa
File:                     323830343a323762303a646430303a3a2f34362d3436203d3e20323633393137.roa (raw, json)
Hash identifier:          /HrQnUaGQ28X85H4Y6rp3MorqJyNX9qNdSnhe1iwSWA=
Subject key identifier:   B0:F1:32:59:4E:5F:34:1F:18:DA:81:C5:8F:5A:3C:26:D9:E5:D7:FB
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       4B3C15155E4749FBC97CE847E1F95D72CD7A89C4
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a646430303a3a2f34362d3436203d3e20323633393137.roa
Signing time:             Fri 22 Aug 2025 02:00:04 +0000
ROA not before:           Fri 22 Aug 2025 01:55:04 +0000
ROA not after:            Fri 21 Aug 2026 02:00:04 +0000
asID:                     263917
IP address blocks:        2804:27b0:dd00::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 18:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3c:15:15:5e:47:49:fb:c9:7c:e8:47:e1:f9:5d:72:cd:7a:89:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Aug 22 01:55:04 2025 GMT
            Not After : Aug 21 02:00:04 2026 GMT
        Subject: CN=B0F132594E5F341F18DA81C58F5A3C26D9E5D7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:81:4b:c3:f9:6e:e3:4f:87:e4:d6:2d:cf:
                    ed:65:47:b3:9f:44:67:39:e3:db:25:31:b1:2e:0b:
                    05:4c:da:9e:18:ed:b0:84:ab:86:9f:d2:07:61:3e:
                    59:91:21:ee:04:22:1e:1c:cb:73:bb:53:24:10:ae:
                    b6:de:b1:b3:cd:8f:36:af:68:00:cb:f0:fb:7b:31:
                    4d:62:fa:cf:b7:9a:e5:a9:bf:a9:c0:a8:5b:e0:15:
                    5f:4c:b6:01:94:1a:ac:a6:aa:cf:b8:d5:da:c0:3d:
                    75:9a:d7:b6:80:ca:a9:df:9f:02:7c:7e:89:09:4d:
                    40:76:a3:ea:0b:27:e2:c1:7c:c3:8e:ed:61:1c:df:
                    a4:35:cb:6a:7d:84:40:b2:a4:a4:d6:a6:96:04:57:
                    48:38:a0:d0:17:82:00:32:51:1f:3b:e4:27:03:06:
                    d9:b5:b7:e9:c1:dc:81:9d:2c:41:02:61:2a:84:8e:
                    58:43:39:c4:c8:5e:c3:b5:5f:38:5c:2a:a0:28:2f:
                    39:9f:c9:fd:94:4d:d3:c8:95:5b:69:6b:fe:f7:89:
                    4e:f1:2c:fd:aa:d6:df:e8:dc:74:53:9d:3d:17:26:
                    e0:65:a1:85:aa:8e:07:27:56:a1:aa:2f:33:a2:2d:
                    16:b3:56:8c:bc:3a:de:37:6e:05:7a:df:8e:cd:eb:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F1:32:59:4E:5F:34:1F:18:DA:81:C5:8F:5A:3C:26:D9:E5:D7:FB
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/323830343a323762303a646430303a3a2f34362d3436203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b0:dd00::/46

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:3a:f3:b9:40:09:83:80:f8:e4:0e:21:ec:cc:d1:23:5a:
         41:13:ea:c6:56:07:79:2e:2d:08:5b:f2:78:05:f5:74:c8:09:
         36:9b:0d:35:9f:92:33:da:64:f6:8b:ea:07:10:a8:46:c8:1a:
         56:64:6f:39:0f:73:1e:18:23:af:df:74:db:ec:a9:3e:0f:c9:
         3d:b8:1b:35:9b:3b:95:b7:a3:dc:1f:cf:be:a3:58:64:07:e4:
         9b:a2:14:0e:12:60:7c:34:ae:9a:a3:98:0c:c2:55:db:1b:7e:
         bc:d9:23:45:b8:ba:58:10:df:c3:a4:9e:d2:d5:c0:1f:92:52:
         31:a5:38:69:ef:8a:68:f5:a0:2b:64:85:c9:45:c9:5f:cf:5f:
         c2:2b:d0:75:64:b0:b0:bd:29:2c:3b:b0:8c:d4:5a:0e:e0:73:
         51:6f:ef:78:36:5b:9f:0f:37:bc:65:0e:98:25:46:c4:a8:b3:
         99:5b:0b:08:6f:ad:e3:99:45:c1:bb:aa:d8:bd:74:6e:8e:0c:
         5c:04:bf:b7:c6:ac:35:54:86:32:4c:e2:19:2f:e0:02:d4:55:
         ef:16:ab:17:ef:85:fb:c1:ff:db:a4:e7:5f:70:e9:2a:c6:bb:
         4c:e9:05:27:09:bc:dc:80:a7:6d:a3:9d:14:6c:0b:8a:fd:cd:
         29:e7:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:46 2025 by rpki-client