Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa
File:                     3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa (raw, json)
Hash identifier:          O9CFbOJsGpzvWRmjSN4TKtVkEvszSa2UatxBPV0S54k=
Subject key identifier:   D0:84:2F:05:8F:E0:32:49:9B:97:EE:65:A7:EB:BC:FB:2F:CE:DF:AA
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       4AE6884F7D7215848C7FDA14FAA93ABF07BCAD7F
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     263917
IP address blocks:        138.204.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e6:88:4f:7d:72:15:84:8c:7f:da:14:fa:a9:3a:bf:07:bc:ad:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=D0842F058FE032499B97EE65A7EBBCFB2FCEDFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:95:e9:1d:36:47:8a:ec:e4:7c:c8:87:44:
                    30:92:7e:80:bb:b6:40:3c:1a:ff:53:95:f7:7b:43:
                    92:06:1c:5c:fe:90:31:3f:3c:3e:f5:ad:67:9b:32:
                    5d:a4:3d:f9:93:4c:b9:20:65:56:55:95:2d:23:03:
                    56:be:f5:e3:ec:ed:6d:e8:62:4e:4a:5f:fe:87:2c:
                    70:33:72:2f:a3:71:f5:6d:87:f8:f9:2f:b1:dc:05:
                    2c:fe:46:b1:f4:71:b7:2b:1b:6d:c7:2f:e1:97:a7:
                    ee:13:9d:4c:c5:4c:06:bc:1c:e8:57:da:f3:1a:a1:
                    b9:38:92:d4:2d:29:d9:8f:82:2b:8c:00:2a:93:f5:
                    e6:36:e0:61:1a:78:6e:dd:a2:f4:81:01:3a:82:7d:
                    81:c7:46:9b:f5:53:fb:9c:50:8e:41:1b:6b:cb:6f:
                    15:18:9b:a5:34:29:43:d4:8b:d6:a6:07:d3:fe:75:
                    99:db:f5:fc:21:26:9c:69:d8:d6:fb:c2:a3:f6:35:
                    70:6a:27:bb:cd:60:ba:da:78:a8:4a:6d:b9:06:99:
                    2b:ad:09:99:11:96:94:fb:73:78:75:64:8b:2d:74:
                    35:59:c3:da:a1:5a:11:86:84:c4:79:d0:84:1a:de:
                    5a:ac:e8:54:4c:c9:ab:f4:47:34:f2:04:b9:31:09:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:2F:05:8F:E0:32:49:9B:97:EE:65:A7:EB:BC:FB:2F:CE:DF:AA
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233332e302f32342d3234203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:85:dd:26:50:7b:5c:60:25:ac:57:9b:08:a4:95:8f:05:
         ad:e5:5b:ce:92:70:70:45:2f:d9:9f:b0:9b:6b:35:89:4c:fc:
         d0:09:b6:ce:b1:76:89:06:46:b9:a7:92:ff:ce:c7:f4:2a:54:
         a4:68:5e:68:fa:4b:69:c3:39:fd:7f:58:db:98:5f:77:1d:9b:
         5b:99:14:02:ba:60:4f:cc:4f:cb:26:e0:8f:73:72:55:ba:a4:
         65:66:85:ec:8d:9f:31:4a:ab:05:b6:0c:1f:21:50:6c:b8:b9:
         b5:bc:2f:e8:43:83:2d:32:9c:8f:85:94:56:b1:36:be:47:3d:
         3d:7a:59:67:65:93:cb:cc:41:36:c7:d1:dc:1c:59:0b:b7:a7:
         51:50:bc:24:aa:49:ac:63:db:85:fc:e5:6a:70:9e:0e:d6:ec:
         8e:64:d4:b2:6f:16:4d:00:51:43:c6:33:08:c5:06:e6:cb:16:
         e8:d5:e9:6f:b6:30:b0:40:d6:6d:0a:76:05:85:b0:46:cf:6d:
         7d:fc:25:b6:b6:e7:f0:44:03:fd:38:3f:bb:05:3a:fa:88:32:
         05:5b:f7:7d:53:0c:f2:d4:4f:c1:c9:df:32:0e:88:c1:75:f8:
         9b:2a:29:44:cb:94:e5:60:d3:43:5d:7e:20:5a:9c:19:25:d8:
         40:3c:1d:81
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSuaIT31yFYSMf9oU+qk6vwe8rX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxQkNEMTE3QUYwM0YzMDA4NkEzOEJEMTQ3OUFBRkU1
QkUyQTgxMjAeFw0yNTAzMDUxODU1MDlaFw0yNjAzMDQxOTAwMDlaMDMxMTAvBgNV
BAMTKEQwODQyRjA1OEZFMDMyNDk5Qjk3RUU2NUE3RUJCQ0ZCMkZDRURGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmH5XpHTZHiuzkfMiHRDCSfoC7
tkA8Gv9Tlfd7Q5IGHFz+kDE/PD71rWebMl2kPfmTTLkgZVZVlS0jA1a+9ePs7W3o
Yk5KX/6HLHAzci+jcfVth/j5L7HcBSz+RrH0cbcrG23HL+GXp+4TnUzFTAa8HOhX
2vMaobk4ktQtKdmPgiuMACqT9eY24GEaeG7dovSBATqCfYHHRpv1U/ucUI5BG2vL
bxUYm6U0KUPUi9amB9P+dZnb9fwhJpxp2Nb7wqP2NXBqJ7vNYLraeKhKbbkGmSut
CZkRlpT7c3h1ZIstdDVZw9qhWhGGhMR50IQa3lqs6FRMyav0RzTyBLkxCcSFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0IQvBY/gMkmbl+5lp+u8+y/O36owHwYDVR0j
BBgwFoAURhvNEXrwPzAIaji9FHmq/lviqBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZUQlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4x
WlUvMS80NjFCQ0QxMTdBRjAzRjMwMDg2QTM4QkQxNDc5QUFGRTVCRTJBODEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MUJDRDExN0FGMDNGMzAw
ODZBMzhCRDE0NzlBQUZFNUJFMkE4MTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWVEJaWEgxOG5NQnJzMzJqdXRDc2d4UVBGakwxcWlHdHdVZHFQRTVOMVpVLzEv
MzEzMzM4MmUzMjMwMzQyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrM6TANBgkqhkiG9w0BAQsFAAOCAQEAU3qF
3SZQe1xgJaxXmwiklY8FreVbzpJwcEUv2Z+wm2s1iUz80Am2zrF2iQZGuaeS/87H
9CpUpGheaPpLacM5/X9Y25hfdx2bW5kUArpgT8xPyybgj3NyVbqkZWaF7I2fMUqr
BbYMHyFQbLi5tbwv6EODLTKcj4WUVrE2vkc9PXpZZ2WTy8xBNsfR3BxZC7enUVC8
JKpJrGPbhfzlanCeDtbsjmTUsm8WTQBRQ8YzCMUG5ssW6NXpb7YwsEDWbQp2BYWw
Rs9tffwltrbn8EQD/Tg/uwU6+ogyBVv3fVMM8tRPwcnfMg6IwXX4myopRMuU5WDT
Q11+IFqcGSXYQDwdgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:17 2025 by rpki-client on console.sobornost.net