Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          gzaPaZjr+OQnqkjQB/uhPzeAwUD9E3+KrW4wbt1Tmns=
Subject key identifier:   49:DE:73:F0:25:39:14:88:B6:75:91:5C:50:F5:DE:2B:A1:5B:37:59
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       06ABAE659D327FECE73E67349B58625B56BCFFE2
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:57 +0000
ROA not before:           Sat 03 May 2025 00:15:57 +0000
ROA not after:            Sat 02 May 2026 00:20:57 +0000
asID:                     61573
IP address blocks:        2804:25e4:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 01:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ab:ae:65:9d:32:7f:ec:e7:3e:67:34:9b:58:62:5b:56:bc:ff:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:57 2025 GMT
            Not After : May  2 00:20:57 2026 GMT
        Subject: CN=49DE73F025391488B675915C50F5DE2BA15B3759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:f7:7b:c8:95:4c:67:a1:52:dd:a2:38:3e:
                    84:13:fe:a9:c3:4d:c6:9d:8d:b7:6d:97:08:9b:2c:
                    5e:b4:4e:2b:cf:f6:02:77:48:64:ae:2a:6b:3f:e9:
                    77:dd:94:00:2b:c4:22:10:fd:b4:8c:b4:08:e6:b9:
                    2d:3b:df:41:64:90:14:b8:90:19:d8:6a:bb:9b:5c:
                    16:5d:52:b5:39:64:d4:c1:3b:56:14:db:8b:8c:f0:
                    c9:8d:19:f8:01:e6:c3:23:39:2c:ff:4d:56:9f:39:
                    f4:1f:8b:01:cc:c3:cb:12:ce:f7:ea:9d:02:6d:fc:
                    a0:98:b2:4d:a7:16:46:1e:e6:55:aa:a2:b8:2e:77:
                    a9:a7:29:c2:35:ce:62:37:63:eb:10:8f:32:15:5a:
                    0d:1b:73:29:3b:b5:3e:b0:f1:ac:ac:df:11:4f:03:
                    69:67:2e:3e:e7:02:21:7a:13:1f:60:2f:57:00:2e:
                    04:cf:dc:9b:f3:b4:18:0b:b2:0a:ab:6f:20:75:9d:
                    c6:91:04:5f:eb:6d:d3:1e:21:54:e9:36:d5:12:47:
                    41:bf:e2:02:a3:91:b6:c2:6b:8b:36:a2:fb:ad:e5:
                    cb:ca:f0:c9:5e:a2:d6:4a:44:0e:a5:93:ac:fd:9a:
                    e9:d4:8a:7c:db:bb:d2:6a:70:c0:3a:f6:8d:a6:04:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:73:F0:25:39:14:88:B6:75:91:5C:50:F5:DE:2B:A1:5B:37:59
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a313030303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:72:e8:e5:32:bc:0c:04:12:93:07:3d:cf:26:a0:3d:65:
         66:d6:b6:47:10:53:b6:0a:1d:03:c6:72:4e:47:61:87:de:ea:
         91:e6:98:1a:86:91:ba:cf:54:ae:fd:b1:ea:0a:07:fc:76:9c:
         4d:41:9f:08:13:d4:a6:da:8b:a4:19:bf:0d:6d:c3:1f:f9:69:
         72:d6:31:01:4e:aa:09:63:2e:05:de:40:48:69:85:99:52:a8:
         5d:1c:3c:92:73:ac:1d:77:3b:f2:e8:e4:39:14:69:ff:d1:95:
         d0:6e:a4:36:d8:83:34:c2:87:5d:0b:e7:84:36:05:ea:e4:3e:
         2e:2d:4b:d7:bf:b2:b6:ba:e6:4b:8d:5d:26:32:ed:6b:16:2e:
         e4:80:ba:23:28:31:74:8a:9d:3f:e9:3d:45:48:6b:8e:cd:1c:
         56:32:3c:fe:ec:fd:ee:55:e0:76:82:f8:58:07:5b:29:7e:b2:
         c3:1b:c2:42:9b:78:fb:d7:61:ad:bf:b4:2c:11:6b:f8:fc:82:
         24:8f:f3:3d:a0:ca:7e:ae:66:2f:d7:8c:04:1a:aa:b5:d2:f2:
         59:58:a4:ef:a8:d6:c1:cd:e5:b4:16:30:3f:00:4b:e1:b5:e4:
         7c:2d:af:cd:d1:45:9d:26:25:2a:e9:f6:c2:7f:f0:71:79:0e:
         f1:b9:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:33:09 2025 by rpki-client