Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          ykzzj/0rk56XPuAlqk0UgW5YMf/XWV7BbOklrmA5eNQ=
Subject key identifier:   3C:5C:4D:A8:96:22:A6:CD:94:95:7D:ED:1A:1C:9A:C9:4B:78:83:49
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       4F4E9E2849180B36CED376793C655A9D45B7604B
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:52 +0000
ROA not before:           Sat 03 May 2025 00:15:52 +0000
ROA not after:            Sat 02 May 2026 00:20:52 +0000
asID:                     61573
IP address blocks:        2804:25e4:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 01:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4e:9e:28:49:18:0b:36:ce:d3:76:79:3c:65:5a:9d:45:b7:60:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:52 2025 GMT
            Not After : May  2 00:20:52 2026 GMT
        Subject: CN=3C5C4DA89622A6CD94957DED1A1C9AC94B788349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:fa:a0:30:a0:dd:50:e5:b9:2e:87:11:a9:
                    b2:62:c8:b9:db:d9:af:fa:98:2b:d1:22:8b:f4:ae:
                    d2:cc:27:04:a3:17:c4:28:1d:af:26:37:ab:d8:ef:
                    cf:53:aa:ee:24:d5:c7:c4:5e:1e:7b:0e:8a:4d:43:
                    9d:7e:ae:be:c6:fd:5b:c6:eb:1d:41:72:2d:4b:1c:
                    05:c3:c0:1b:e1:af:76:2b:08:9e:2d:ad:c2:ca:59:
                    8d:aa:af:0b:b3:25:76:43:2b:22:9d:57:ea:dd:fd:
                    94:8f:26:bb:a6:de:33:e3:a9:a0:a0:7f:d4:00:e2:
                    30:7a:83:e4:40:87:87:4f:94:f7:11:c1:fd:8e:2a:
                    cd:6a:db:d9:cb:eb:8e:2b:7a:6e:63:80:84:9d:a2:
                    f9:7d:4e:08:63:d3:d5:50:ea:9b:55:5b:3e:ca:65:
                    df:ae:46:90:d1:16:ed:5d:5d:76:6b:88:83:dc:2f:
                    5e:67:29:47:37:50:33:43:b2:c8:69:7d:15:20:2b:
                    1e:d3:f6:1f:c0:47:1a:a9:fc:59:fa:08:11:d6:5b:
                    fc:c8:ed:d1:44:45:d9:b8:01:30:bf:de:f0:ef:85:
                    0f:a2:7c:7b:ee:8c:b6:4f:6f:70:db:d5:3d:7c:6e:
                    2c:92:0a:e9:6a:f9:3e:a0:a3:b2:6e:3d:33:b5:ab:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:4D:A8:96:22:A6:CD:94:95:7D:ED:1A:1C:9A:C9:4B:78:83:49
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:db:f6:2b:69:47:6b:51:76:a2:f1:ec:1d:9e:fd:f8:e7:06:
         ca:2b:25:bb:af:71:61:a9:16:df:6c:77:7b:69:d9:5a:b8:86:
         60:d9:9f:3f:6a:cc:bb:c3:08:94:18:c3:d5:b8:bf:4e:5c:2b:
         75:ca:79:7f:c2:35:ca:4f:09:94:68:9f:7e:58:9d:75:bb:a1:
         77:da:5e:90:2e:22:70:60:0f:9b:f9:88:ff:1d:ac:ea:34:4a:
         b5:af:5a:77:7c:36:4a:f1:52:18:c1:ce:37:cb:12:5b:62:6e:
         5e:0f:c5:c2:29:97:a2:17:04:4a:f5:9c:84:3c:a4:f7:bd:87:
         54:b4:bb:ab:20:53:25:e0:c9:10:7d:23:39:5a:db:d1:c8:a7:
         f3:7f:f8:0b:ed:a7:4f:b5:85:99:20:8d:d2:f4:aa:b5:bc:f6:
         f1:4e:a3:46:56:ed:17:3c:5c:94:ce:81:bc:ce:46:3c:bd:a4:
         ee:91:8f:c7:04:0b:8d:5a:f1:fd:fa:66:cb:cd:06:ab:bb:48:
         79:c5:2e:13:e0:33:56:4d:74:3f:d6:28:68:53:51:60:4b:76:
         74:fd:33:f8:c5:b3:d5:47:27:47:cd:5a:b3:d4:ea:8e:5c:f0:
         45:4d:f5:ad:de:ff:7b:10:f5:23:c8:29:dc:33:f0:4f:ca:01:
         20:1f:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:50:48 2025 by rpki-client