Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730333a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730333a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          uVbS0udtT8GPVzojV+v23Pjakq13GmfftOZas6mzoi8=
Subject key identifier:   9C:5A:59:F3:8B:9D:77:5A:FD:34:7C:50:21:2B:78:87:C9:2C:32:0F
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       722AE93752B49B31F9D8EC9D5B728CF614ADA16D
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730333a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:58 +0000
ROA not before:           Sat 03 May 2025 00:15:58 +0000
ROA not after:            Sat 02 May 2026 00:20:58 +0000
asID:                     61573
IP address blocks:        2804:25e4:703::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 08:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2a:e9:37:52:b4:9b:31:f9:d8:ec:9d:5b:72:8c:f6:14:ad:a1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:58 2025 GMT
            Not After : May  2 00:20:58 2026 GMT
        Subject: CN=9C5A59F38B9D775AFD347C50212B7887C92C320F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:bd:b4:9f:2f:00:2d:c3:6a:46:bf:49:29:
                    e5:5b:4f:19:c5:76:a3:08:09:67:97:a8:1f:70:83:
                    ee:96:9a:ea:51:25:63:f8:ce:1c:8c:1a:37:b6:16:
                    3d:31:9e:84:e8:63:a2:cc:a8:d2:9d:f1:d1:cc:a0:
                    3a:d3:43:86:fd:d3:e5:0b:e5:97:4c:78:3f:2c:da:
                    8d:dc:b9:e7:cf:9c:b7:af:61:69:24:7e:17:d3:43:
                    70:3a:79:f4:9f:56:72:f5:62:33:8a:d3:83:82:29:
                    21:89:9d:28:c0:22:7c:da:8a:99:fa:f5:b7:fb:5c:
                    ec:ea:62:9d:f9:ee:2e:fa:2c:2b:a1:14:fd:95:aa:
                    e6:2a:6e:9a:6c:ec:78:79:ea:85:01:99:c4:3e:c9:
                    5c:93:e8:6e:24:5d:0f:cf:95:d1:c7:b8:55:a9:9f:
                    4d:58:6c:2e:03:96:7a:51:d0:8c:26:4e:9c:6f:22:
                    13:66:b8:7d:14:f7:b0:45:f7:00:2b:43:72:31:03:
                    f3:5b:05:b2:ca:bc:14:a8:c7:d7:86:d0:8d:60:97:
                    70:4f:aa:2c:6f:52:ec:ba:8a:d6:0f:35:b0:7d:f3:
                    f8:d4:ac:3d:c7:7e:a8:d7:a2:da:13:df:3a:37:2d:
                    08:4e:a9:e7:07:d1:c1:2f:e2:8a:8a:1c:69:93:7a:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5A:59:F3:8B:9D:77:5A:FD:34:7C:50:21:2B:78:87:C9:2C:32:0F
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730333a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:703::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:11:23:f5:e5:b4:fc:69:4f:03:b7:0f:e9:ff:f1:98:14:
         06:f9:24:5f:08:c4:89:42:6b:8c:14:8a:a0:57:17:9b:34:65:
         98:c1:95:75:d2:39:e2:4e:f2:0b:bc:ba:eb:02:b9:dc:2e:6e:
         33:77:73:7e:2c:f8:a4:ec:cc:16:ab:91:de:40:66:98:03:b1:
         c3:2a:79:cc:9e:c3:cc:6c:00:d7:98:fa:70:ed:49:57:80:43:
         99:30:42:3c:8f:51:0d:de:dc:1e:97:18:63:a3:01:5d:3c:a9:
         36:e8:dc:56:01:76:4b:8e:40:e1:ad:5a:55:36:1f:df:2a:ba:
         d8:35:7f:c6:c4:8e:7f:f2:6b:fb:0b:90:c2:01:63:8b:7d:dd:
         e1:30:7e:8e:67:14:6e:ad:4f:9f:46:c5:c9:71:0c:ac:10:c8:
         a7:5e:d5:9a:e8:d8:7a:73:74:9f:7c:62:39:2e:be:6e:4d:3b:
         68:c6:8f:4f:af:4b:50:a8:53:02:2b:9b:c9:5b:a8:21:f6:a7:
         74:22:9b:43:1f:24:61:ce:c2:e1:86:ad:a0:71:f8:2a:1a:4e:
         41:49:82:64:19:98:55:9e:5e:cf:7f:b3:21:67:0f:e2:c3:fb:
         63:91:84:97:57:4c:20:be:bc:51:4a:d5:d5:8c:ae:4c:77:39:
         fe:b8:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:41:47 2025 by rpki-client