Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730343a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730343a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          XEevyLlMK9ATvPEgu5zE0VCk1oPLupLuL3dTZryO6mU=
Subject key identifier:   C3:52:DE:84:FF:F7:0D:68:0E:F4:F8:93:2A:03:C7:84:83:6C:F0:28
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       584CE77EB7BC84A3DC2589CBE455FC070F262EA1
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730343a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:21:02 +0000
ROA not before:           Sat 03 May 2025 00:16:02 +0000
ROA not after:            Sat 02 May 2026 00:21:02 +0000
asID:                     61573
IP address blocks:        2804:25e4:704::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 08:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4c:e7:7e:b7:bc:84:a3:dc:25:89:cb:e4:55:fc:07:0f:26:2e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:16:02 2025 GMT
            Not After : May  2 00:21:02 2026 GMT
        Subject: CN=C352DE84FFF70D680EF4F8932A03C784836CF028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:d5:d1:60:b4:23:8c:16:aa:50:af:d5:3e:
                    c5:db:52:53:60:de:be:d4:e8:85:ee:b2:d7:33:97:
                    0e:36:61:63:0e:4f:d3:41:cb:17:28:4a:b5:ab:65:
                    83:d2:80:f5:89:fa:f4:71:7b:b3:db:cc:5b:b9:98:
                    ce:46:93:c6:7c:c7:17:b6:83:04:d6:25:b1:ae:3d:
                    6a:02:75:2f:d4:1f:bd:c5:53:d2:36:04:f4:85:c9:
                    8c:b9:6c:bf:d2:ea:50:bd:9a:42:36:e1:16:d4:92:
                    88:7c:02:e1:7a:ef:99:b8:f2:75:64:da:74:06:82:
                    1e:81:43:0b:3b:16:d6:1e:43:a0:e9:4a:28:8c:7a:
                    04:d6:a9:e4:e3:a9:4b:2e:74:4d:e8:a0:63:d8:24:
                    4e:47:f3:b8:63:ba:be:61:78:bb:18:ba:75:fb:a4:
                    4b:60:51:1a:70:f4:83:ac:d4:0d:8d:08:63:05:1e:
                    39:34:40:43:c2:81:bb:9f:f5:5b:9e:8b:ad:81:91:
                    27:ae:dc:0a:34:a2:ab:d3:d2:01:e6:c0:68:b7:0b:
                    36:ff:a8:b8:59:eb:ce:61:9d:e5:5a:9e:81:eb:81:
                    5c:f6:90:a5:4b:aa:4f:cc:31:b2:64:e4:6e:98:d4:
                    fd:5c:c1:0e:d1:c5:15:a7:17:b2:9d:30:c9:b2:39:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:DE:84:FF:F7:0D:68:0E:F4:F8:93:2A:03:C7:84:83:6C:F0:28
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730343a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:704::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:70:60:71:a4:f9:71:89:80:19:45:46:b7:43:b6:5a:bd:2e:
         d8:a9:1b:71:8f:5d:96:70:d8:97:b3:e8:4a:17:1b:1e:88:64:
         af:c2:7e:41:97:3e:14:58:40:c3:e3:4f:4f:cf:9f:f7:87:20:
         76:3d:a6:92:f6:03:c8:a5:e9:78:55:15:4b:b4:ba:15:ae:79:
         b0:fa:05:04:82:42:df:c9:f5:34:dd:95:cc:f4:ce:46:f3:2d:
         77:7a:c8:b9:26:c1:54:5c:93:e1:03:1a:e9:d2:ba:85:3c:58:
         5a:88:3d:fd:f5:0e:34:26:e9:e6:a7:e0:79:d1:2e:e8:eb:1d:
         b7:90:4c:c4:7e:84:c3:ff:a1:80:58:67:51:77:53:51:5e:58:
         ee:a5:c1:90:fd:8f:0f:c2:15:a3:bc:43:8f:b6:84:1e:98:0d:
         f3:fe:e1:64:24:45:ae:bf:a9:75:74:7d:4d:23:2f:fa:e7:dc:
         bb:d6:00:3d:79:c2:50:ec:4a:c9:7f:55:5d:41:b4:3a:96:b3:
         ee:9c:59:17:d7:67:e9:a5:6f:7c:82:6b:df:77:c1:52:3d:de:
         c6:1d:67:40:17:64:af:c7:53:06:91:2f:e0:fe:3c:ff:bd:1a:
         0f:8d:20:07:cc:68:09:77:8f:9e:8f:7a:0a:82:b2:30:32:53:
         55:4b:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:25:35 2025 by rpki-client