Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          8v1JWjeHz+OyPAEJgtRlSS8AokH71HALOHq2SJyccHQ=
Subject key identifier:   B9:B9:25:FA:39:BE:C8:1C:15:AC:47:92:30:12:9E:6F:0E:59:52:30
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       3B20E05BDBDC88AA892D16A0720A239CD14CE203
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:58 +0000
ROA not before:           Sat 03 May 2025 00:15:58 +0000
ROA not after:            Sat 02 May 2026 00:20:58 +0000
asID:                     61573
IP address blocks:        2804:25e4:706::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 01:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:20:e0:5b:db:dc:88:aa:89:2d:16:a0:72:0a:23:9c:d1:4c:e2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:58 2025 GMT
            Not After : May  2 00:20:58 2026 GMT
        Subject: CN=B9B925FA39BEC81C15AC479230129E6F0E595230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:2f:03:a0:ea:21:7d:70:52:4f:68:95:91:
                    86:0b:12:ea:96:d4:23:00:3d:e1:ff:c4:49:c1:11:
                    6f:67:d5:ac:87:39:a4:8a:be:38:02:28:aa:b2:f1:
                    4f:bc:88:23:0c:cc:23:91:03:ac:f4:94:93:e8:3d:
                    84:b6:6c:38:ba:be:ee:2a:48:3c:36:03:b7:e1:99:
                    fb:41:9d:e4:36:a8:e2:f3:41:f0:b3:12:1f:81:33:
                    44:81:aa:39:aa:2c:b1:20:cc:4e:61:de:50:43:ed:
                    fa:22:df:c1:3f:ca:49:3f:72:f1:ea:08:ed:ef:d5:
                    3c:5e:4e:d4:78:fe:2b:79:93:13:35:83:d5:f0:e3:
                    48:32:ec:84:f2:78:6d:d9:28:07:03:35:d3:88:ab:
                    d6:c5:f7:f3:4d:7a:8d:6f:3e:47:bf:51:b4:82:16:
                    4b:39:de:52:44:2b:54:8c:db:e8:9c:16:da:8a:66:
                    2a:08:1b:2b:ad:78:f6:b0:75:20:cf:19:3f:82:47:
                    e0:1f:14:17:e4:df:57:9a:de:8d:5e:19:a9:9c:32:
                    37:e0:9f:42:d3:fc:b2:c2:a8:bf:0b:c7:c4:33:f2:
                    12:09:3b:5d:61:e5:90:5a:f4:2f:86:5f:39:f7:5b:
                    30:8b:ec:af:f4:41:da:62:b1:1a:f2:2a:00:29:e1:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B9:25:FA:39:BE:C8:1C:15:AC:47:92:30:12:9E:6F:0E:59:52:30
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:706::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:78:b8:3f:bc:61:a1:1d:12:9a:a5:f8:02:e8:44:da:04:8c:
         8c:cc:40:15:50:af:04:92:65:64:37:89:6d:f4:d0:ae:08:95:
         8c:90:13:33:8b:bc:fe:b5:b6:c5:2d:a6:30:37:ea:09:09:23:
         2f:8e:06:67:ec:38:19:f8:b1:13:14:e5:f8:0d:61:18:0e:dd:
         db:f5:c6:dd:47:86:03:70:5b:14:ed:8d:a0:92:ce:b9:8e:1f:
         69:63:3e:26:eb:71:ac:39:53:89:ea:b8:d0:c5:3b:b5:bd:d1:
         ed:67:48:54:5b:bd:ce:6a:73:8c:5d:e5:a4:eb:b6:a3:62:8c:
         a5:26:df:be:30:18:e5:36:46:bb:42:58:44:58:7b:df:e3:32:
         af:c4:ef:d2:ad:5d:f3:0a:70:bc:9a:04:a3:aa:04:8e:fa:f7:
         b6:79:b3:29:f8:64:25:0c:53:9d:27:bf:43:05:7c:f1:78:13:
         a0:b9:57:ef:81:7d:b2:20:50:fc:8b:9d:e5:26:10:27:a1:61:
         f1:fa:b5:2f:e7:5c:66:f9:18:0c:3a:2d:fb:dd:61:52:62:38:
         2c:f5:9b:1f:42:26:73:f9:67:80:73:9f:2f:e7:ce:56:d5:26:
         fd:21:94:0c:39:98:26:be:fb:58:ae:48:c6:cf:c8:21:3e:0a:
         66:c8:09:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUOyDgW9vciKqJLRagcgojnNFM4gMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNTA1MDMwMDE1NThaFw0yNjA1MDIwMDIwNThaMDMxMTAvBgNV
BAMTKEI5QjkyNUZBMzlCRUM4MUMxNUFDNDc5MjMwMTI5RTZGMEU1OTUyMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtS8DoOohfXBST2iVkYYLEuqW
1CMAPeH/xEnBEW9n1ayHOaSKvjgCKKqy8U+8iCMMzCORA6z0lJPoPYS2bDi6vu4q
SDw2A7fhmftBneQ2qOLzQfCzEh+BM0SBqjmqLLEgzE5h3lBD7foi38E/ykk/cvHq
CO3v1TxeTtR4/it5kxM1g9Xw40gy7ITyeG3ZKAcDNdOIq9bF9/NNeo1vPke/UbSC
Fks53lJEK1SM2+icFtqKZioIGyutePawdSDPGT+CR+AfFBfk31ea3o1eGamcMjfg
n0LT/LLCqL8Lx8Qz8hIJO11h5ZBa9C+GXzn3WzCL7K/0QdpisRryKgAp4a8TAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUubkl+jm+yBwVrEeSMBKebw5ZUjAwHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzIzODMwMzQzYTMyMzU2NTM0M2EzNzMwMzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNjMxMzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQl5AcGMA0GCSqGSIb3DQEBCwUAA4IB
AQBBeLg/vGGhHRKapfgC6ETaBIyMzEAVUK8EkmVkN4lt9NCuCJWMkBMzi7z+tbbF
LaYwN+oJCSMvjgZn7DgZ+LETFOX4DWEYDt3b9cbdR4YDcFsU7Y2gks65jh9pYz4m
63GsOVOJ6rjQxTu1vdHtZ0hUW73OanOMXeWk67ajYoylJt++MBjlNka7QlhEWHvf
4zKvxO/SrV3zCnC8mgSjqgSO+ve2ebMp+GQlDFOdJ79DBXzxeBOguVfvgX2yIFD8
i53lJhAnoWHx+rUv51xm+RgMOi373WFSYjgs9ZsfQiZz+WeAc58v585W1Sb9IZQM
OZgmvvtYrkjGz8ghPgpmyAno
-----END CERTIFICATE-----
Generated at Thu May 15 06:46:38 2025 by rpki-client