Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          PJpkmbx7QbVGp0+2gq3l5LYbZgAblPRnAFTeKvWkN3Y=
Subject key identifier:   82:BF:F5:3C:A8:B8:F7:03:3E:E9:C3:F8:9D:57:6D:D2:55:F2:2E:61
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       479B4A10AFD5834B980ADD0004B7E3B4E2720881
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:55 +0000
ROA not before:           Sat 03 May 2025 00:15:55 +0000
ROA not after:            Sat 02 May 2026 00:20:55 +0000
asID:                     61573
IP address blocks:        2804:25e4:709::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 01:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9b:4a:10:af:d5:83:4b:98:0a:dd:00:04:b7:e3:b4:e2:72:08:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:55 2025 GMT
            Not After : May  2 00:20:55 2026 GMT
        Subject: CN=82BFF53CA8B8F7033EE9C3F89D576DD255F22E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:34:3e:1c:7b:ad:e5:10:d1:52:9a:8e:e5:
                    f8:48:40:73:68:ac:ab:a6:e8:a6:59:f0:a7:f7:bd:
                    31:43:a2:fb:d0:42:78:a5:5f:f8:c6:3f:c1:93:b9:
                    77:e2:ea:56:74:0f:f3:81:01:a8:fe:c2:42:80:3f:
                    01:2b:eb:a3:e2:7e:5c:d7:20:cd:dd:6a:83:b7:fa:
                    f1:f6:f8:59:97:7e:39:95:a0:8b:02:4d:9d:c7:e6:
                    71:78:e4:01:d5:29:50:d7:72:f6:66:bb:ee:b4:3f:
                    fb:d4:6a:5f:93:8b:19:01:33:7f:62:0d:f9:d8:3d:
                    93:df:16:e9:79:49:79:39:5f:c0:2d:f7:04:36:70:
                    45:ad:7b:cf:bd:f9:8b:82:a4:9c:b3:d6:1c:ba:4b:
                    fb:28:f1:5a:e8:d3:f5:19:96:73:a1:8f:16:9b:0e:
                    65:1b:b8:5a:6e:cd:4f:ad:ca:39:86:68:22:0c:98:
                    da:e6:51:95:87:c9:77:80:39:37:f9:c8:3e:b9:d0:
                    9c:e9:4a:81:f4:40:0e:40:40:4e:31:24:c3:a7:18:
                    b7:e5:f2:52:b1:2e:6f:5e:5c:fa:de:89:c0:21:b0:
                    1e:1c:0f:dd:f1:2b:e4:f0:41:b4:54:22:89:2d:1d:
                    a5:82:5c:19:64:36:fb:9f:a5:03:d3:10:18:c5:8a:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BF:F5:3C:A8:B8:F7:03:3E:E9:C3:F8:9D:57:6D:D2:55:F2:2E:61
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:709::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:ea:af:74:1c:86:7b:31:55:ad:bb:f2:37:31:43:e6:7e:30:
         c6:1e:99:33:eb:a4:24:82:3c:94:dc:c1:3b:14:4d:b4:a0:13:
         42:95:c2:a9:88:7d:a8:11:29:3a:a4:ac:71:14:ee:7e:8d:92:
         be:60:47:d0:a1:a4:07:ae:79:4e:70:37:03:05:70:b3:ed:24:
         49:72:be:9c:11:21:8b:ca:dd:62:64:84:28:59:51:0d:9e:64:
         77:ed:bb:b2:07:a8:5a:ce:8b:19:3c:1d:7d:d5:cf:b1:21:9e:
         30:a9:7a:7b:2c:e1:5d:c4:95:3f:93:c6:dd:24:49:e7:f7:a9:
         99:93:3c:ae:8e:30:3c:41:1c:ab:e3:f5:35:e6:fb:c7:d6:a4:
         de:4b:71:d2:8f:f8:9d:8f:40:2d:9b:f4:0e:82:d3:f4:75:96:
         b9:a0:99:d4:3b:a4:2a:e1:0d:03:fb:d7:02:60:71:58:3a:78:
         62:6f:5a:ce:92:7d:18:30:02:e9:27:07:64:5c:f3:58:b0:ee:
         a6:d7:45:3a:e7:2a:39:6b:a2:8c:de:16:94:80:e2:1d:6c:12:
         5f:10:bf:0c:ad:7c:25:b3:06:e2:d7:a0:3b:b0:7a:df:af:00:
         6f:af:18:4d:0e:f6:d5:e7:a4:52:1f:ee:0d:6a:88:26:83:f4:
         d1:44:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:52:53 2025 by rpki-client