Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          1R17kVlV1VZ+MXt52T50Jb5fiNUu4RWDflQkRP1jSUc=
Subject key identifier:   49:D3:B0:DC:FB:DC:F1:7B:C9:6C:91:C0:02:22:0A:4F:C1:F8:6C:3F
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       73D0183B9DBE306C0EEB3BE1AA905EB04F44919C
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:55 +0000
ROA not before:           Sat 03 May 2025 00:15:55 +0000
ROA not after:            Sat 02 May 2026 00:20:55 +0000
asID:                     61573
IP address blocks:        2804:25e4:70a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 08:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:18:3b:9d:be:30:6c:0e:eb:3b:e1:aa:90:5e:b0:4f:44:91:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:55 2025 GMT
            Not After : May  2 00:20:55 2026 GMT
        Subject: CN=49D3B0DCFBDCF17BC96C91C002220A4FC1F86C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:73:98:52:97:b5:a7:2c:92:b0:00:16:ac:
                    c4:0b:68:cb:7e:a0:bf:d7:56:f6:9b:89:ba:b3:20:
                    e4:16:b0:ab:03:d1:80:a1:76:0d:8e:e8:b1:f9:2e:
                    47:9e:48:f4:b5:ab:f8:99:a0:2d:23:09:4b:f7:a8:
                    62:9a:2b:86:b5:61:7e:e4:e4:31:89:a0:78:a3:84:
                    54:8e:2a:7a:f5:25:f5:01:e4:90:a2:35:e6:3b:af:
                    9b:df:72:c1:e0:66:b7:2e:b4:fc:ce:36:84:c3:ea:
                    d3:12:64:df:62:52:b2:77:c3:fe:69:be:65:16:98:
                    ea:20:8b:21:2f:97:2a:cd:92:e9:66:9b:da:b0:a3:
                    42:39:17:93:bc:33:9f:37:f0:48:64:25:33:68:36:
                    7f:5e:2d:e0:f2:94:a2:ec:cb:56:e6:5d:14:33:fe:
                    02:5c:68:cf:69:c0:30:e4:61:39:1e:d1:54:32:ef:
                    d6:3d:cd:af:9d:6b:93:8a:1c:69:5c:d7:18:ee:1c:
                    26:83:a4:2d:04:4f:bb:19:66:ba:6c:d4:4d:b7:5f:
                    17:ff:b6:37:5e:58:72:5d:cf:ce:87:de:86:b0:f5:
                    1e:53:30:16:9f:60:75:1e:8a:9d:f2:3b:4f:5f:9f:
                    de:ed:e2:9d:d3:96:a8:86:bf:53:b3:3d:21:f5:8e:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D3:B0:DC:FB:DC:F1:7B:C9:6C:91:C0:02:22:0A:4F:C1:F8:6C:3F
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:75:f5:f6:7d:2b:9b:22:5d:4f:80:af:e8:ae:49:0a:8e:
         24:e3:d4:e9:c1:8a:c5:d2:1a:a6:38:6e:48:fb:0c:d7:ce:fc:
         76:1e:a1:0f:fe:12:24:da:c5:2a:3a:4e:ce:4e:e2:eb:df:70:
         87:b8:29:ee:fe:10:29:71:69:77:c5:a8:2b:a7:7f:4a:1b:a9:
         89:48:22:34:9f:eb:ff:d3:a3:95:fc:d1:e9:2d:6a:b3:54:37:
         c5:ea:2e:07:46:81:20:80:92:37:40:7c:a2:fc:c1:b5:2e:94:
         32:36:d0:46:00:f0:be:a0:c5:5e:a7:15:d2:9b:b2:c3:5b:19:
         b1:71:7a:2a:2e:48:25:5c:69:b6:b1:cc:38:41:fd:f6:25:74:
         1c:71:df:c5:75:70:31:7d:6a:c6:f4:47:eb:b1:14:2a:94:c0:
         77:83:38:97:e9:eb:db:ed:28:02:8d:ff:30:bf:87:21:b7:23:
         bd:17:34:28:bf:01:43:7b:a8:08:d2:ac:16:73:01:ff:d3:3f:
         7c:c8:c8:34:4e:e2:9d:35:bf:b3:f5:c2:77:a9:87:1c:42:3b:
         0d:d1:d5:3b:7f:7a:61:b8:53:24:33:a2:5e:2f:1c:17:65:e7:
         07:a8:7b:89:69:45:e1:c1:a5:fe:68:46:94:0c:d2:0b:e9:13:
         98:17:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:20:43 2025 by rpki-client