Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          9hXFYjdh0ECqGg8MBNdKITvVIiRFVwCylg9hr1J387U=
Subject key identifier:   62:4E:D6:9C:EE:C6:AA:76:6F:8B:43:DC:B3:6B:0A:AA:8B:5C:F2:DB
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       6BEF16FA07D1D7C98C35A4ABF8504ED4352070DE
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:57 +0000
ROA not before:           Sat 03 May 2025 00:15:57 +0000
ROA not after:            Sat 02 May 2026 00:20:57 +0000
asID:                     61573
IP address blocks:        2804:25e4:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 21:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ef:16:fa:07:d1:d7:c9:8c:35:a4:ab:f8:50:4e:d4:35:20:70:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:57 2025 GMT
            Not After : May  2 00:20:57 2026 GMT
        Subject: CN=624ED69CEEC6AA766F8B43DCB36B0AAA8B5CF2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:97:24:b6:b5:ce:cc:c7:f1:d9:ba:08:69:
                    0a:6d:56:a7:09:50:4f:4e:b0:7b:5b:95:5c:6c:32:
                    22:a1:03:81:4c:17:cc:55:61:e7:1c:af:aa:c0:72:
                    bd:04:e3:b8:e3:24:fb:60:db:00:ef:b3:dc:d5:12:
                    90:49:6b:fc:74:c8:f2:f8:ed:23:ba:ee:a7:34:8e:
                    82:0d:3e:5e:65:08:50:dc:42:7a:6c:52:cc:05:f7:
                    02:db:fd:ac:7e:14:d5:13:dc:da:f9:d1:ba:83:fb:
                    82:33:f3:29:c5:ae:6d:94:8c:94:ef:ed:12:c0:b1:
                    a2:f4:7e:45:a0:34:54:5d:87:bb:50:df:44:8f:b8:
                    09:a2:e0:85:81:7c:b1:9d:27:1d:aa:21:d8:59:43:
                    e8:e9:b6:0f:8b:11:ae:fb:b2:c0:8c:4d:50:05:58:
                    81:18:80:bf:58:65:9b:6f:a0:64:30:6e:8f:b0:bb:
                    c3:92:32:d4:af:c7:45:92:f3:ab:34:e2:e5:de:e9:
                    3a:f9:60:10:fe:56:e6:74:c0:32:6f:ee:78:b7:57:
                    91:51:cd:da:00:34:ac:fe:33:f7:6e:dd:d8:e9:ae:
                    cc:0a:bf:ae:a9:bf:40:6d:4c:1a:99:76:a2:dc:00:
                    6f:a5:89:a2:4f:55:c9:06:33:31:27:8b:d3:52:31:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4E:D6:9C:EE:C6:AA:76:6F:8B:43:DC:B3:6B:0A:AA:8B:5C:F2:DB
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3830303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:51:12:74:b0:6b:29:7a:6d:89:da:5b:14:d3:ab:0a:88:b7:
         fa:38:44:10:45:f1:44:e6:d6:7d:91:59:69:57:7a:5b:b1:18:
         9c:78:08:92:e6:d3:2a:30:6a:11:65:1d:13:0b:42:4f:e9:73:
         4b:6a:db:ef:03:96:b8:7a:8a:ed:26:36:b6:35:40:30:1a:9f:
         6e:bf:40:3d:e0:c4:73:50:73:8a:16:02:86:f6:b3:14:05:aa:
         c4:78:cc:37:52:b5:3e:96:c3:19:13:78:11:0c:5c:38:4c:cf:
         18:9b:eb:ca:f9:82:3e:44:f2:fc:10:a4:ea:6f:0c:96:9e:7c:
         a3:a3:7a:e2:87:34:a7:41:27:6e:b4:eb:19:bd:23:c5:49:78:
         eb:6d:01:f5:f7:dd:17:0d:e4:d5:fa:63:96:48:60:88:cd:fe:
         29:b0:c0:23:36:3e:e9:31:dd:79:c0:39:f9:d0:3f:a1:1e:68:
         02:e0:2d:f3:fa:04:29:8d:f5:10:6d:1e:9d:89:ab:6e:c1:bc:
         4c:61:cd:d3:ad:02:73:97:33:72:28:00:5d:60:62:5c:01:1f:
         58:cb:83:1b:f4:eb:73:f6:6f:62:aa:01:02:d7:df:c0:f3:72:
         11:8d:67:ff:71:86:42:66:02:20:55:e5:e5:a6:d4:2f:42:82:
         c0:20:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:25:12 2025 by rpki-client