Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730303a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          tcs+dajLAr9EPy8MJ7Jp34tJsvYn7GRZsdxpoKZ9MO0=
Subject key identifier:   62:AA:65:E5:9D:BF:0E:4C:43:C0:EA:22:15:BD:41:CD:C8:CA:7B:57
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       072CC7EC7C1BF122D7A7ACE8FA7629578E2C5BDB
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:21:01 +0000
ROA not before:           Sat 03 May 2025 00:16:01 +0000
ROA not after:            Sat 02 May 2026 00:21:01 +0000
asID:                     61573
IP address blocks:        2804:25e4:700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 04:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2c:c7:ec:7c:1b:f1:22:d7:a7:ac:e8:fa:76:29:57:8e:2c:5b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:16:01 2025 GMT
            Not After : May  2 00:21:01 2026 GMT
        Subject: CN=62AA65E59DBF0E4C43C0EA2215BD41CDC8CA7B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:c2:d9:87:1b:f5:5d:6c:2d:31:82:b4:7d:
                    8a:58:ec:17:f4:6f:3d:a3:ff:aa:ff:7c:72:7a:4b:
                    e4:0c:51:59:ab:d0:94:73:6f:ff:4f:f7:44:d4:7c:
                    3c:2d:56:08:0f:fa:9d:ed:09:2c:6f:49:9b:50:6a:
                    05:81:89:ce:46:81:1f:d0:96:af:37:7d:92:3f:2b:
                    d5:00:d4:a7:ce:76:96:73:2a:83:05:2a:c0:20:91:
                    71:40:93:09:4f:2e:6d:2a:4f:48:2a:c5:43:fc:6e:
                    8d:58:55:eb:3b:03:25:46:04:63:91:9e:87:42:90:
                    34:ff:9e:53:df:92:d8:9d:64:14:78:cb:e5:04:33:
                    4b:8a:d6:24:8b:bc:01:fb:fb:c3:4f:e1:b7:b3:c5:
                    d7:e1:a9:df:57:28:8d:95:a8:8c:54:8d:44:c2:27:
                    2b:89:b8:d7:cc:c2:f6:38:26:9d:c0:20:14:50:85:
                    d0:a4:e9:dc:ef:ed:fe:c2:94:44:fb:ea:90:8f:eb:
                    87:0c:65:52:6b:92:2d:53:bc:ed:06:79:65:f5:ad:
                    80:74:10:28:9a:f3:03:5e:a4:76:5b:00:e2:dc:01:
                    b7:b5:8f:a9:03:2b:b1:cc:69:11:cf:f7:a1:1a:a4:
                    3b:b5:f6:2d:2e:85:74:03:9f:e0:38:fa:e9:91:89:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AA:65:E5:9D:BF:0E:4C:43:C0:EA:22:15:BD:41:CD:C8:CA:7B:57
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:9c:84:3b:ab:35:36:6e:98:ca:27:f3:70:9e:6f:9f:cc:
         cd:84:c0:92:f3:ca:1e:c6:fd:41:d3:de:ce:75:e7:e0:89:a8:
         ae:ea:4b:c4:de:45:c0:a9:44:bb:50:21:0f:1a:3f:b4:b8:43:
         28:54:b3:65:b3:6e:16:ac:34:23:af:ca:5c:14:a4:47:e7:8f:
         9c:1f:92:30:5a:b4:64:0c:87:6f:d4:1b:55:23:60:43:94:69:
         e1:32:eb:4a:f9:ae:10:b4:2a:df:ee:e6:2b:d5:07:25:2c:c5:
         2a:60:4f:5f:1d:75:be:f8:d7:62:e4:a7:ca:64:23:42:f1:3b:
         01:5d:ee:6d:ef:a7:9c:4d:ff:a1:86:47:fd:c9:f4:3b:d1:64:
         42:5b:cc:0d:58:e8:1c:d0:f6:e7:4f:35:d5:50:b7:36:8b:0f:
         f1:cd:d0:27:3a:1b:eb:25:ba:ab:bf:6a:16:b0:6a:f0:b5:0e:
         58:1b:be:f1:5c:63:65:6f:3f:c9:78:70:a4:d0:90:54:15:c1:
         cb:df:c7:eb:5b:75:fb:6e:dd:51:71:12:a3:33:19:32:68:c3:
         b0:41:db:94:c5:ec:61:92:f4:f3:b9:b6:fa:13:f7:39:09:99:
         6c:17:6c:c3:66:88:5b:ee:85:c7:0a:c4:ef:69:fd:13:64:ff:
         b1:23:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:30:50 2025 by rpki-client