Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3130303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3130303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          YYusGDwOHLJAPTdDh2MxUZlOPR9AmGtk4tmERcfA6m8=
Subject key identifier:   68:AD:E1:A1:61:BC:7E:E1:68:FC:DA:51:BB:42:3A:A2:74:14:86:CD
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       04156427E53EFEB4BEAC40878001F1FA2A9679B7
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3130303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:10 +0000
ROA not before:           Fri 31 May 2024 23:20:10 +0000
ROA not after:            Fri 30 May 2025 23:25:10 +0000
asID:                     61573
IP address blocks:        2804:25e4:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:15:64:27:e5:3e:fe:b4:be:ac:40:87:80:01:f1:fa:2a:96:79:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:10 2024 GMT
            Not After : May 30 23:25:10 2025 GMT
        Subject: CN=68ADE1A161BC7EE168FCDA51BB423AA2741486CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:65:72:4a:bb:67:ed:4a:ad:1d:66:13:86:
                    14:2c:a2:0d:2f:40:0c:0a:47:66:3f:b2:96:c7:ff:
                    89:a5:6e:aa:65:9e:79:0e:0b:c5:90:fe:b2:59:07:
                    2d:c1:6b:55:1c:88:2d:00:07:f6:97:9e:38:61:59:
                    cf:60:00:63:09:40:94:a6:87:73:16:08:85:c8:df:
                    3e:10:84:8e:0f:62:07:52:89:49:2d:68:1b:0f:11:
                    3a:2b:ef:b9:35:ad:e1:03:11:fe:69:cd:49:b0:e4:
                    b3:ec:7b:f3:97:32:c5:d7:0f:40:d7:37:eb:10:66:
                    72:b4:10:38:c7:ae:57:57:84:96:73:42:21:35:de:
                    28:0e:cb:45:47:51:14:5f:79:94:5e:c5:76:6d:a3:
                    ec:1f:6f:2f:91:40:a3:11:a3:ff:63:9f:f8:f3:9f:
                    ce:eb:07:93:b6:f3:ec:c7:7e:03:57:91:00:9f:40:
                    a1:e6:59:49:9f:a3:b4:7a:53:e5:fe:8f:ab:be:41:
                    df:d5:3a:dc:e6:32:de:27:7b:28:5b:9d:97:75:c6:
                    5a:c4:db:14:90:86:80:ad:f0:ce:96:7a:00:94:08:
                    34:0d:e1:71:d6:b9:85:1c:4c:aa:9d:d1:5f:cf:69:
                    b8:09:06:bd:1a:3d:75:af:a1:e0:c0:56:65:6f:14:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AD:E1:A1:61:BC:7E:E1:68:FC:DA:51:BB:42:3A:A2:74:14:86:CD
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3130303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:53:dc:3b:95:32:4e:f1:3e:4c:52:71:c9:6e:2f:b4:c0:
         8c:60:62:c6:61:af:38:9e:1b:45:cf:40:b2:3d:89:5d:3f:27:
         69:1d:54:aa:13:54:1c:2f:33:fe:04:52:81:23:ab:8e:e4:8b:
         05:fc:34:6a:5f:ad:53:fa:1c:bd:ce:25:33:a6:30:3e:65:07:
         04:00:ad:11:2b:b1:65:33:63:22:b8:df:a7:b6:03:af:85:d9:
         e6:83:c4:46:f2:f5:47:b8:19:8f:69:d4:81:45:2f:8f:c1:6f:
         37:20:a4:92:b6:d6:de:13:e0:90:96:78:42:95:6d:3b:e8:b5:
         74:9a:19:39:d8:a3:d7:d8:fd:15:9c:65:a4:62:ec:f6:14:ac:
         6a:38:ac:bf:f7:92:8a:99:f9:09:ba:20:e6:da:83:e1:dd:7f:
         ed:14:b3:87:17:77:2c:74:b7:13:7c:5a:e7:2c:6f:84:87:ae:
         5e:12:6b:0f:73:eb:95:29:b3:3a:16:be:a0:9a:de:03:b1:46:
         d0:f5:a1:a1:02:7c:81:cd:79:34:a3:34:03:8d:08:b8:f2:d3:
         89:b7:d8:5a:62:a9:78:f2:f8:61:2f:4d:fd:9c:d8:e5:d5:a3:
         cb:38:46:9b:0c:41:3a:fd:26:50:9c:78:62:c4:87:56:7e:fd:
         38:70:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org