Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          1mkd1TjbCpIZ8n/duK0PYnkL+QtVo+jRb7JtEiUsfVI=
Subject key identifier:   70:6C:CA:B3:FF:B1:37:76:2E:A2:63:38:76:F1:18:89:28:03:36:30
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       5AAF541A7E8445991ABC3C505F832BCA904AFF76
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:21:00 +0000
ROA not before:           Sat 03 May 2025 00:16:00 +0000
ROA not after:            Sat 02 May 2026 00:21:00 +0000
asID:                     61573
IP address blocks:        2804:25e4:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 15:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:af:54:1a:7e:84:45:99:1a:bc:3c:50:5f:83:2b:ca:90:4a:ff:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:16:00 2025 GMT
            Not After : May  2 00:21:00 2026 GMT
        Subject: CN=706CCAB3FFB137762EA2633876F1188928033630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:fd:c1:0a:9f:62:4f:f2:8f:d6:86:43:35:
                    cb:7a:41:98:7c:79:ca:74:d8:74:8e:cd:12:7a:f8:
                    d3:cb:3d:0b:14:f8:b5:ae:af:b8:cc:6c:5d:c9:73:
                    aa:31:52:59:a2:76:40:e6:0c:a4:df:72:dd:14:76:
                    53:9e:e0:e5:c2:63:82:8b:05:3d:4e:f4:61:42:77:
                    5a:a8:78:a8:ea:cf:1b:ea:f7:14:1f:e2:3d:b1:39:
                    c1:54:d1:5c:35:df:8e:d8:41:eb:55:66:9d:e0:d5:
                    23:9b:b9:04:f7:9f:86:2a:f9:d5:d3:a0:9b:b4:e6:
                    77:fd:bd:f5:e8:64:22:dc:11:f6:db:44:a1:7b:41:
                    f9:21:66:47:eb:4e:a5:52:13:44:51:13:7b:94:b2:
                    56:6f:cb:8e:50:d8:73:e9:e6:2c:e8:43:c3:cd:de:
                    0d:08:c0:cb:37:9d:18:ed:08:74:08:2b:1b:5b:75:
                    31:87:11:56:df:cb:ac:6e:ad:7c:2c:f0:9b:c9:6d:
                    ff:e4:a2:2b:66:c5:02:b2:c2:59:80:f9:a5:3e:6e:
                    48:c8:99:2a:38:2f:20:4a:6d:8b:af:0c:53:9d:46:
                    73:c2:8e:30:67:1f:63:a7:37:af:c2:c8:54:93:86:
                    34:39:96:51:ff:3d:4f:51:01:c2:1c:9c:82:31:05:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6C:CA:B3:FF:B1:37:76:2E:A2:63:38:76:F1:18:89:28:03:36:30
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:a4:d0:cd:c1:12:95:43:49:2a:73:f7:e0:42:9d:0d:77:
         3a:bb:e6:88:ee:8b:02:27:6f:a1:4f:8f:3b:9e:ff:93:0e:50:
         f5:6a:e1:5a:06:47:dc:d0:cd:3c:b4:9d:8b:5a:9b:9b:0e:33:
         ef:14:e3:d7:35:6a:31:49:69:55:dc:43:0d:45:b5:5f:71:bf:
         09:4d:45:2c:32:97:fc:4d:83:1e:dd:b9:cd:7d:69:49:36:63:
         af:5b:02:ac:cd:57:51:80:13:50:a4:37:7b:b3:bd:10:db:41:
         8e:be:ce:be:1b:70:0e:c7:95:0f:16:39:71:e1:8f:0d:93:de:
         12:00:cd:d1:2c:ed:fa:3a:5c:00:6a:0d:02:56:9e:15:fc:da:
         e7:d5:f2:3a:e0:7b:b3:b8:8a:5c:9a:a8:14:46:29:d5:52:a9:
         21:63:c2:3b:d4:60:d6:cb:3b:46:b2:38:92:01:f4:66:0d:26:
         98:08:a6:48:69:d4:82:10:52:ba:d8:81:03:e4:20:fb:9d:71:
         a0:83:27:5c:65:49:8b:67:ba:85:a9:a2:b7:db:77:be:ff:ce:
         e9:f0:5a:27:e6:ad:ae:6b:b4:ad:b6:f9:16:c2:17:f4:a4:4f:
         b8:b8:cb:11:78:59:36:28:a6:be:8f:30:63:a7:d4:c8:bf:c9:
         0d:a3:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:32:30 2025 by rpki-client