Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          iEIiR1mNI39iyuEDUbBA4aomC2WcNTL1w7AO/ap8e38=
Subject key identifier:   C4:10:91:D9:F3:20:E6:12:C8:87:0F:76:B4:7E:E1:A8:78:3D:B4:BC
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       55C21F4986A6A9A188CA88D6313129BF043078B5
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:11 +0000
ROA not before:           Fri 31 May 2024 23:20:11 +0000
ROA not after:            Fri 30 May 2025 23:25:11 +0000
asID:                     61573
IP address blocks:        2804:25e4:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c2:1f:49:86:a6:a9:a1:88:ca:88:d6:31:31:29:bf:04:30:78:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:11 2024 GMT
            Not After : May 30 23:25:11 2025 GMT
        Subject: CN=C41091D9F320E612C8870F76B47EE1A8783DB4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:f6:fb:46:f8:f1:a3:50:21:0c:4a:6a:fe:
                    2b:fe:f8:3f:45:06:99:e5:39:85:12:ed:a4:c2:e9:
                    b7:0e:44:bf:9a:6e:7c:47:bd:ca:6f:e0:f2:8a:1c:
                    dd:5e:1e:92:96:fc:18:eb:9c:3a:7c:85:30:e2:a5:
                    b8:68:15:f6:f2:2f:a0:d6:ac:a0:0e:91:b4:5d:d8:
                    9c:bf:37:f1:70:9f:77:a0:6a:09:0c:15:83:ab:ca:
                    99:09:68:0a:9f:45:b4:a2:95:19:9d:6e:9d:28:b7:
                    ca:b2:2e:36:11:0b:61:0f:c5:c7:ee:47:79:69:43:
                    e5:c6:03:2c:56:ac:00:2e:e4:81:ff:33:55:fc:47:
                    ab:de:b9:24:74:94:5a:9b:ab:65:8d:14:c3:0b:99:
                    85:88:1e:e3:3c:20:04:77:b1:f1:ff:21:56:1f:13:
                    b0:ab:46:56:ff:95:c3:e1:42:14:69:9e:19:8d:de:
                    ec:b1:57:6d:4e:d9:c2:b2:18:fb:ba:44:b8:c3:10:
                    ad:42:33:b1:ad:39:6d:44:1c:a0:c1:b0:4e:bf:36:
                    dc:63:be:5e:fb:ab:d0:a4:f0:f8:c3:60:e8:09:79:
                    88:74:da:38:76:a5:ba:45:d7:ff:1a:62:23:ff:3a:
                    47:8a:58:49:99:85:ba:e9:2f:dd:d0:1d:de:41:1b:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:91:D9:F3:20:E6:12:C8:87:0F:76:B4:7E:E1:A8:78:3D:B4:BC
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3330303a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:af:f7:90:90:3d:34:fe:54:35:57:e9:c2:cd:87:48:86:
         e2:ff:9f:77:97:06:ca:4b:96:d1:09:7e:a3:79:dc:b6:cf:6f:
         48:40:55:a8:18:1d:12:64:24:ca:43:1a:f4:19:25:b7:b7:8f:
         97:15:21:86:04:ec:7b:0c:bb:ae:e4:50:86:1d:5e:a3:fb:40:
         98:43:8d:58:99:48:bd:67:d7:da:e4:66:b0:1d:61:44:7e:f0:
         9e:ea:8f:1c:e9:3e:24:dd:1e:73:61:71:07:8a:41:da:d0:c3:
         13:b3:f1:ee:95:f0:6c:26:82:b7:d0:4f:79:56:ab:9f:42:8d:
         81:87:6e:58:88:51:86:cc:fd:e4:8f:2a:16:47:f1:87:bd:59:
         0a:e9:7b:d9:89:de:25:a1:67:f0:c8:5a:01:d4:34:e3:39:59:
         14:b2:19:82:6c:fb:29:92:03:8f:3e:c6:8d:6d:71:b2:88:83:
         73:70:00:6b:72:89:f0:c9:74:37:bb:da:ec:9a:47:11:dc:87:
         8f:06:0e:e7:29:99:f9:2c:57:37:89:d6:27:67:3b:86:16:89:
         d8:3a:52:64:2e:d9:88:65:8d:13:c0:3f:28:11:16:47:b7:51:
         a7:d8:0f:9e:cd:71:2a:c3:01:ea:c3:2a:aa:b3:d4:db:e4:72:
         64:ab:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:27:38 2025 by rpki-client