Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3530303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3530303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          Hs4a4LR0gYK19wtmkwTU8upzhE/S6ePtH+QMbVLZ2tA=
Subject key identifier:   FE:CB:15:49:51:E7:81:62:D7:7C:74:2E:E8:83:4C:09:B7:76:93:CA
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       133B228659434BCC3471E8969E5FE384CC3017B8
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3530303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:11 +0000
ROA not before:           Fri 31 May 2024 23:20:11 +0000
ROA not after:            Fri 30 May 2025 23:25:11 +0000
asID:                     61573
IP address blocks:        2804:25e4:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3b:22:86:59:43:4b:cc:34:71:e8:96:9e:5f:e3:84:cc:30:17:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:11 2024 GMT
            Not After : May 30 23:25:11 2025 GMT
        Subject: CN=FECB154951E78162D77C742EE8834C09B77693CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:99:a2:2a:41:5f:1d:6f:c1:28:99:5a:f6:
                    cb:60:f9:04:a0:2b:bc:ae:f4:f7:06:8e:aa:d1:0a:
                    73:25:d1:d1:e2:7b:9a:56:1e:ba:c1:2e:8a:55:56:
                    38:ff:50:c8:57:65:ab:f5:60:c9:78:04:1e:f5:4f:
                    0d:5e:3f:f2:45:af:93:af:4b:fa:11:3c:f1:a7:57:
                    6d:27:1f:26:0c:e1:86:8c:bc:ad:d7:20:30:f1:ca:
                    7f:49:4a:21:7f:e6:58:8b:69:de:2e:ea:f4:99:7b:
                    1e:ee:82:31:99:65:39:2b:db:4e:37:5f:15:57:fd:
                    f5:c9:db:39:b5:77:90:38:d3:d2:00:b7:33:81:79:
                    1e:82:51:8c:f9:67:93:b8:42:c8:9e:07:1a:92:e0:
                    44:7b:90:d5:e9:00:49:ce:5d:d2:c5:df:5d:5f:47:
                    f4:84:51:c6:6c:52:ee:ad:fb:0a:61:23:07:ae:cc:
                    9a:6c:b8:6c:31:55:89:72:67:da:74:ed:0e:6f:dc:
                    29:b7:5d:86:10:20:d4:5c:55:d2:95:f2:af:72:1d:
                    06:29:a5:b0:f4:62:28:eb:70:d7:6d:4b:ed:b9:79:
                    e4:90:9f:d4:b3:88:2d:d1:f4:80:b7:93:ef:a5:a0:
                    f3:6e:86:a5:12:ca:83:07:01:72:db:f1:d8:a7:38:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CB:15:49:51:E7:81:62:D7:7C:74:2E:E8:83:4C:09:B7:76:93:CA
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3530303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:ce:8e:c6:82:f7:42:73:c7:44:f6:8d:a0:96:16:b9:5c:45:
         a1:cd:12:a9:d6:f9:4a:ca:3b:eb:c2:5c:5c:5e:69:09:d3:b4:
         9b:5a:58:cc:34:0a:2d:a7:68:4d:2f:2a:50:af:ae:bd:cd:fc:
         e0:66:2b:cc:ab:3c:16:ee:42:f9:eb:c7:f2:08:39:60:81:03:
         b9:ce:57:c2:e2:c6:36:c8:f0:3c:a0:12:68:8f:7b:e3:e5:a0:
         a2:a8:e9:8e:fd:5f:41:26:4f:2a:8f:3e:2e:a7:93:2f:70:98:
         3d:e0:1e:6e:4d:01:a4:ba:ec:7f:62:6a:33:cd:ad:7f:58:c3:
         b4:d3:9b:c6:6a:c6:d4:9f:64:32:d3:b2:87:68:97:26:36:b7:
         57:76:b1:c8:c2:a3:17:44:e1:bd:ad:d4:63:42:88:2b:55:d4:
         28:f5:47:fa:e0:96:12:68:ff:d2:a5:38:22:b0:9d:a5:57:3e:
         de:37:5e:e8:e8:c7:cf:d7:8f:e8:29:63:cd:22:6d:25:fe:cc:
         81:85:af:8d:ef:0f:de:05:5b:d9:57:a1:56:38:6f:13:ab:94:
         87:59:b1:cb:4b:f3:2e:36:43:84:0d:c3:fa:58:9e:ab:7c:aa:
         13:10:98:d4:4b:af:10:ac:b2:13:84:3b:21:41:80:7a:54:82:
         05:8f:7c:f3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUEzsihllDS8w0ceiWnl/jhMwwF7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNDA1MzEyMzIwMTFaFw0yNTA1MzAyMzI1MTFaMDMxMTAvBgNV
BAMTKEZFQ0IxNTQ5NTFFNzgxNjJENzdDNzQyRUU4ODM0QzA5Qjc3NjkzQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXy5miKkFfHW/BKJla9stg+QSg
K7yu9PcGjqrRCnMl0dHie5pWHrrBLopVVjj/UMhXZav1YMl4BB71Tw1eP/JFr5Ov
S/oRPPGnV20nHyYM4YaMvK3XIDDxyn9JSiF/5liLad4u6vSZex7ugjGZZTkr2043
XxVX/fXJ2zm1d5A409IAtzOBeR6CUYz5Z5O4QsieBxqS4ER7kNXpAEnOXdLF311f
R/SEUcZsUu6t+wphIweuzJpsuGwxVYlyZ9p07Q5v3Cm3XYYQINRcVdKV8q9yHQYp
pbD0YijrcNdtS+25eeSQn9SziC3R9IC3k++loPNuhqUSyoMHAXLb8dinOHoVAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU/ssVSVHngWLXfHQu6INMCbd2k8owHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzIzODMwMzQzYTMyMzU2NTM0M2EzNTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzNjMxMzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQl5AUwDQYJKoZIhvcNAQELBQADggEB
AC7OjsaC90Jzx0T2jaCWFrlcRaHNEqnW+UrKO+vCXFxeaQnTtJtaWMw0Ci2naE0v
KlCvrr3N/OBmK8yrPBbuQvnrx/IIOWCBA7nOV8LixjbI8DygEmiPe+PloKKo6Y79
X0EmTyqPPi6nky9wmD3gHm5NAaS67H9iajPNrX9Yw7TTm8ZqxtSfZDLTsodolyY2
t1d2scjCoxdE4b2t1GNCiCtV1Cj1R/rglhJo/9KlOCKwnaVXPt43Xujox8/Xj+gp
Y80ibSX+zIGFr43vD94FW9lXoVY4bxOrlIdZsctL8y42Q4QNw/pYnqt8qhMQmNRL
rxCsshOEOyFBgHpUggWPfPM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org