Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3630303a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3630303a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          fbKlyAfsmDB7Xp+IE+sldOIliRPK+TY1hA2adnBy6P0=
Subject key identifier:   5A:82:F0:CC:B3:66:1A:C1:14:68:D1:EB:14:CF:48:A2:E3:29:B4:F2
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       31DE5E8B31A59719F84CFBC11063B64BD281F62D
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3630303a3a2f34382d3438203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:09 +0000
ROA not before:           Fri 31 May 2024 23:20:09 +0000
ROA not after:            Fri 30 May 2025 23:25:09 +0000
asID:                     61573
IP address blocks:        2804:25e4:600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:de:5e:8b:31:a5:97:19:f8:4c:fb:c1:10:63:b6:4b:d2:81:f6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:09 2024 GMT
            Not After : May 30 23:25:09 2025 GMT
        Subject: CN=5A82F0CCB3661AC11468D1EB14CF48A2E329B4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:ef:2d:a7:70:ba:ae:e1:e9:53:85:ee:71:
                    81:70:a7:c2:e9:24:9e:df:0f:5f:d5:4b:d8:d6:36:
                    a3:dd:e0:83:40:18:a3:04:a2:a6:ae:8b:7b:c7:fe:
                    83:96:93:1d:6f:fa:1c:48:7c:4b:cb:96:8c:bb:44:
                    b7:c8:cf:90:39:dc:93:c6:71:06:8a:aa:df:58:3a:
                    36:a4:0a:eb:80:1a:cd:57:41:e8:17:a2:74:93:9d:
                    63:77:bd:bb:28:35:d4:fb:e3:54:3a:49:c1:ad:19:
                    02:34:31:24:e6:6e:7a:f1:33:ed:28:a7:e6:2c:54:
                    5f:23:ba:fb:e6:92:3e:6c:35:f2:07:ab:0b:0e:66:
                    0c:06:4c:67:aa:7b:44:45:f8:01:b0:a0:0a:7d:3a:
                    07:e0:48:da:13:a2:dc:f5:7a:00:4e:78:6c:35:b5:
                    ba:4e:1b:97:f3:9e:49:6c:2a:81:fb:51:52:88:a4:
                    da:4f:81:04:35:10:9a:c2:78:5f:4d:a9:89:2d:86:
                    53:3d:01:5a:93:b5:3d:cb:af:25:0f:83:40:b8:65:
                    7d:ca:d0:f6:33:7f:ec:65:dd:6f:f5:d7:d8:fd:ea:
                    6b:75:20:2f:3f:9f:d6:ec:3f:fc:39:2f:1c:8c:50:
                    a8:77:1e:e6:d9:5f:f2:57:5e:6d:cf:bb:a9:e4:c8:
                    b7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:82:F0:CC:B3:66:1A:C1:14:68:D1:EB:14:CF:48:A2:E3:29:B4:F2
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3630303a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:9a:0a:99:00:21:30:34:43:a2:4b:08:98:86:f3:bb:e8:
         c7:02:20:18:02:07:c3:2a:50:e4:aa:0b:9d:3f:1d:5b:ed:57:
         22:7d:84:a2:5a:a3:83:7b:2d:0d:86:f1:51:83:cf:91:74:54:
         e1:9b:80:5c:38:c9:17:a3:c0:f5:6a:a8:d5:90:c9:7f:a4:ec:
         ea:94:ad:7f:c6:02:65:fa:e4:d9:57:e2:21:57:5d:b8:32:a8:
         2e:0e:93:ec:4f:f7:d5:05:76:5d:44:89:05:42:48:09:14:12:
         86:a7:14:81:6e:d9:40:dd:15:cd:ed:0f:3f:f2:d6:1b:cc:e9:
         a3:da:a9:62:e8:81:e7:75:ca:e1:81:6c:93:6e:7c:5e:15:7c:
         20:07:f1:8d:61:d5:18:ae:cb:d8:b5:af:eb:2a:71:17:65:2e:
         6b:d6:a0:e4:00:d2:46:6f:65:28:34:e0:97:d9:52:95:07:82:
         2a:eb:cd:c5:4c:33:46:07:29:ae:43:6d:41:39:bb:57:c4:e9:
         13:92:26:8a:ee:2c:cd:93:0c:fa:5d:32:4a:4d:f9:cc:6b:26:
         23:56:13:a8:1f:45:ad:55:2a:23:40:7a:5b:8d:93:b6:ae:7a:
         7b:73:4a:d9:58:1f:65:a7:18:59:89:fb:05:20:5b:3b:98:cf:
         0e:74:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org