Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          wSVcSG1BlFWZogJHL2NUFNnVL5o5XBeRiFoJqg/M0v0=
Subject key identifier:   FD:A4:EC:F4:A5:86:27:40:5D:C5:AF:46:AE:7D:30:40:4C:1E:3C:C4
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       43DD23A9981DFE1D90DF0626A48E487B980F3216
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:12 +0000
ROA not before:           Fri 31 May 2024 23:20:12 +0000
ROA not after:            Fri 30 May 2025 23:25:12 +0000
asID:                     61573
IP address blocks:        2804:25e4:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:23:a9:98:1d:fe:1d:90:df:06:26:a4:8e:48:7b:98:0f:32:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:12 2024 GMT
            Not After : May 30 23:25:12 2025 GMT
        Subject: CN=FDA4ECF4A58627405DC5AF46AE7D30404C1E3CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:20:1e:6e:92:e7:6e:be:c4:23:c7:91:2f:
                    4a:e9:ef:de:e4:06:d7:81:6c:a6:29:22:ed:7a:c5:
                    a8:50:b5:ff:3b:34:2e:cc:f2:d6:3e:d0:e0:65:2b:
                    f0:3b:19:2b:90:e1:07:1b:8c:80:75:87:21:93:5c:
                    88:fe:33:13:4a:44:4c:f1:98:b1:28:1d:95:af:f1:
                    41:22:a8:7a:b3:4e:2a:5d:ba:f7:32:d7:da:1e:3c:
                    e7:fa:e3:2f:5d:60:dc:d8:ea:4b:2e:6c:64:8e:00:
                    a1:16:83:71:47:75:ff:5d:aa:70:a6:29:de:10:96:
                    54:9d:ea:92:c3:08:1d:d5:94:29:3b:55:33:9f:bf:
                    ff:b7:df:32:49:4a:9b:c2:af:5b:e7:83:c3:fa:e7:
                    ce:49:73:22:42:07:a0:1e:12:ef:37:cf:4e:40:cd:
                    3a:0d:1f:2e:ee:08:d6:2c:c4:2b:ff:99:b3:ea:4c:
                    9b:f1:0d:9a:69:ed:73:16:9d:a6:54:3f:b0:8a:c2:
                    0a:d8:34:30:ef:4b:fd:35:4f:96:d2:ec:d8:34:0c:
                    c5:0e:89:42:a0:9b:b3:95:68:30:6f:6e:ba:71:17:
                    f0:ad:22:de:8f:24:43:e7:14:d7:71:50:b5:36:c9:
                    b1:12:80:34:1d:d1:62:07:ae:61:14:3a:60:cd:d0:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:EC:F4:A5:86:27:40:5D:C5:AF:46:AE:7D:30:40:4C:1E:3C:C4
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:41:a3:49:12:06:50:b2:e9:55:27:a0:bd:73:24:35:b2:
         0c:be:20:21:75:37:91:85:ea:00:69:50:b3:ae:99:94:25:29:
         08:b0:07:1b:84:be:f5:9e:37:c1:3f:5a:62:79:5c:46:54:b3:
         e6:c0:61:d1:76:ae:36:8a:12:f9:0f:81:51:4f:db:90:0d:c0:
         9a:08:1e:4e:2e:64:c7:51:87:30:d5:bc:d6:eb:99:d6:6c:cb:
         f5:d3:7a:c0:3f:90:34:16:ed:39:d6:7e:cf:25:2e:a6:9d:a4:
         54:fb:c6:db:06:f4:94:df:57:e8:87:50:13:49:fd:ea:2f:f7:
         65:87:c3:d5:5f:07:2d:0f:14:eb:83:78:bb:5b:96:0d:16:6a:
         79:38:9d:63:91:d4:3b:5e:12:80:d8:b6:8e:ad:c9:c9:8f:7f:
         8d:0c:cf:57:12:95:6e:56:77:6c:c2:7c:93:1d:04:61:48:bc:
         b3:b8:66:61:b8:e2:47:5a:4d:b7:c6:29:c4:50:45:f0:e4:25:
         ac:24:3b:ae:c9:98:df:fe:f7:8a:f2:9b:ca:02:9f:27:40:fe:
         97:0f:b6:ca:97:1a:3c:e1:dc:2d:86:4b:6c:cc:76:45:dc:72:
         02:73:6e:b4:ea:1a:cc:e3:7b:d7:87:18:a6:cf:69:66:d8:b3:
         49:8a:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org