Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          74NBer6/Ys+yvTKdHBO8efKyymIq89O2IE73Z7gqklw=
Subject key identifier:   85:65:CE:44:88:85:B7:82:15:81:28:C9:A1:8D:EE:C8:69:38:9F:6F
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       757D99BFDEC07A4984ADF13034C435E7FE0A554D
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:12 +0000
ROA not before:           Fri 31 May 2024 23:20:12 +0000
ROA not after:            Fri 30 May 2025 23:25:12 +0000
asID:                     61573
IP address blocks:        2804:25e4:701::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7d:99:bf:de:c0:7a:49:84:ad:f1:30:34:c4:35:e7:fe:0a:55:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:12 2024 GMT
            Not After : May 30 23:25:12 2025 GMT
        Subject: CN=8565CE448885B782158128C9A18DEEC869389F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:a4:42:3d:7b:16:7d:8c:58:42:ba:0e:0a:
                    f6:1b:9d:ac:cc:dc:53:c8:7f:15:ed:cf:3c:1a:75:
                    d7:9e:da:4f:10:12:c3:2b:b5:3e:9d:ea:2e:9d:8b:
                    cb:39:b4:90:bf:88:0c:df:65:f9:ae:34:94:15:c0:
                    30:e7:71:be:a7:5f:f1:2c:e1:e6:9f:6c:6a:ec:a8:
                    bf:81:30:ce:40:a8:6d:c5:bc:08:06:46:a3:56:71:
                    15:ed:35:19:ee:f5:4f:47:62:46:42:9c:ec:b6:9b:
                    d1:64:e0:11:c4:b4:0a:4c:f7:3d:cf:bf:89:7a:60:
                    51:cd:98:ca:01:1e:0f:1f:2b:84:f2:cf:04:80:e0:
                    88:b4:73:f8:fe:95:35:25:b1:bb:a6:c5:ef:99:7b:
                    72:24:80:16:f1:27:82:5b:20:ac:cc:b6:54:ec:67:
                    69:95:74:60:21:1b:9a:8a:71:21:73:2e:4d:4b:64:
                    03:16:59:04:92:95:fd:5e:b9:82:a8:db:44:08:d1:
                    e2:c2:9a:a2:ac:6e:a8:e3:e4:34:f2:72:2e:c7:48:
                    5f:d7:8e:d1:f1:08:d4:a3:98:d3:07:ef:b1:e4:aa:
                    b8:aa:0f:81:7c:ed:42:cb:ed:18:f0:ba:eb:b9:f7:
                    47:ca:cd:05:95:9d:60:eb:3e:47:79:c6:35:68:50:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:65:CE:44:88:85:B7:82:15:81:28:C9:A1:8D:EE:C8:69:38:9F:6F
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:701::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:90:ad:0b:1a:92:2d:89:01:d3:b5:a8:8d:04:ea:a8:80:
         bf:bc:17:07:49:68:65:aa:b3:9c:ae:2b:5d:c5:4b:7a:6f:55:
         6e:94:96:a5:ba:5b:bb:3c:f5:a6:ed:fc:e6:75:23:95:26:0e:
         ac:ab:75:9d:b6:40:96:f3:c2:5d:db:0c:59:04:7b:5d:04:40:
         c4:97:d4:77:99:8e:51:44:a1:0a:bb:a4:ee:c1:d1:41:ea:fd:
         a9:65:56:19:35:27:b7:ff:55:81:1c:4e:da:9d:21:10:49:e9:
         2e:a0:af:de:e7:79:72:b9:67:60:18:15:5c:6b:59:b5:20:c8:
         7b:6b:2f:31:15:95:8d:ea:47:d0:f4:9d:99:59:ec:d1:44:a8:
         64:63:f9:17:ad:8c:02:18:41:a8:4b:0c:e6:80:e7:5e:b8:ad:
         52:c9:93:5c:ff:15:a4:9f:18:08:04:8f:0a:fe:bc:df:71:07:
         98:b7:91:e7:7b:c4:51:2c:6d:46:40:ef:ac:f0:36:1e:e1:16:
         c7:ed:72:10:fe:b6:01:d4:43:5b:a8:63:5f:6c:c4:b1:5b:b2:
         5f:17:fd:fd:53:00:4b:8d:dd:2a:16:a0:08:6d:ae:d4:9a:d7:
         a5:b4:53:2e:0b:6c:0c:ed:61:94:ef:9a:bd:bc:d1:68:f2:03:
         c7:0a:55:70
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUdX2Zv97AekmErfEwNMQ15/4KVU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNDA1MzEyMzIwMTJaFw0yNTA1MzAyMzI1MTJaMDMxMTAvBgNV
BAMTKDg1NjVDRTQ0ODg4NUI3ODIxNTgxMjhDOUExOERFRUM4NjkzODlGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vaRCPXsWfYxYQroOCvYbnazM
3FPIfxXtzzwaddee2k8QEsMrtT6d6i6di8s5tJC/iAzfZfmuNJQVwDDncb6nX/Es
4eafbGrsqL+BMM5AqG3FvAgGRqNWcRXtNRnu9U9HYkZCnOy2m9Fk4BHEtApM9z3P
v4l6YFHNmMoBHg8fK4TyzwSA4Ii0c/j+lTUlsbumxe+Ze3IkgBbxJ4JbIKzMtlTs
Z2mVdGAhG5qKcSFzLk1LZAMWWQSSlf1euYKo20QI0eLCmqKsbqjj5DTyci7HSF/X
jtHxCNSjmNMH77HkqriqD4F87ULL7Rjwuuu590fKzQWVnWDrPkd5xjVoUNrFAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUhWXORIiFt4IVgSjJoY3uyGk4n28wHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzIzODMwMzQzYTMyMzU2NTM0M2EzNzMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNjMxMzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQl5AcBMA0GCSqGSIb3DQEBCwUAA4IB
AQB7EZCtCxqSLYkB07WojQTqqIC/vBcHSWhlqrOcritdxUt6b1VulJalulu7PPWm
7fzmdSOVJg6sq3WdtkCW88Jd2wxZBHtdBEDEl9R3mY5RRKEKu6TuwdFB6v2pZVYZ
NSe3/1WBHE7anSEQSekuoK/e53lyuWdgGBVca1m1IMh7ay8xFZWN6kfQ9J2ZWezR
RKhkY/kXrYwCGEGoSwzmgOdeuK1SyZNc/xWknxgIBI8K/rzfcQeYt5Hne8RRLG1G
QO+s8DYe4RbH7XIQ/rYB1ENbqGNfbMSxW7JfF/39UwBLjd0qFqAIba7UmteltFMu
C2wM7WGU75q9vNFo8gPHClVw
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org