Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          3WHr5MzjrI1PMT/+w9snCoYl8XosNMQJEaU2aihiN8U=
Subject key identifier:   63:7E:29:85:CF:67:C9:F8:FF:2E:38:A1:92:C1:4B:01:BD:D2:A2:98
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       18EB117D6E0E7D804886D29D6D0E53B660DE7D0E
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:14 +0000
ROA not before:           Fri 31 May 2024 23:20:14 +0000
ROA not after:            Fri 30 May 2025 23:25:14 +0000
asID:                     61573
IP address blocks:        2804:25e4:706::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:eb:11:7d:6e:0e:7d:80:48:86:d2:9d:6d:0e:53:b6:60:de:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:14 2024 GMT
            Not After : May 30 23:25:14 2025 GMT
        Subject: CN=637E2985CF67C9F8FF2E38A192C14B01BDD2A298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:f3:9a:fa:b8:4a:83:2d:6e:d7:8a:51:e2:
                    0b:af:ed:c3:f0:97:2b:2a:94:ca:a4:54:79:ea:95:
                    2b:7d:71:45:7a:44:e5:27:83:d5:62:ec:df:fe:b6:
                    f5:7b:38:e6:20:d7:7a:f8:03:05:95:9c:e1:46:0d:
                    f3:36:b1:65:6c:22:47:94:d5:84:ce:79:30:b6:1f:
                    f1:14:79:08:02:89:c2:2d:0c:e5:62:e2:fd:ef:0c:
                    06:4a:ad:d9:7f:2a:a2:de:56:f6:10:85:d4:66:1a:
                    03:7c:e3:f2:2b:9a:29:28:ef:45:06:bb:e7:7a:c2:
                    e9:8f:ab:95:0e:f7:df:e3:c2:a9:9b:37:4d:ab:77:
                    1c:2f:20:e6:5f:55:1c:69:1d:12:2f:db:90:98:d4:
                    97:54:15:e0:9d:93:89:00:b4:65:e5:00:60:62:6e:
                    00:be:e6:79:a3:0d:f0:03:40:1c:4f:3f:cd:c3:51:
                    a6:84:a6:d5:88:c3:e6:e9:97:9b:3a:30:d6:18:bd:
                    b3:cf:c8:b5:c2:eb:16:e4:99:ac:23:17:ff:28:a3:
                    cc:ab:db:42:d8:36:e0:23:cc:c5:9f:19:69:bd:23:
                    99:c1:f5:0c:a2:72:79:9f:5d:95:e8:0f:3e:c8:44:
                    3f:6a:1a:96:15:89:b0:ef:9e:a6:6e:a1:54:a9:44:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7E:29:85:CF:67:C9:F8:FF:2E:38:A1:92:C1:4B:01:BD:D2:A2:98
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730363a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:706::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:63:1a:40:8a:19:da:77:c4:d4:34:98:25:b2:f7:eb:7d:
         2b:44:e8:98:7b:66:a9:51:4e:9d:3c:c2:1b:d6:da:cc:65:9b:
         24:bc:db:a6:94:5a:bd:12:b2:d5:68:b5:a3:c0:d5:e2:ca:b0:
         1a:0a:33:7c:59:d7:03:45:9b:4b:16:c9:77:9b:fa:88:24:de:
         e4:a9:7f:9b:76:78:01:2f:02:84:01:04:13:a5:80:28:38:dd:
         ec:fc:50:a6:6c:46:9f:a2:62:8b:be:c7:00:bd:fc:d7:e5:f8:
         42:01:ed:1a:f4:71:10:30:c3:b3:57:7b:48:67:d2:39:e6:07:
         c4:f2:3f:55:f7:a8:ee:66:ed:59:c4:5c:1e:94:56:8f:5d:81:
         5d:c1:d5:02:37:70:2d:6a:54:d6:49:03:77:3d:42:6f:e3:1e:
         a2:eb:46:41:9f:20:52:08:69:a2:40:05:80:63:b8:31:bd:c2:
         a8:10:6f:50:b4:b4:88:ad:e9:12:ca:35:87:2e:8a:60:ad:20:
         73:68:f2:bc:91:ab:02:62:a4:54:4a:a9:26:c8:cd:81:c1:9b:
         25:8d:5e:44:d7:9f:9e:a5:4b:22:5c:88:16:49:10:00:7e:e7:
         6a:a7:be:8e:e0:de:f9:b6:73:5f:fb:af:92:bf:c8:ff:0f:17:
         38:b4:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org