Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          axK+rl0rTS8ZM+rifi9pvRloSimvSOF4nMSdBlznnVg=
Subject key identifier:   88:C6:D5:E7:F4:48:B3:F6:B2:64:7C:76:55:56:EE:2F:AA:60:E4:02
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       3A614427BAB01CF2E86A75CE00DA71E25BCD5EC3
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:09 +0000
ROA not before:           Fri 31 May 2024 23:20:09 +0000
ROA not after:            Fri 30 May 2025 23:25:09 +0000
asID:                     61573
IP address blocks:        2804:25e4:70a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:61:44:27:ba:b0:1c:f2:e8:6a:75:ce:00:da:71:e2:5b:cd:5e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:09 2024 GMT
            Not After : May 30 23:25:09 2025 GMT
        Subject: CN=88C6D5E7F448B3F6B2647C765556EE2FAA60E402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:3a:7b:c9:7b:1f:33:29:fa:bd:7d:95:e1:
                    26:6f:c5:c5:8b:af:44:32:fc:51:09:24:70:22:56:
                    56:2e:19:1c:63:95:3e:a0:63:11:d0:5a:e2:fa:0d:
                    ce:9d:c4:25:ef:f6:a2:e2:f5:e2:ef:28:98:15:f1:
                    00:0e:f5:2b:25:61:43:5b:e1:75:85:ff:6d:d7:00:
                    de:8a:ba:af:0d:6c:cc:62:5a:0b:d8:54:ba:c5:49:
                    7b:c6:44:8e:ca:1c:af:39:8b:0e:16:45:88:28:49:
                    a8:9c:1e:27:a5:19:c2:fa:3e:34:7d:77:e9:92:01:
                    c2:0e:77:fc:01:1a:dc:13:24:88:69:8c:d1:76:02:
                    5b:c8:61:d8:5d:eb:4b:37:0e:08:aa:91:c5:a7:93:
                    b7:50:5d:56:47:bc:ed:42:50:a2:2d:67:0b:b6:29:
                    76:e0:56:bb:f0:cd:d8:0e:b9:5b:4b:60:a4:52:e5:
                    9a:ec:b1:db:ad:2e:55:71:4f:d1:d6:5f:e1:a9:97:
                    32:c0:52:79:75:9e:83:fd:b0:ad:02:03:56:25:e6:
                    c8:d4:25:c0:9d:6c:b9:f6:f0:67:d5:1e:16:28:3c:
                    1c:6b:cd:78:78:86:cd:fc:77:aa:01:3b:be:93:c0:
                    b1:24:62:3a:7b:08:f3:ee:97:1c:02:92:93:69:51:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C6:D5:E7:F4:48:B3:F6:B2:64:7C:76:55:56:EE:2F:AA:60:E4:02
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730613a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70a::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:be:4c:d1:cd:f3:c7:24:ab:5b:37:39:be:6b:8b:c1:db:
         0b:89:81:d5:17:98:9c:8e:b0:8f:eb:d6:37:4e:21:45:45:22:
         0d:4a:42:1a:7d:4d:01:52:b4:75:01:b3:69:d8:e1:b9:c0:b8:
         43:ac:99:40:e6:3c:81:e2:ab:b5:4b:0c:ae:aa:ba:63:ee:81:
         e0:39:5f:6f:52:8d:20:f2:94:4a:b7:8d:a8:26:a6:4d:4f:14:
         0e:55:fd:0e:2f:88:6a:1b:ab:c9:83:75:49:d8:ef:87:8e:d9:
         23:bb:38:b0:1f:51:58:83:b9:6a:d8:10:c3:73:ee:a1:92:12:
         1e:a3:77:26:60:e9:dc:f2:85:0b:22:9f:bb:c7:55:0e:96:72:
         8d:77:d5:60:32:c9:21:00:e0:4b:68:d8:0a:f0:cc:be:9d:61:
         07:15:c3:d1:a2:ee:c7:8a:14:b6:b9:d8:0d:1c:02:11:57:a8:
         58:5d:66:92:35:28:fa:6d:f5:a7:f8:ae:75:ac:f9:72:a1:6a:
         77:36:8c:f8:ff:ce:f9:56:46:89:b8:fb:18:4d:eb:d0:9e:0c:
         82:84:91:dc:b5:0e:db:ab:81:98:9c:d2:7a:ca:72:42:50:57:
         fe:df:b3:2e:8c:af:d6:10:25:14:39:0d:9e:f8:da:71:bd:d1:
         c5:f9:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:48 2024 by rpki-client on console-ams.rpki-client.org