Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          S7ET0O9Ez88qDtBHabI6F3Dohst4yi43LXh8Y5FKwgY=
Subject key identifier:   E0:A0:DD:F1:EA:83:EE:F9:B6:C1:DB:4D:7D:69:62:E9:B3:60:57:25
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       6E4F8807942E620058397F30FBE8140F5A58D9FC
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa
Signing time:             Tue 18 Mar 2025 13:40:17 +0000
ROA not before:           Tue 18 Mar 2025 13:35:17 +0000
ROA not after:            Tue 17 Mar 2026 13:40:17 +0000
asID:                     61573
IP address blocks:        2804:25e4:70b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:88:07:94:2e:62:00:58:39:7f:30:fb:e8:14:0f:5a:58:d9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Mar 18 13:35:17 2025 GMT
            Not After : Mar 17 13:40:17 2026 GMT
        Subject: CN=E0A0DDF1EA83EEF9B6C1DB4D7D6962E9B3605725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:38:cd:84:a1:4e:3d:a5:da:98:6a:e8:b4:
                    5c:67:94:47:20:fe:60:a4:8d:f1:69:68:a3:40:ab:
                    e2:f5:12:a5:06:57:1f:82:e5:7f:6e:4c:13:8c:7f:
                    20:18:4b:10:67:5b:34:18:1b:70:9f:90:e8:c4:6c:
                    83:04:03:7e:60:98:00:a0:29:23:3e:0a:5e:cf:4b:
                    a3:7e:8f:77:c8:ec:cc:6c:03:01:3f:e5:0b:90:5c:
                    06:6f:96:47:52:09:52:77:06:4e:c6:0f:a9:9e:40:
                    8a:b4:ac:35:93:87:20:96:05:2e:b4:7a:b5:42:5f:
                    f7:5c:69:87:65:4c:6c:82:d8:70:50:18:42:b5:b7:
                    4c:47:ef:0a:fd:24:f7:0c:06:05:c8:d3:3e:41:ed:
                    cb:04:a1:01:f5:9f:91:ae:d7:81:a8:00:5f:92:b7:
                    f7:ef:6a:32:67:8c:7a:92:fc:87:eb:8a:b4:3f:2b:
                    81:f2:c8:87:f1:fb:46:57:15:26:a5:5f:5a:49:d2:
                    51:49:7c:d1:31:5c:78:47:4d:52:66:fb:6d:0f:a1:
                    48:6d:85:72:ca:bf:29:29:93:65:c5:9a:75:4c:3c:
                    83:b4:89:dd:58:90:d2:5f:f1:0d:93:55:da:7f:b4:
                    56:ec:e8:a3:1f:08:a9:b2:47:ae:37:f2:a0:21:d7:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:DD:F1:EA:83:EE:F9:B6:C1:DB:4D:7D:69:62:E9:B3:60:57:25
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:e2:b9:d8:94:34:f9:15:29:15:42:64:4d:11:55:ce:56:28:
         fa:54:04:59:f5:fd:59:8f:3d:64:4b:ad:aa:aa:43:de:d3:7b:
         a1:20:aa:97:aa:86:02:83:54:1f:fe:d8:da:70:27:d2:7b:70:
         b4:93:7e:d2:d8:c9:f7:77:66:ba:a8:38:15:f3:04:3f:79:0b:
         0a:15:ad:c8:cc:a5:09:82:c5:10:c4:84:31:ba:78:23:e4:21:
         cc:c4:8f:17:ef:af:f7:a7:2f:78:be:f1:a8:93:e8:32:91:a0:
         73:4c:88:0c:08:a7:2c:a6:81:86:01:1f:e6:10:21:38:63:e5:
         f7:5c:93:95:c3:eb:3d:4a:fd:dc:9a:46:ac:0a:41:2b:35:4f:
         cb:6b:e9:b8:c4:de:d5:36:65:d5:55:3b:3b:97:96:5e:22:50:
         00:89:19:91:31:14:57:c9:b7:8f:e4:2c:23:a1:82:3c:11:7b:
         95:83:6f:69:e4:f5:68:96:48:2b:3e:33:f1:e7:62:63:0a:1d:
         35:1e:4b:bb:62:7f:1f:c9:aa:45:c0:be:7a:e1:32:d1:83:d3:
         57:7b:a1:3f:39:3d:84:cc:d4:e3:79:92:de:5b:9b:a2:26:31:
         d5:08:8d:e0:66:f8:be:b4:68:f8:64:7f:88:2c:69:32:fd:47:
         5d:55:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:29:14 2025 by rpki-client