Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          kovlflWKiJuf57vll5Kfempo9MLdooBg0zZS19HDi0I=
Subject key identifier:   A4:CB:AA:86:55:0A:7E:0E:AE:13:4B:88:65:89:4B:06:36:BE:68:A4
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       37E94829AD4D39E742EB8EA0CEDD8144578CD90B
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa
Signing time:             Tue 18 Mar 2025 13:40:47 +0000
ROA not before:           Tue 18 Mar 2025 13:35:47 +0000
ROA not after:            Tue 17 Mar 2026 13:40:47 +0000
asID:                     61573
IP address blocks:        2804:25e4:70c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e9:48:29:ad:4d:39:e7:42:eb:8e:a0:ce:dd:81:44:57:8c:d9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Mar 18 13:35:47 2025 GMT
            Not After : Mar 17 13:40:47 2026 GMT
        Subject: CN=A4CBAA86550A7E0EAE134B8865894B0636BE68A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:38:07:2e:85:18:62:2c:80:8c:29:af:88:
                    e8:f1:be:60:fa:15:28:73:e3:0b:8c:b3:87:13:c1:
                    79:a0:ff:0a:29:4c:5b:24:2f:7e:3e:fa:8a:08:0e:
                    84:e2:cd:4c:bf:d7:1a:3a:57:ac:83:00:66:08:5d:
                    62:d0:80:28:65:bd:a9:ee:b8:b0:46:5c:42:79:99:
                    51:4c:37:1a:ef:21:c8:90:9c:6a:4f:51:70:2b:1f:
                    12:5e:2a:83:82:2b:7e:3a:20:9b:a3:c8:e7:a6:20:
                    31:a5:31:e5:25:fc:b3:39:58:f3:5f:d1:0f:ee:34:
                    cd:e1:37:7f:e3:a6:5a:29:bd:78:1c:24:3e:3a:a6:
                    cb:ba:1d:b0:29:bd:18:6c:5c:57:eb:76:89:98:f6:
                    d3:f1:0f:b5:a4:31:d7:0c:b3:ff:fe:f9:a5:8c:81:
                    ae:cf:77:e8:f4:9c:34:1f:d4:cf:2f:fc:bd:5f:53:
                    77:be:3b:d7:37:76:5c:e6:3e:09:5d:fa:ed:89:c7:
                    59:95:2b:16:db:f4:8c:2a:75:6b:b2:97:35:05:d9:
                    3d:1d:aa:ea:32:fc:1d:c2:00:fb:59:f1:25:57:37:
                    37:79:86:3b:fd:bb:35:ab:78:c6:2e:43:60:5a:e2:
                    60:03:05:27:e2:6f:dc:de:67:6f:6e:7d:03:df:14:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CB:AA:86:55:0A:7E:0E:AE:13:4B:88:65:89:4B:06:36:BE:68:A4
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70c::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:5f:43:9f:ea:02:44:25:3d:b1:af:d1:2c:4e:0c:39:c4:
         ad:8f:55:e0:ab:96:63:bb:f1:1f:b9:e5:a0:47:3a:b6:83:2d:
         02:96:48:ea:db:8d:4f:b3:35:99:e9:94:38:84:36:7e:d8:0f:
         cc:e4:ab:70:83:41:ac:df:97:6b:86:e8:1d:82:c6:2e:5b:84:
         e8:36:80:d5:7c:e1:ed:7d:e0:e8:47:e5:91:0b:e7:01:cd:ac:
         c5:34:ef:a1:e3:39:6b:1f:ee:17:e6:cf:c6:b7:e6:e0:da:ed:
         1d:d9:56:de:b4:8a:a8:c7:45:88:9f:1b:17:8a:a5:4a:b1:38:
         72:8d:86:01:8d:af:62:69:98:8b:de:3e:f5:5b:f7:a6:bb:56:
         96:54:bd:d8:08:cc:cd:7d:07:9d:4b:11:cd:4e:b6:c8:43:72:
         70:03:12:15:c8:04:0b:55:3e:c9:33:76:3a:de:47:da:7d:40:
         19:9e:d5:7f:46:93:4d:83:60:88:50:27:b6:70:80:85:c5:6a:
         93:a1:eb:72:34:fb:c1:93:4c:43:91:fe:92:43:23:72:9d:6d:
         b4:cc:eb:d6:65:1f:d6:7b:77:85:94:22:1c:4d:76:25:19:a0:
         98:06:c6:62:06:80:97:ac:e6:54:9d:d9:ac:dd:77:84:29:29:
         58:49:3b:ac
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUN+lIKa1NOedC646gzt2BRFeM2QswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNTAzMTgxMzM1NDdaFw0yNjAzMTcxMzQwNDdaMDMxMTAvBgNV
BAMTKEE0Q0JBQTg2NTUwQTdFMEVBRTEzNEI4ODY1ODk0QjA2MzZCRTY4QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDayzgHLoUYYiyAjCmviOjxvmD6
FShz4wuMs4cTwXmg/wopTFskL34++ooIDoTizUy/1xo6V6yDAGYIXWLQgChlvanu
uLBGXEJ5mVFMNxrvIciQnGpPUXArHxJeKoOCK346IJujyOemIDGlMeUl/LM5WPNf
0Q/uNM3hN3/jplopvXgcJD46psu6HbApvRhsXFfrdomY9tPxD7WkMdcMs//++aWM
ga7Pd+j0nDQf1M8v/L1fU3e+O9c3dlzmPgld+u2Jx1mVKxbb9IwqdWuylzUF2T0d
quoy/B3CAPtZ8SVXNzd5hjv9uzWreMYuQ2Ba4mADBSfib9zeZ29ufQPfFO1DAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUpMuqhlUKfg6uE0uIZYlLBja+aKQwHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzIzODMwMzQzYTMyMzU2NTM0M2EzNzMwNjMzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNjMxMzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQl5AcMMA0GCSqGSIb3DQEBCwUAA4IB
AQBFWl9Dn+oCRCU9sa/RLE4MOcStj1Xgq5Zju/EfueWgRzq2gy0Clkjq241PszWZ
6ZQ4hDZ+2A/M5Ktwg0Gs35drhugdgsYuW4ToNoDVfOHtfeDoR+WRC+cBzazFNO+h
4zlrH+4X5s/Gt+bg2u0d2VbetIqox0WInxsXiqVKsThyjYYBja9iaZiL3j71W/em
u1aWVL3YCMzNfQedSxHNTrbIQ3JwAxIVyAQLVT7JM3Y63kfafUAZntV/RpNNg2CI
UCe2cICFxWqToetyNPvBk0xDkf6SQyNynW20zOvWZR/We3eFlCIcTXYlGaCYBsZi
BoCXrOZUndms3XeEKSlYSTus
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:53 2025 by rpki-client