Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3a2f33322d3332203d3e203631353733.roa
File:                     323830343a323565343a3a2f33322d3332203d3e203631353733.roa (raw, json)
Hash identifier:          DtRlOuYihZ3AmHlobVMRtPYUQ6Kkw8dr66I9RN5FdTU=
Subject key identifier:   80:3F:9D:09:7E:AA:19:DC:13:6A:FC:3E:06:39:E9:70:AA:AA:68:DE
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       3816D36CF5E0D4454250B3858B0673C7DCEF9A95
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3a2f33322d3332203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:11 +0000
ROA not before:           Fri 31 May 2024 23:20:11 +0000
ROA not after:            Fri 30 May 2025 23:25:11 +0000
asID:                     61573
IP address blocks:        2804:25e4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:16:d3:6c:f5:e0:d4:45:42:50:b3:85:8b:06:73:c7:dc:ef:9a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:11 2024 GMT
            Not After : May 30 23:25:11 2025 GMT
        Subject: CN=803F9D097EAA19DC136AFC3E0639E970AAAA68DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:20:a6:af:dc:b1:0f:5d:fd:d9:a5:27:da:
                    00:b7:4e:c6:74:41:7d:8c:c0:a0:eb:a3:d4:ec:17:
                    04:77:a1:50:2b:b5:f9:6f:a3:f4:79:2f:da:54:a1:
                    f9:d9:31:0d:cd:4a:b7:1c:be:4d:f2:4c:c0:b4:74:
                    e3:18:bb:a1:86:ee:c9:27:f6:e5:49:e0:41:80:ca:
                    2e:91:79:27:af:08:74:8a:ee:4f:92:64:e8:64:ac:
                    1f:bc:f2:74:64:63:ae:5a:30:b5:10:8e:12:e5:15:
                    5b:fc:b3:d8:c6:79:7b:b2:bf:34:2c:4d:a5:55:c0:
                    20:18:e1:c4:d6:2c:a0:b0:0e:ee:2d:6e:25:8b:90:
                    ce:ed:1a:93:41:c1:87:03:08:77:c0:38:6d:1a:11:
                    b6:f9:7f:b4:86:d0:ed:52:7a:28:17:e7:12:b3:67:
                    05:f8:75:e9:de:5f:a7:9a:76:1d:fb:98:e9:9a:81:
                    a9:2a:47:9a:b5:86:66:e1:db:b4:64:23:4f:57:31:
                    ba:fd:10:79:24:c9:e9:b5:fe:d5:94:81:f2:d4:fd:
                    92:9c:93:b2:2f:b4:42:94:fc:79:77:66:2f:11:fe:
                    73:c1:0e:93:0b:20:8a:91:ac:3e:69:b1:59:e9:ce:
                    84:a8:ac:35:3e:d9:09:b2:a1:e4:dd:56:47:2b:ea:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3F:9D:09:7E:AA:19:DC:13:6A:FC:3E:06:39:E9:70:AA:AA:68:DE
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3a2f33322d3332203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:ea:56:47:1d:7c:19:65:1c:8e:b1:7e:1c:da:66:55:14:64:
         d9:70:7b:ea:af:39:b6:5c:c7:e5:b5:52:39:d5:ba:1f:20:cc:
         53:1c:1f:04:53:cc:46:6c:6f:1a:f4:c9:72:ef:7e:85:54:55:
         fb:49:b1:fa:58:7d:70:af:fc:17:3d:a4:d4:57:fe:7c:e7:c0:
         d1:a2:bc:7c:b0:54:a3:92:c3:1d:50:9e:26:82:66:e4:cb:4b:
         a3:1a:2e:eb:f8:03:36:3b:b9:10:25:22:ab:80:f4:95:ec:1e:
         2a:55:0b:5e:78:d6:e2:78:d9:0a:ff:fe:85:08:3b:0e:b8:1d:
         97:6a:38:12:21:cb:48:39:87:50:9c:f7:2a:a7:53:85:31:bb:
         a6:7e:10:31:7f:df:5f:8e:91:fe:49:b7:eb:6f:bc:85:bf:7f:
         30:27:c7:4d:bf:9b:06:ea:5e:6e:8a:5a:f9:df:96:f1:89:97:
         55:53:68:6b:17:a9:63:c4:ca:77:9e:1c:5e:0d:ee:d0:d9:52:
         90:ed:96:a1:e2:d0:ed:03:59:a1:3c:c6:5a:f6:53:eb:30:77:
         d2:71:e7:09:09:0a:48:e6:f9:56:9f:a3:32:4d:35:42:75:4a:
         6f:50:4a:4d:3b:04:78:6a:e6:ed:eb:37:4e:e9:90:17:31:f3:
         b6:56:bd:aa
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUOBbTbPXg1EVCULOFiwZzx9zvmpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNDA1MzEyMzIwMTFaFw0yNTA1MzAyMzI1MTFaMDMxMTAvBgNV
BAMTKDgwM0Y5RDA5N0VBQTE5REMxMzZBRkMzRTA2MzlFOTcwQUFBQTY4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfSCmr9yxD1392aUn2gC3TsZ0
QX2MwKDro9TsFwR3oVArtflvo/R5L9pUofnZMQ3NSrccvk3yTMC0dOMYu6GG7skn
9uVJ4EGAyi6ReSevCHSK7k+SZOhkrB+88nRkY65aMLUQjhLlFVv8s9jGeXuyvzQs
TaVVwCAY4cTWLKCwDu4tbiWLkM7tGpNBwYcDCHfAOG0aEbb5f7SG0O1SeigX5xKz
ZwX4deneX6eadh37mOmagakqR5q1hmbh27RkI09XMbr9EHkkyem1/tWUgfLU/ZKc
k7IvtEKU/Hl3Zi8R/nPBDpMLIIqRrD5psVnpzoSorDU+2QmyoeTdVkcr6jotAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUgD+dCX6qGdwTavw+BjnpcKqqaN4wHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzIzODMwMzQzYTMyMzU2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM1
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEJeQwDQYJKoZIhvcNAQELBQADggEBAE7qVkcdfBll
HI6xfhzaZlUUZNlwe+qvObZcx+W1UjnVuh8gzFMcHwRTzEZsbxr0yXLvfoVUVftJ
sfpYfXCv/Bc9pNRX/nznwNGivHywVKOSwx1QniaCZuTLS6MaLuv4AzY7uRAlIquA
9JXsHipVC1541uJ42Qr//oUIOw64HZdqOBIhy0g5h1Cc9yqnU4Uxu6Z+EDF/31+O
kf5Jt+tvvIW/fzAnx02/mwbqXm6KWvnflvGJl1VTaGsXqWPEyneeHF4N7tDZUpDt
lqHi0O0DWaE8xlr2U+swd9Jx5wkJCkjm+VafozJNNUJ1Sm9QSk07BHhq5u3rN07p
kBcx87ZWvao=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org