Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          OgmUTpxcGLA9ncbeJyNyvZ9MC1/JP6yfy+l2Kw0UF5U=
Subject key identifier:   61:2B:7F:E3:5B:7E:75:9E:A1:EA:0C:05:4A:18:E6:F3:E6:46:74:70
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       64DB433A0C71824D4F35E8AA4CA746B996060CAF
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3a2f34302d3430203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:10 +0000
ROA not before:           Fri 31 May 2024 23:20:10 +0000
ROA not after:            Fri 30 May 2025 23:25:10 +0000
asID:                     61573
IP address blocks:        2804:25e4::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:db:43:3a:0c:71:82:4d:4f:35:e8:aa:4c:a7:46:b9:96:06:0c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:10 2024 GMT
            Not After : May 30 23:25:10 2025 GMT
        Subject: CN=612B7FE35B7E759EA1EA0C054A18E6F3E6467470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:a6:d4:21:b7:d0:89:d0:db:6f:1f:f4:22:
                    e4:c1:7b:7e:54:d7:a8:c0:ad:f9:36:25:ba:05:6c:
                    dc:a4:11:2e:c6:88:e6:25:f3:96:81:e6:2e:f5:96:
                    76:73:66:98:b2:30:4d:d7:77:8a:b3:40:b5:b6:c7:
                    af:e3:4e:77:23:2f:38:19:8e:66:5b:25:23:c2:01:
                    ee:32:30:36:90:32:2a:11:26:30:87:53:6d:58:17:
                    a2:12:cb:b1:d7:26:0d:f2:a9:12:81:15:86:2a:e5:
                    3b:73:e6:3a:c3:15:e0:2f:6a:63:78:a9:84:cb:64:
                    ce:0d:68:cd:de:0e:73:d3:b0:e3:27:4f:9b:c7:3a:
                    26:ae:04:3b:31:85:d9:af:34:ac:27:0f:fb:19:8a:
                    1a:db:17:34:e6:56:76:38:b8:4d:ee:d2:7b:6d:92:
                    11:55:a5:e4:9d:25:d7:c6:67:d0:a2:a8:0b:7b:b6:
                    51:e8:56:34:64:54:5e:2b:4e:72:4d:74:9a:51:ca:
                    c6:58:8c:9b:fb:c4:02:59:7d:2d:7e:3f:e3:e0:0b:
                    06:40:75:0b:59:7b:03:08:7c:06:02:7a:b1:13:b5:
                    ee:6b:63:1b:eb:a0:60:9e:93:5e:af:23:0b:f4:00:
                    04:ac:e0:b2:e3:fb:c0:20:bd:56:6b:25:44:f6:6f:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2B:7F:E3:5B:7E:75:9E:A1:EA:0C:05:4A:18:E6:F3:E6:46:74:70
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:6c:d0:35:28:dc:37:23:54:ee:3e:8c:03:1c:09:55:90:
         70:8b:2f:98:a7:1e:cb:bc:bd:f1:5d:bc:b3:74:6e:4e:57:83:
         93:65:f3:8e:d5:2e:ec:3b:17:8b:b1:67:5f:c1:82:78:2a:a2:
         42:d5:5f:5c:8b:e8:a2:65:85:28:90:2c:01:b3:41:e2:3f:2d:
         11:42:f7:40:5f:67:67:fd:4c:53:f9:bc:61:37:44:8f:f9:a6:
         11:c9:a3:c0:a1:73:26:76:9f:de:d2:cd:df:ae:1c:47:68:cf:
         04:e3:53:16:fc:38:da:48:bb:a3:14:8e:15:7a:76:bf:5e:b9:
         2a:88:78:3a:3a:d8:de:3a:80:0c:ad:9a:b1:6d:ba:7d:8c:c8:
         c0:70:09:d0:d7:c7:68:10:5d:85:86:91:5b:5f:ba:ef:ba:84:
         2f:e7:3a:8f:60:5b:9b:76:67:3b:10:27:3e:b9:90:c3:77:d3:
         f5:19:2e:2d:5d:f5:01:86:81:fa:83:6f:eb:3d:c6:79:25:47:
         c8:37:fa:99:27:04:77:7c:e0:29:ed:64:ad:2e:04:41:39:7e:
         c7:0b:12:d3:16:89:49:94:3a:51:51:bd:0e:63:d0:34:63:cf:
         b6:ea:ae:33:23:0d:43:dc:37:13:78:a5:51:69:81:ca:1c:76:
         e2:2e:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org