Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36312e302f32342d3234203d3e203631353733.roa
File:                     3133382e3132322e36312e302f32342d3234203d3e203631353733.roa (raw, json)
Hash identifier:          T8qAASlozP4D+0GxRIrDmTBzdrSW0DWATq9aYBRt3aQ=
Subject key identifier:   4A:66:36:FE:94:1D:C2:FA:E1:BA:2F:49:23:CD:39:02:E1:A7:EF:5D
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       16C87A084912D65E48EE03C14844C413214C831A
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36312e302f32342d3234203d3e203631353733.roa
Signing time:             Sat 04 Apr 2026 00:30:36 +0000
ROA not before:           Sat 04 Apr 2026 00:25:36 +0000
ROA not after:            Sat 03 Apr 2027 00:30:36 +0000
asID:                     61573
IP address blocks:        138.122.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c8:7a:08:49:12:d6:5e:48:ee:03:c1:48:44:c4:13:21:4c:83:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Apr  4 00:25:36 2026 GMT
            Not After : Apr  3 00:30:36 2027 GMT
        Subject: CN=4A6636FE941DC2FAE1BA2F4923CD3902E1A7EF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:30:07:af:01:a6:c5:0b:8c:22:37:84:eb:
                    d8:ae:53:75:95:a3:93:21:aa:d0:aa:37:de:c6:93:
                    33:b3:60:f6:8d:8a:22:8d:44:ca:ef:b8:5f:2e:6e:
                    31:ed:03:8c:49:32:65:7a:fa:3e:ac:ff:fd:df:76:
                    8d:7f:62:34:86:27:e4:7c:6f:c4:f7:cb:15:38:7e:
                    58:20:76:1d:67:e0:ae:31:ad:3f:e4:81:e9:5d:f0:
                    16:a3:54:16:a9:9d:e8:5f:20:a0:0f:7e:26:86:38:
                    4c:b8:53:cc:a1:78:d6:fa:4b:5c:3b:a2:aa:f8:1d:
                    c9:69:a2:c3:e3:e1:b1:29:0b:7c:60:e3:41:31:28:
                    ff:59:90:0c:8e:b8:97:53:1e:a0:cc:1f:33:82:1c:
                    6c:26:f7:6e:b2:83:dc:58:b6:a9:f6:67:a3:3d:9c:
                    b3:fc:2d:31:0a:7f:dc:fd:b1:f4:ef:3c:86:a3:83:
                    56:5c:eb:d0:84:dc:d9:dc:92:ad:5b:6f:a6:b7:33:
                    1e:5c:1c:ee:c3:62:11:ab:21:40:f0:c6:a9:a9:cb:
                    df:28:f2:31:fb:02:64:09:d0:03:cb:1d:f1:ef:79:
                    66:70:b0:81:9a:77:8e:a7:72:54:09:da:a0:0e:16:
                    ec:53:b4:8d:95:d6:66:28:bf:70:c3:0a:ed:25:4c:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:66:36:FE:94:1D:C2:FA:E1:BA:2F:49:23:CD:39:02:E1:A7:EF:5D
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36312e302f32342d3234203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ed:b3:70:6b:56:9f:73:28:9c:26:6b:c0:3f:74:c7:4e:1b:
         42:05:2b:c9:33:ec:3d:f1:5b:8c:05:cc:73:9d:a6:ab:47:6a:
         9e:54:07:7f:46:ba:2e:e9:4d:4a:80:42:54:d3:d4:cf:f8:c5:
         33:a9:3a:56:cb:d9:03:c0:4b:86:39:9e:23:71:ee:55:d1:af:
         a6:f0:18:aa:cf:8b:70:6a:d7:35:a0:f6:d9:ba:79:a0:41:dc:
         95:51:78:b4:06:e6:56:bd:4b:57:a9:82:60:ce:5a:92:6e:7d:
         ee:c2:80:8f:77:96:d2:7a:62:ce:29:c8:32:54:1c:03:65:27:
         8c:4c:eb:89:2c:a1:d9:2f:21:04:9c:99:81:d3:28:41:12:4a:
         26:df:53:49:1c:42:b9:a0:f2:94:20:60:c6:cd:b3:45:31:e4:
         52:14:ac:53:00:24:0c:89:b1:34:b1:10:74:9a:a4:81:c6:c1:
         64:34:2f:bc:66:b2:ec:0f:46:0f:1e:73:68:69:95:0d:29:be:
         8b:03:82:6a:ce:14:53:86:d5:12:8e:88:44:d0:e0:55:9a:52:
         d1:98:55:82:9c:71:0a:8f:5a:44:a1:ab:cb:9a:93:f6:18:64:
         11:5d:a7:9b:cd:34:f9:68:3a:56:7b:09:88:21:69:fe:83:a4:
         85:6e:34:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:59:45 2026 by rpki-client