Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36322e302f32342d3234203d3e203631353733.roa
File:                     3133382e3132322e36322e302f32342d3234203d3e203631353733.roa (raw, json)
Hash identifier:          Vpwlpuob03Rkbv/CC3bd+L8zGD9z/VXh0j4OUEtKKzA=
Subject key identifier:   82:1C:43:51:35:55:F1:E2:89:7F:D0:91:2D:DE:F8:42:8D:EC:29:22
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       1DB56C36B8677726319F19DC65B571FB96DA64A1
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36322e302f32342d3234203d3e203631353733.roa
Signing time:             Tue 17 Feb 2026 13:44:01 +0000
ROA not before:           Tue 17 Feb 2026 13:39:01 +0000
ROA not after:            Tue 16 Feb 2027 13:44:01 +0000
asID:                     61573
IP address blocks:        138.122.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 04:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b5:6c:36:b8:67:77:26:31:9f:19:dc:65:b5:71:fb:96:da:64:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Feb 17 13:39:01 2026 GMT
            Not After : Feb 16 13:44:01 2027 GMT
        Subject: CN=821C43513555F1E2897FD0912DDEF8428DEC2922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:55:aa:c9:02:f8:56:21:a3:76:a2:e3:b3:
                    c5:63:07:6b:a7:c4:d7:06:55:91:fd:03:e8:82:0f:
                    ab:c0:16:4b:d5:cf:ac:9a:b9:0e:b2:80:7f:6c:53:
                    36:8c:df:af:aa:79:b6:77:28:93:68:6e:03:92:77:
                    50:05:2b:48:a7:76:84:d9:3f:60:47:86:05:35:b1:
                    a6:af:02:59:36:49:3e:57:16:12:39:22:f2:a1:4c:
                    ed:38:57:96:1f:d6:27:4f:b1:83:9a:62:99:38:44:
                    5e:c8:75:23:66:2a:72:cf:26:bf:8d:71:0e:37:36:
                    dc:55:3c:67:63:f7:0f:dc:8a:75:59:46:9b:36:97:
                    5d:d4:fa:a7:c2:5e:77:ec:ac:73:a0:1b:32:68:47:
                    78:7a:c7:b3:28:57:27:95:b4:d9:49:24:11:74:36:
                    f9:49:cf:39:b2:fd:f6:fa:a9:d7:95:7b:de:6a:ee:
                    f0:7d:76:5b:ca:15:7b:ca:7c:be:9e:d2:40:68:55:
                    78:c1:f9:c8:eb:3b:b7:39:1c:31:cc:28:7d:0e:5b:
                    7c:0d:a8:ff:17:97:4d:29:72:11:86:31:fd:25:3a:
                    0c:cb:fb:f1:70:e8:6c:9e:9e:6c:90:37:9a:d2:3b:
                    2f:7a:26:39:44:00:c7:cf:41:9d:26:d6:07:a2:cd:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1C:43:51:35:55:F1:E2:89:7F:D0:91:2D:DE:F8:42:8D:EC:29:22
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36322e302f32342d3234203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:99:e6:39:bc:4d:42:33:52:b2:3d:3e:2d:b1:b3:1e:45:
         60:7d:15:85:75:71:35:d1:96:e5:32:8a:21:e0:94:02:d4:1e:
         bb:69:7b:9a:07:7c:ba:5c:f2:59:f6:83:8f:56:da:e6:c1:f3:
         34:d6:e7:e5:c3:d3:01:f9:34:c7:c2:db:52:61:e6:1a:1e:fa:
         0c:d4:a9:a0:c9:96:7f:0c:bf:5d:32:e8:73:8b:31:75:84:c3:
         0f:41:ba:d5:8a:af:50:ce:48:5f:ac:9d:5f:2f:15:aa:7a:27:
         92:c9:09:d1:49:1a:33:a7:68:dc:eb:90:54:1d:44:44:d3:80:
         22:64:d1:01:d3:74:41:fb:02:fd:dd:d0:c0:43:45:ca:e8:69:
         ff:92:e2:a0:35:dd:92:5f:16:48:02:42:bb:84:25:21:a8:84:
         6d:f1:dc:0c:22:f1:3c:2c:d1:73:8b:b0:0f:18:33:3e:43:32:
         97:f7:df:54:25:e8:77:33:57:36:a0:8f:a6:c5:65:91:ed:ff:
         b5:10:e7:c2:c5:ad:79:cb:fa:1e:4d:61:b5:f1:7a:45:60:3f:
         bb:4c:de:6b:6f:3f:44:fc:81:f9:a3:45:87:5c:3f:53:3a:3c:
         d7:5e:80:fb:1f:a0:7b:76:12:4f:15:7b:6a:f0:46:42:30:f1:
         4a:42:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:46:17 2026 by rpki-client