Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3230303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3230303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          g3XfsZ74H/Ju2g5hi9EstGOg9Iq4ktOCx5GHpYqxYgc=
Subject key identifier:   95:61:65:29:11:DD:F3:6B:3C:EA:40:E0:7E:A7:CA:60:8B:3B:8C:86
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       4ACD0B9AB2CDF60E63BC093F0DFC08A653087D44
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3230303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Sat 04 Apr 2026 00:30:46 +0000
ROA not before:           Sat 04 Apr 2026 00:25:46 +0000
ROA not after:            Sat 03 Apr 2027 00:30:46 +0000
asID:                     61573
IP address blocks:        2804:25e4:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cd:0b:9a:b2:cd:f6:0e:63:bc:09:3f:0d:fc:08:a6:53:08:7d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Apr  4 00:25:46 2026 GMT
            Not After : Apr  3 00:30:46 2027 GMT
        Subject: CN=9561652911DDF36B3CEA40E07EA7CA608B3B8C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:96:73:69:45:f2:3e:f2:71:9a:cc:e1:96:
                    3a:5c:a8:4a:0d:07:f6:93:47:2f:ad:a2:d5:3b:84:
                    c6:5c:09:63:db:d7:5d:e5:c8:d3:3f:3f:02:a1:c0:
                    8d:21:12:0d:9a:89:77:ff:14:25:b0:c6:3f:15:fd:
                    ed:c9:8b:74:cc:98:22:99:99:56:c4:55:8f:15:5b:
                    16:f9:ac:05:25:88:2f:b6:63:4e:bc:18:aa:4c:d6:
                    8a:b2:7c:5b:43:95:d9:bb:44:d2:26:e0:eb:e1:4e:
                    67:67:20:1e:dd:6f:18:2e:80:f5:fb:f0:79:59:95:
                    7d:ef:25:5f:3e:b4:d0:e1:7b:95:7e:31:ac:55:7e:
                    bb:a8:fe:78:a9:43:c0:7c:6e:98:a7:7f:57:15:01:
                    f3:7d:d1:b2:21:ce:80:cb:00:f6:23:bf:91:7d:6b:
                    17:5d:32:19:68:1a:b5:c3:83:43:e6:72:10:df:99:
                    f1:54:14:31:93:93:04:f1:89:cd:a4:c4:ad:69:d0:
                    4a:82:84:c6:55:ad:94:3c:4b:e2:24:2b:c9:61:ea:
                    75:74:0a:ea:f1:2f:f6:57:f5:80:30:47:75:57:59:
                    a5:82:a7:9c:55:07:60:ee:5d:b0:3b:db:ab:7f:e4:
                    23:5b:37:0d:a1:a5:f1:89:42:28:d8:23:ef:ad:5a:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:65:29:11:DD:F3:6B:3C:EA:40:E0:7E:A7:CA:60:8B:3B:8C:86
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3230303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:bc:ba:d4:7c:b6:ea:91:36:a8:8f:28:7f:e9:23:5b:6d:
         87:05:81:c6:32:78:91:56:6f:68:f1:d2:b7:ab:ac:65:32:ce:
         f4:50:ca:b8:77:86:b5:1f:6f:54:29:8d:90:8d:40:f1:01:14:
         3b:f2:26:36:b5:b6:e5:10:10:61:1c:82:13:16:b7:b1:b8:f5:
         dd:32:62:b8:91:3d:a7:b1:73:14:a1:03:55:79:ec:48:64:ca:
         13:f1:e3:3d:6c:c7:0f:21:df:a3:4a:c2:2d:47:42:92:89:53:
         ad:95:5c:48:0b:97:f4:b5:57:9f:08:40:c5:43:77:2d:94:1e:
         30:be:0d:4d:66:f7:74:e7:84:20:b0:16:46:3d:05:b7:0e:cd:
         02:a7:92:4d:ad:f7:5e:2d:23:65:d6:d5:37:3e:71:1e:23:49:
         fb:89:de:a6:08:07:a5:cf:af:07:21:89:17:60:44:1d:f3:2f:
         da:d1:9b:69:a9:0b:87:bf:b9:95:e1:a1:86:15:18:dc:da:17:
         4b:2b:fb:10:ea:a4:3e:06:52:b7:36:19:79:76:20:03:98:00:
         ca:d9:ae:2a:14:26:ef:a4:cc:9a:2c:d0:8e:3c:41:b1:cc:74:
         1e:d5:ab:6f:a9:33:94:95:96:c9:03:c7:4c:c4:ed:1f:c0:c2:
         af:4a:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:32:01 2026 by rpki-client