Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          3+oUo9WH/98NeVIeRc++MrVKLambQpNqf7RcRonB7cU=
Subject key identifier:   00:1B:FD:F0:93:20:E6:68:8F:6E:F5:81:06:E9:B1:42:EE:FF:4E:53
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       44CEF9A642D16C6A640622A29C71897A1E6F0C84
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 04 Apr 2026 00:30:40 +0000
ROA not before:           Sat 04 Apr 2026 00:25:40 +0000
ROA not after:            Sat 03 Apr 2027 00:30:40 +0000
asID:                     61573
IP address blocks:        2804:25e4:701::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ce:f9:a6:42:d1:6c:6a:64:06:22:a2:9c:71:89:7a:1e:6f:0c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Apr  4 00:25:40 2026 GMT
            Not After : Apr  3 00:30:40 2027 GMT
        Subject: CN=001BFDF09320E6688F6EF58106E9B142EEFF4E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:36:a2:d2:b2:ca:ea:ca:75:4d:85:16:98:
                    c0:b1:26:ba:cc:bf:12:e4:58:62:aa:40:c9:92:97:
                    af:0a:31:8a:dd:5f:b2:f6:55:d2:7e:c0:cd:cb:b7:
                    b8:b7:ca:63:ad:c2:bc:e5:a2:3f:d3:d9:38:d4:01:
                    bc:ed:c8:84:4d:b2:50:d2:90:43:5e:c8:2a:cb:11:
                    99:be:1f:e4:cf:fa:e5:1f:79:5e:03:2c:60:59:41:
                    3b:9b:27:ea:ef:17:26:da:1f:44:0a:98:32:8b:27:
                    87:c9:02:8e:27:70:5a:1c:4c:54:56:8a:9c:8e:ef:
                    14:29:7c:14:7c:30:97:80:b0:0b:8d:81:b5:ad:bb:
                    ca:5b:8d:46:6e:88:07:c5:10:5c:d8:c4:71:34:7e:
                    10:c4:70:c6:f4:c8:bc:a3:74:2b:1d:69:ec:72:7d:
                    ad:9f:6b:57:29:d6:3b:34:67:ab:f2:c4:10:b7:73:
                    0e:e8:e9:7c:79:c2:47:50:a2:67:36:03:3b:c3:71:
                    fe:bc:a4:5d:7a:66:c4:6d:a7:c0:a5:0f:d4:ba:54:
                    2e:c9:b8:4c:21:27:11:1c:b6:01:68:40:a9:f3:d4:
                    38:f3:39:00:34:24:17:44:3e:08:f7:0b:b4:02:da:
                    39:9f:2d:d2:88:5f:8a:58:a3:24:a3:25:c1:04:2b:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:FD:F0:93:20:E6:68:8F:6E:F5:81:06:E9:B1:42:EE:FF:4E:53
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730313a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:701::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:86:d5:c2:ab:a1:c1:73:3f:64:0d:95:c8:8d:29:18:99:69:
         90:a7:e9:92:5a:6d:f4:ea:14:a6:e7:9d:6d:b3:fe:d7:15:59:
         72:11:9b:f5:bf:ff:5a:34:14:ed:1c:82:87:56:aa:ca:b4:6e:
         26:6d:a3:63:53:0f:de:33:54:4e:68:b0:1a:18:bd:b6:c7:88:
         13:99:11:63:43:9d:67:f5:a8:56:60:4e:29:04:40:ce:8d:9d:
         69:e2:83:18:55:10:55:47:e7:8b:00:ac:f5:98:4e:76:ad:bd:
         e6:b8:6a:29:94:ef:c6:94:d9:7a:9d:24:31:12:6b:fd:8f:a4:
         e2:0c:ce:0c:62:0e:4e:fb:7e:8c:4d:2a:7b:3b:07:b1:4c:a0:
         b1:8f:13:ff:55:7c:45:91:97:49:56:41:93:ad:99:fc:2f:c2:
         3d:2b:6f:d9:7c:94:96:58:b5:01:4d:d9:e2:26:12:65:74:4e:
         65:af:2d:52:2d:f3:68:02:a0:c2:07:20:da:a5:5a:81:44:72:
         5d:b7:3d:3f:74:81:8e:b3:97:1f:82:33:89:4a:35:a1:05:0e:
         a7:68:c5:5a:70:26:70:75:ee:40:5d:e7:4d:df:8a:eb:ea:13:
         c0:5b:57:f0:5f:ee:e5:40:f0:f4:ec:98:3e:f5:4f:57:2e:ae:
         aa:bd:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:32:38 2026 by rpki-client