Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          D4gpJ+aUFurVmDYtMUR6d+GHL1GX3HZ8t9Sm4IHWOEg=
Subject key identifier:   4B:56:EA:CF:2E:04:4A:39:DB:23:52:20:64:32:5D:71:1D:F3:6F:DD
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       61B292A886809EB122037AC2047B612FAE715771
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 04 Apr 2026 00:30:44 +0000
ROA not before:           Sat 04 Apr 2026 00:25:44 +0000
ROA not after:            Sat 03 Apr 2027 00:30:44 +0000
asID:                     61573
IP address blocks:        2804:25e4:709::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 10:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b2:92:a8:86:80:9e:b1:22:03:7a:c2:04:7b:61:2f:ae:71:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Apr  4 00:25:44 2026 GMT
            Not After : Apr  3 00:30:44 2027 GMT
        Subject: CN=4B56EACF2E044A39DB23522064325D711DF36FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:26:58:4e:48:5f:bf:f0:74:e3:4e:22:60:
                    0a:cd:27:65:fc:75:e2:3a:19:7b:24:47:17:75:d3:
                    b5:a6:c3:b1:91:05:3e:78:39:8b:80:b7:f3:ff:51:
                    b9:68:a5:f6:10:7e:f4:9c:31:d4:d7:c3:56:79:bb:
                    75:1a:8a:83:36:f6:03:fc:a5:3f:12:0e:47:25:73:
                    35:63:73:96:9d:43:75:aa:1e:91:9b:56:6c:33:ad:
                    37:45:0c:7a:86:a5:29:31:87:da:b6:f7:20:9b:22:
                    84:6f:19:d0:56:e4:56:f6:75:dd:e2:f4:59:fb:08:
                    1b:c9:f5:bb:ca:0d:8c:16:0d:01:76:77:f2:46:b5:
                    12:d1:c7:c9:e6:54:f7:09:ab:bb:7f:49:6f:ab:06:
                    80:3c:5d:53:eb:62:fc:b7:f7:cc:34:c5:ec:de:75:
                    06:bf:4c:7a:2a:01:08:cc:a0:15:63:88:ae:e5:79:
                    d9:23:ce:36:74:fb:bb:19:02:92:41:b6:57:6f:1c:
                    6c:bc:09:a1:c1:df:3d:a0:8d:e4:a3:50:87:6b:74:
                    44:2a:d9:22:7b:16:40:53:0b:18:99:dc:9b:57:79:
                    a2:a5:11:fc:e8:dc:21:27:b4:7c:90:70:9a:4f:d8:
                    84:cb:5d:84:c3:f8:40:0f:43:a5:15:89:89:3a:ae:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:EA:CF:2E:04:4A:39:DB:23:52:20:64:32:5D:71:1D:F3:6F:DD
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730393a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:709::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:4f:a6:f1:76:69:1e:ac:00:f1:9c:98:65:92:e3:f5:9c:
         a1:e2:f9:ff:f4:37:6e:c6:74:a2:56:79:f4:52:8b:17:29:53:
         54:2a:0f:22:09:96:6f:86:28:4c:e3:55:1e:cc:f6:30:ae:da:
         02:f7:24:19:4d:90:ec:3f:4e:8b:ce:33:84:c2:24:e0:59:e5:
         43:73:90:a6:f2:7b:1f:45:2f:e3:a6:94:a6:b2:cd:62:10:ac:
         c9:45:18:20:fb:1a:ca:19:f0:3a:9f:47:ec:1b:6e:04:67:46:
         1e:02:86:32:e8:90:54:00:ed:0c:0a:a7:6c:61:79:b5:ac:5c:
         a8:c6:2a:c0:e3:4a:ad:28:2e:8d:f4:26:64:58:67:35:98:ce:
         80:5d:8d:73:6c:7f:ad:9c:e6:e8:02:79:12:b7:d0:2f:d2:4b:
         4d:d4:a2:c0:b6:c4:1c:f3:d6:d0:16:8c:f4:b9:7e:f2:b6:87:
         9e:8d:e2:27:4c:1b:f6:6a:28:d8:be:3f:ff:c3:43:63:bb:77:
         63:c8:01:f1:d3:ed:03:c3:15:af:f8:c0:d1:27:c4:27:e2:34:
         de:d1:2a:3b:2f:ef:43:09:8b:df:bb:17:48:dd:89:c2:8c:cd:
         87:0f:db:49:6a:66:df:c2:ab:85:0f:40:28:c0:9b:eb:73:ad:
         1d:18:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:32:34 2026 by rpki-client