Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          k3o4aPWxZGL5FDCYxK/pwCcCWEdfftUqMklr2LExRaI=
Subject key identifier:   EE:ED:18:D7:1E:E2:CD:2D:78:2C:C3:72:88:9A:E5:E9:2C:52:35:1F
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       595C17F0577A962ECB14B5E745ECCBFB940233AC
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa
Signing time:             Tue 17 Feb 2026 13:44:00 +0000
ROA not before:           Tue 17 Feb 2026 13:39:00 +0000
ROA not after:            Tue 16 Feb 2027 13:44:00 +0000
asID:                     61573
IP address blocks:        2804:25e4:70b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 04:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5c:17:f0:57:7a:96:2e:cb:14:b5:e7:45:ec:cb:fb:94:02:33:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Feb 17 13:39:00 2026 GMT
            Not After : Feb 16 13:44:00 2027 GMT
        Subject: CN=EEED18D71EE2CD2D782CC372889AE5E92C52351F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:b7:88:b3:09:c6:df:bf:13:31:00:e8:19:
                    54:cd:fd:cf:72:e4:13:25:5d:52:50:87:a5:9a:40:
                    27:bc:07:d8:76:7b:d5:2c:7a:f6:ac:c4:e0:29:b6:
                    85:52:cd:13:ce:0e:d3:88:98:72:bf:4d:7c:b6:f4:
                    14:54:12:02:87:77:0f:fc:0d:70:f4:5a:4b:18:21:
                    b4:a7:eb:bf:52:07:c0:64:16:8a:84:74:c2:cf:00:
                    9b:ac:7e:c6:b3:b5:c7:b5:59:3e:bf:67:42:dc:02:
                    99:83:bc:1a:45:14:7f:55:31:b8:7a:72:7c:56:82:
                    a7:3c:75:f5:21:9d:e1:f9:30:b3:b0:e8:a7:14:b0:
                    76:4b:86:59:7c:4b:86:09:3c:6b:30:7f:c6:43:75:
                    d5:12:17:84:1a:44:43:56:02:0e:4c:39:11:42:e3:
                    05:d2:af:e0:d6:a8:b0:e4:e7:a3:b7:9b:9d:85:67:
                    08:20:cb:28:ea:36:04:c2:55:7b:14:4e:95:76:68:
                    f6:be:d3:dd:d7:c9:b9:c1:78:3f:28:a1:ea:94:bf:
                    1a:a4:27:d4:3c:af:c3:bf:55:7e:b1:9b:d5:10:e1:
                    07:f0:88:9e:74:bf:18:87:4e:9a:32:c5:63:db:1f:
                    dc:b6:11:88:7d:cd:db:1e:ce:70:f8:1c:98:e6:61:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:18:D7:1E:E2:CD:2D:78:2C:C3:72:88:9A:E5:E9:2C:52:35:1F
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730623a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70b::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:73:bf:08:d0:a1:d7:a0:b5:da:a5:71:28:83:69:5f:f7:97:
         44:ea:f0:79:4a:49:15:57:59:95:85:ca:3e:3a:6e:74:ba:ed:
         b2:45:ff:11:96:1d:b0:1c:9b:4c:ce:14:37:13:60:25:1e:7c:
         a6:14:fd:be:8b:03:bf:25:b6:4c:c5:9a:70:0b:d1:f0:d1:de:
         c1:bb:33:6c:38:0b:c0:8a:28:d8:35:5f:a4:c1:1a:37:5b:7a:
         f7:0a:09:5b:e2:be:14:6f:7d:11:db:38:c3:68:2c:44:dd:f7:
         56:ba:c8:11:43:b8:40:73:4c:2c:16:e1:c8:cc:85:c1:de:47:
         1a:03:b7:4d:41:d3:20:fa:0b:e9:91:d0:b0:9e:cf:f2:06:0c:
         38:b9:88:cf:cc:67:84:96:f6:12:ea:25:85:e4:c3:3d:35:81:
         5d:0f:9a:22:78:80:78:40:0b:09:ed:ac:d5:b9:09:6e:92:41:
         79:17:9e:f4:71:ba:b1:7d:40:26:72:ee:8e:a3:c1:26:fa:f2:
         c6:61:a6:15:1c:92:fe:34:5f:36:1c:36:11:c0:0a:3e:33:93:
         d4:09:13:21:35:3a:7f:39:2e:2a:47:97:b8:f9:09:3e:e3:46:
         7b:fd:66:77:fd:99:31:a9:10:c3:f8:17:b8:37:2a:ae:ca:98:
         6f:5e:0c:9d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUWVwX8Fd6li7LFLXnRezL+5QCM6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNjAyMTcxMzM5MDBaFw0yNzAyMTYxMzQ0MDBaMDMxMTAvBgNV
BAMTKEVFRUQxOEQ3MUVFMkNEMkQ3ODJDQzM3Mjg4OUFFNUU5MkM1MjM1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugLeIswnG378TMQDoGVTN/c9y
5BMlXVJQh6WaQCe8B9h2e9UsevasxOAptoVSzRPODtOImHK/TXy29BRUEgKHdw/8
DXD0WksYIbSn679SB8BkFoqEdMLPAJusfsaztce1WT6/Z0LcApmDvBpFFH9VMbh6
cnxWgqc8dfUhneH5MLOw6KcUsHZLhll8S4YJPGswf8ZDddUSF4QaRENWAg5MORFC
4wXSr+DWqLDk56O3m52FZwggyyjqNgTCVXsUTpV2aPa+093XybnBeD8ooeqUvxqk
J9Q8r8O/VX6xm9UQ4QfwiJ50vxiHTpoyxWPbH9y2EYh9zdseznD4HJjmYcZhAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU7u0Y1x7izS14LMNyiJrl6SxSNR8wHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzIzODMwMzQzYTMyMzU2NTM0M2EzNzMwNjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNjMxMzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQl5AcLMA0GCSqGSIb3DQEBCwUAA4IB
AQAXc78I0KHXoLXapXEog2lf95dE6vB5SkkVV1mVhco+Om50uu2yRf8Rlh2wHJtM
zhQ3E2AlHnymFP2+iwO/JbZMxZpwC9Hw0d7BuzNsOAvAiijYNV+kwRo3W3r3Cglb
4r4Ub30R2zjDaCxE3fdWusgRQ7hAc0wsFuHIzIXB3kcaA7dNQdMg+gvpkdCwns/y
Bgw4uYjPzGeElvYS6iWF5MM9NYFdD5oieIB4QAsJ7azVuQlukkF5F570cbqxfUAm
cu6Oo8Em+vLGYaYVHJL+NF82HDYRwAo+M5PUCRMhNTp/OS4qR5e4+Qk+40Z7/WZ3
/ZkxqRDD+Be4NyquyphvXgyd
-----END CERTIFICATE-----
Generated at Mon Feb 23 06:47:09 2026 by rpki-client