Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          ClPD8FK7YZO3RvSCsq6aeGfEbJHjyrqsWryytzeOefc=
Subject key identifier:   54:25:63:77:04:CF:3B:56:8A:2A:8F:8A:16:90:C0:6D:B8:5A:85:2B
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       15CF9A1D300482A774329E36E8BC0F96E7254318
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa
Signing time:             Tue 17 Feb 2026 13:44:02 +0000
ROA not before:           Tue 17 Feb 2026 13:39:02 +0000
ROA not after:            Tue 16 Feb 2027 13:44:02 +0000
asID:                     61573
IP address blocks:        2804:25e4:70c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 04:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:9a:1d:30:04:82:a7:74:32:9e:36:e8:bc:0f:96:e7:25:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Feb 17 13:39:02 2026 GMT
            Not After : Feb 16 13:44:02 2027 GMT
        Subject: CN=5425637704CF3B568A2A8F8A1690C06DB85A852B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:9f:87:1a:7a:48:58:ff:20:05:31:39:63:
                    ae:1f:86:5a:42:90:ba:ae:a4:cb:53:01:6f:f1:df:
                    24:4e:50:a1:03:7a:79:7f:c6:e4:4a:f1:e8:26:92:
                    41:1f:bc:aa:37:d5:5a:45:2f:e7:83:ad:36:7b:91:
                    94:cf:cb:0c:8d:c5:4b:db:af:e6:83:9c:ad:6f:3d:
                    02:fe:19:f8:b9:0c:91:1b:2b:ca:22:b8:74:cc:df:
                    2e:e7:00:8f:ca:c9:14:e4:7e:7a:77:10:ac:a9:5b:
                    1c:69:0d:1d:64:89:7c:96:db:d4:89:ec:56:45:39:
                    b3:b2:a2:10:fb:03:c7:43:5f:eb:96:38:14:f5:d3:
                    f8:03:e8:54:04:72:38:58:d3:39:6d:57:1f:e5:77:
                    c6:b2:aa:0a:0b:b5:33:70:f5:48:7c:69:cc:dd:f2:
                    68:60:3e:71:3c:e6:36:7b:80:b5:8c:35:3f:35:ce:
                    5f:be:24:2a:fa:1a:69:00:29:56:c5:53:a4:03:b8:
                    6c:ca:7c:d1:72:65:7a:40:54:19:89:d3:c2:22:9f:
                    e5:60:a1:22:22:9d:f6:1f:aa:a7:a5:9d:d7:a4:f7:
                    45:8c:c8:af:6f:0d:64:f2:e0:cd:4a:80:5a:fd:3c:
                    cf:34:14:c2:aa:d4:ed:59:f7:47:62:89:5e:3e:88:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:25:63:77:04:CF:3B:56:8A:2A:8F:8A:16:90:C0:6D:B8:5A:85:2B
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730633a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70c::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:c9:c8:ba:ef:17:c8:25:69:fc:af:8a:14:dc:d4:38:c2:
         71:bf:67:1a:36:c3:fd:38:ab:f1:fe:6d:d5:93:ba:21:57:b8:
         c3:17:e6:29:4d:08:8c:2f:87:d5:21:84:dd:61:e9:05:3b:71:
         8e:6c:3f:28:9d:a7:c6:35:45:be:07:c9:6d:88:77:03:2d:11:
         0d:59:22:ed:f5:ad:09:0f:e4:0e:99:af:2e:b7:7a:f2:9b:bd:
         3a:6e:f3:a6:93:7d:15:e4:f9:1a:e1:ea:be:06:8b:64:27:89:
         8d:a9:b0:94:c3:29:e5:7c:e0:57:0c:00:fb:8b:47:ba:ba:1e:
         d6:23:27:79:8a:e0:a5:37:41:23:ac:54:b1:98:44:5e:5a:49:
         7a:05:2c:ae:b1:db:64:a5:05:96:9a:b6:24:75:86:8b:cd:4d:
         35:82:85:2d:eb:30:06:14:b9:ab:7c:0d:68:f7:9b:e9:0d:74:
         1a:58:3c:8f:d6:39:a1:73:06:68:93:91:62:5d:40:59:b3:a7:
         07:6b:14:91:ca:ad:53:64:9e:7a:60:60:ba:02:b5:ea:df:72:
         a0:b3:62:7a:7c:78:05:ec:e5:35:cf:14:96:77:64:5e:9f:01:
         8b:92:81:d5:4f:b5:bd:4c:ff:d4:11:8b:8b:40:9e:79:c7:70:
         28:cc:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:47:44 2026 by rpki-client