Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa
File:                     323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa (raw, json)
Hash identifier:          LEIpyCTPRR1TYs0ZWYXr0vZITmOvsPGbgK6gakPL3T8=
Subject key identifier:   04:65:AD:A3:C6:30:94:4D:86:A7:DD:4F:CA:99:6A:1F:74:23:F5:AF
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       03D84C49B1CDD4BAA41AE52D70DCAFACE7CEF781
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa
Signing time:             Sat 21 Feb 2026 11:44:04 +0000
ROA not before:           Sat 21 Feb 2026 11:39:04 +0000
ROA not after:            Sat 20 Feb 2027 11:44:04 +0000
asID:                     61573
IP address blocks:        2804:25e4:70d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 04:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:4c:49:b1:cd:d4:ba:a4:1a:e5:2d:70:dc:af:ac:e7:ce:f7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Feb 21 11:39:04 2026 GMT
            Not After : Feb 20 11:44:04 2027 GMT
        Subject: CN=0465ADA3C630944D86A7DD4FCA996A1F7423F5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:1b:10:13:84:c5:b1:c6:a8:d1:61:14:ee:
                    75:05:ca:c3:b3:0a:d7:b1:12:57:6f:39:94:10:9d:
                    06:26:75:de:24:91:9c:66:ea:9b:a2:37:30:40:0b:
                    e9:9b:3d:52:94:b4:4e:2a:73:b3:4a:55:d3:68:2f:
                    d4:82:49:45:7f:01:67:49:a9:57:bc:be:69:85:c9:
                    ea:a0:0d:cd:c8:94:57:9f:85:0d:af:44:e7:dc:08:
                    d5:4e:66:f3:7a:33:b1:19:b6:df:df:1e:32:cd:7f:
                    54:73:98:fd:35:50:cd:5d:7a:2c:cc:21:86:8c:f2:
                    8e:1d:06:5e:cc:b9:38:a0:22:e6:25:cf:af:d9:f4:
                    41:b3:90:80:67:0f:0a:ee:5f:56:51:e7:9b:ab:3a:
                    10:77:03:99:bd:be:9f:36:0d:5a:90:41:2a:f6:84:
                    34:3f:27:c2:1b:90:81:b9:3c:bf:5e:7c:95:29:1c:
                    66:16:22:b9:1f:ac:26:fb:f2:75:dd:35:9b:4e:6d:
                    63:28:19:9f:b2:2b:6f:53:3b:af:21:39:be:87:55:
                    2a:6e:69:09:34:f5:a1:85:66:92:ea:c2:10:b1:05:
                    2f:c8:7a:ab:25:bc:9c:e0:08:41:7a:9d:5c:29:45:
                    76:9f:25:a8:7e:17:53:ea:eb:3a:55:15:19:5b:c8:
                    be:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:65:AD:A3:C6:30:94:4D:86:A7:DD:4F:CA:99:6A:1F:74:23:F5:AF
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3730643a3a2f34382d3438203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:70d::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:73:8a:c8:ab:f4:48:95:36:68:98:6b:4b:87:a3:c0:f7:9a:
         0c:bf:cf:31:0d:fa:fc:49:0f:bd:01:1f:38:b5:e6:d0:9a:9f:
         05:23:67:a5:db:be:ee:a9:6d:a0:98:8b:03:dd:28:65:06:d8:
         03:ca:80:a7:5e:30:0c:f7:6c:65:b0:0d:1c:de:1f:19:38:5e:
         f4:55:12:e8:06:87:df:c6:d6:58:e6:22:03:e4:8e:a2:e7:62:
         22:b5:d8:2d:c9:15:b9:2d:00:5a:bb:c6:39:f3:62:22:25:5e:
         a7:78:81:21:54:6e:6c:10:c8:3b:e2:c7:a5:b6:7f:aa:9f:5d:
         47:03:1b:48:26:be:7a:ab:e9:be:b8:2f:92:82:2c:74:d9:62:
         b1:d3:1c:34:4e:3a:17:d3:65:c1:e2:ab:e5:a8:21:2e:3c:61:
         6d:69:14:d0:e7:b6:44:88:0c:b5:94:65:ba:31:07:73:fe:66:
         a7:cd:0d:b7:cb:70:91:c6:0b:01:08:c2:5d:a2:49:a2:ee:17:
         46:d6:b0:c5:54:8b:99:a0:35:1a:44:bf:df:d1:c5:16:ed:c5:
         40:21:ed:5c:77:84:b9:f7:5f:74:3f:e4:85:8e:60:2a:60:f2:
         50:f1:96:49:94:3c:ed:76:58:0f:50:91:ff:b3:2a:1e:56:c6:
         29:37:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:55:08 2026 by rpki-client