Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          w1yAHA1qo6nqjf1T1yeE4N1S74f729F5RWbRpYrrhbo=
Subject key identifier:   46:05:74:22:ED:FD:8C:32:DD:0E:07:65:72:92:4C:C3:40:26:7E:8A
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       2313622F434FB936273A0D6B213C2AA000B11985
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Sat 21 Feb 2026 11:44:04 +0000
ROA not before:           Sat 21 Feb 2026 11:39:04 +0000
ROA not after:            Sat 20 Feb 2027 11:44:04 +0000
asID:                     61573
IP address blocks:        2804:25e4:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 09:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:13:62:2f:43:4f:b9:36:27:3a:0d:6b:21:3c:2a:a0:00:b1:19:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: Feb 21 11:39:04 2026 GMT
            Not After : Feb 20 11:44:04 2027 GMT
        Subject: CN=46057422EDFD8C32DD0E076572924CC340267E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:60:da:26:f6:0a:9f:18:27:56:21:a9:3e:
                    0f:38:66:2e:fe:26:92:36:c9:64:d5:7a:a8:eb:44:
                    1f:7c:dc:e7:9d:5d:d3:9d:a1:8a:f6:d7:09:87:ef:
                    dd:34:e9:05:04:5e:16:53:ee:6b:a0:10:ac:53:0b:
                    2a:2f:7c:6c:4d:95:bc:cb:d2:7a:f5:cd:c4:64:49:
                    15:b4:f9:e4:33:39:a8:25:10:3f:a6:d0:f9:55:d3:
                    c6:2b:0c:fc:ab:c5:ec:a8:b4:02:2c:36:a9:c2:8c:
                    f9:19:a5:dc:9b:9e:72:6f:64:1d:af:fc:56:30:92:
                    0a:9d:5d:ff:4a:7e:11:e0:08:18:4d:1b:1a:13:1a:
                    3c:d9:fe:95:db:85:b0:f5:41:79:7f:68:9a:1a:8a:
                    83:1a:cc:03:65:a8:5e:36:27:e1:e0:ca:4c:91:e7:
                    e7:90:07:6d:32:a8:69:86:93:7c:69:4e:66:b7:1b:
                    92:74:15:e4:b1:55:64:02:01:51:7d:73:fc:97:54:
                    8b:43:0e:f9:95:a4:4b:d1:12:88:4c:6c:f9:27:1d:
                    c5:f8:5d:c3:6a:b0:9d:5c:a7:97:ed:f2:4f:70:e9:
                    43:4e:50:66:01:83:89:a8:5e:47:3e:ba:5f:3d:cc:
                    36:b2:d8:b0:d9:a7:68:59:91:e0:31:39:c9:14:1e:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:74:22:ED:FD:8C:32:DD:0E:07:65:72:92:4C:C3:40:26:7E:8A
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a6130303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:02:08:89:e2:2f:fd:09:79:c2:66:03:07:1f:fe:eb:ae:
         c8:68:d1:d0:1c:97:7a:3c:17:2c:5f:6d:49:c6:b8:18:f0:34:
         3e:a1:98:0a:d1:09:42:b3:68:4c:b2:fc:6f:5f:5d:cb:e1:c3:
         32:e9:33:8d:63:db:5c:b0:7e:35:ec:0b:a3:09:fb:b4:68:e7:
         bb:c0:f9:75:51:47:99:f6:ca:97:27:d2:98:06:1c:36:eb:8c:
         d0:c0:02:ac:11:fa:74:ab:a7:5c:3f:31:6c:3c:de:70:3a:fa:
         2c:dd:07:06:ca:5f:ce:45:45:79:8a:d6:5b:48:41:0f:67:0a:
         b8:a7:e8:87:37:12:3e:81:6d:38:fb:b2:2f:57:af:3f:94:02:
         f1:d7:6c:a6:46:54:56:f9:af:28:25:15:e9:6b:5c:cb:02:17:
         f7:0b:4c:93:0d:a9:e1:c2:a3:6e:f2:b7:c2:a1:34:aa:bd:d4:
         cb:6e:82:e8:7d:b9:72:c6:73:45:61:13:0d:49:4e:0f:d9:5b:
         c8:34:5e:ab:fb:0c:ab:ec:6f:85:1a:ef:ed:6f:05:9e:14:ce:
         61:19:f9:ab:87:ed:92:26:65:0e:1e:f2:c1:63:c0:70:9d:72:
         80:c9:f1:09:c6:ab:a7:0d:a6:49:70:aa:4e:55:9a:fc:d6:29:
         d4:4a:5c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:04:49 2026 by rpki-client