Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37362e302f32322d3232203d3e20323732343138.roa
File:                     3138362e36352e37362e302f32322d3232203d3e20323732343138.roa (raw, json)
Hash identifier:          RUmXpvoXBbKfsUxjLdZkqrZM3Rf1yHYFIGZHveORSaA=
Subject key identifier:   DE:1C:1A:7B:2C:92:F1:BA:D6:94:E1:02:FC:A3:3B:B5:37:DF:56:64
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       68B04DD14BA4845241AEC05FAB64DB9A7FB9DD9B
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37362e302f32322d3232203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:32:59 +0000
ROA not before:           Fri 08 May 2026 20:27:59 +0000
ROA not after:            Fri 07 May 2027 20:32:59 +0000
asID:                     272418
IP address blocks:        186.65.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b0:4d:d1:4b:a4:84:52:41:ae:c0:5f:ab:64:db:9a:7f:b9:dd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:27:59 2026 GMT
            Not After : May  7 20:32:59 2027 GMT
        Subject: CN=DE1C1A7B2C92F1BAD694E102FCA33BB537DF5664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:3c:4b:88:69:e3:68:4e:9d:8d:e2:37:25:
                    0a:3f:64:50:64:e5:7f:c3:c4:db:25:10:51:f9:db:
                    ef:66:19:f8:9e:ac:5f:cc:78:b6:ec:7c:72:10:fa:
                    9d:46:60:f6:ba:5a:43:e2:3e:83:f3:6f:f2:82:1a:
                    ca:66:a1:37:86:09:f3:7e:a4:88:6b:d2:66:9a:bd:
                    32:e9:ce:a6:94:9f:03:49:ae:66:d4:91:1d:51:ab:
                    52:a2:18:37:0e:83:f8:0a:c7:82:8d:58:54:d7:f7:
                    3b:66:e9:4a:f1:83:51:6b:e0:3b:e1:50:df:54:f1:
                    42:9f:ce:fd:f6:30:77:47:50:9e:76:e1:7e:ed:19:
                    f2:ae:07:9c:46:c8:a2:b6:33:c2:12:e7:47:7e:8b:
                    24:97:98:8d:1a:c1:d8:a4:00:b8:78:a4:2f:1e:89:
                    93:21:66:ce:a6:e7:7c:cd:b5:62:dc:ee:09:b8:52:
                    4d:ee:49:f6:5a:68:a8:c8:88:54:b4:5e:fe:dd:51:
                    65:dc:2b:f2:c6:d3:d3:b6:25:db:2f:fb:d9:f4:9c:
                    d4:b0:af:8f:74:6b:a3:92:4a:67:82:0f:86:f9:24:
                    44:9e:d5:e8:07:e5:db:6c:92:d4:98:40:dc:9e:ba:
                    cb:80:63:ea:8d:de:97:bb:d4:87:94:7f:31:b3:65:
                    43:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:1A:7B:2C:92:F1:BA:D6:94:E1:02:FC:A3:3B:B5:37:DF:56:64
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37362e302f32322d3232203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:61:00:02:24:c3:14:42:09:a5:4f:b2:de:6a:4e:7f:06:
         f4:80:16:fc:aa:fa:b0:f2:c1:5d:84:bb:39:78:ce:80:c6:61:
         69:d2:5c:b4:6c:c5:eb:d4:d4:83:06:9a:81:4c:99:30:f4:d9:
         74:85:06:97:e7:74:25:7e:17:7f:7c:43:d3:b7:cb:d2:48:e8:
         70:0a:ce:18:b5:e9:92:a2:16:fc:6d:3a:a2:f5:80:c0:cf:b2:
         19:e4:2e:08:94:28:9f:5f:57:4a:1f:ad:b8:3d:6b:4e:67:36:
         39:12:49:bd:76:a1:ef:1c:ee:0a:97:98:6e:c7:53:61:55:d0:
         77:7e:f6:61:af:3a:ee:18:79:e6:af:c8:81:8e:02:6d:d1:98:
         ed:bb:d9:cd:f4:73:8d:f4:4f:86:da:19:83:95:b7:f2:fb:c7:
         04:16:cb:d9:15:5b:fa:f7:42:cc:29:9b:79:d2:0a:03:79:aa:
         d3:d4:5e:31:a2:6a:2a:4f:bb:21:ae:e7:67:f3:29:1c:2e:ac:
         13:5e:e8:f7:ef:2e:39:a2:60:25:65:55:86:4a:20:8d:d5:00:
         a2:1b:f1:eb:9b:7d:c4:f8:e1:45:73:f0:00:40:ed:49:13:b8:
         ea:af:5a:d0:0b:23:33:f9:ca:6c:74:51:04:5a:8e:13:88:6b:
         b2:17:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:02:11 2026 by rpki-client