Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37362e302f32332d3233203d3e20323732343138.roa
File:                     3138362e36352e37362e302f32332d3233203d3e20323732343138.roa (raw, json)
Hash identifier:          jzMUFi5yrSewYDAQwgLekQQgiV3zq4RtR2ZPRvzwjjo=
Subject key identifier:   7A:3D:3B:F1:85:EA:29:B4:AF:0D:EB:DE:27:F1:D8:3C:DB:63:47:CF
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       218891422B2CA8DD3E2645C425A74D80FE49AC9B
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37362e302f32332d3233203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:33:33 +0000
ROA not before:           Fri 08 May 2026 20:28:33 +0000
ROA not after:            Fri 07 May 2027 20:33:33 +0000
asID:                     272418
IP address blocks:        186.65.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:88:91:42:2b:2c:a8:dd:3e:26:45:c4:25:a7:4d:80:fe:49:ac:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:28:33 2026 GMT
            Not After : May  7 20:33:33 2027 GMT
        Subject: CN=7A3D3BF185EA29B4AF0DEBDE27F1D83CDB6347CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:5c:20:2e:ab:3b:64:3a:24:b6:f2:93:e8:
                    cc:24:6c:7d:5b:87:ac:26:75:d2:cc:97:95:ae:60:
                    eb:41:a4:31:d3:38:42:91:cf:1c:f0:7b:f8:04:45:
                    7c:a9:79:8f:89:ea:23:ed:f2:e9:6d:6b:1d:0b:ce:
                    5a:20:d9:99:49:da:49:9f:fe:f4:10:f1:be:dc:60:
                    5b:84:55:a3:e9:69:6f:dd:2b:14:01:0f:dd:87:ab:
                    38:17:1b:17:22:53:1f:c3:0f:a7:65:22:0c:f8:7c:
                    ac:7c:e2:0d:2c:45:3e:d3:e9:90:33:87:7c:56:4e:
                    fa:10:93:03:b0:62:d7:35:25:62:a8:6f:dc:72:6d:
                    04:60:78:f2:ad:fc:2f:4b:fd:22:98:79:7d:df:14:
                    d1:58:00:50:35:89:51:da:87:f5:2c:66:32:af:5c:
                    37:86:11:0e:f4:ff:23:24:e3:28:81:92:33:f3:70:
                    9a:78:4a:f8:1a:d2:d1:cd:5a:b6:52:28:f5:5d:1d:
                    d4:5f:54:95:74:13:1e:3f:d0:51:8e:9b:a8:f0:67:
                    25:d8:ef:e9:30:17:38:bc:79:99:f0:b6:d1:bc:00:
                    40:b9:df:12:12:a2:cd:2f:d8:fa:e0:53:a8:8f:2f:
                    72:81:e2:69:cd:33:04:39:d4:bf:3b:57:5a:7c:1d:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:3B:F1:85:EA:29:B4:AF:0D:EB:DE:27:F1:D8:3C:DB:63:47:CF
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37362e302f32332d3233203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:19:c8:04:8c:94:f4:15:ab:29:df:28:36:c7:1a:fd:53:
         34:69:72:9f:75:7a:1f:f6:8f:7d:9c:85:ca:e1:f7:ed:fe:a8:
         7d:40:e3:8e:44:5e:45:bc:c3:31:77:4e:1e:37:a9:40:bf:b0:
         e3:9c:9a:81:18:8e:a7:30:90:8b:df:6d:8f:1e:75:a8:d7:e4:
         7b:30:4b:95:05:4e:c8:8e:c2:b4:f7:11:7c:fe:dd:f7:df:69:
         06:ad:1f:df:ea:8c:36:2e:7a:6e:45:cd:b9:03:dd:5d:7e:8a:
         31:04:c1:44:95:7f:6f:d4:d9:f6:1a:3c:9a:d0:bf:2c:c5:65:
         22:bc:ab:1f:be:09:ab:33:20:7d:51:26:7e:85:a9:9d:fe:4d:
         41:dd:97:d9:d1:48:23:0f:54:74:c5:17:8c:de:61:a0:89:52:
         68:7e:4e:4b:c4:f0:d7:5a:74:39:c7:b2:b9:3e:d9:e5:09:5e:
         70:9e:7a:ad:dd:9c:5a:79:72:a6:16:32:88:18:78:76:54:f6:
         39:fb:44:c1:c4:5a:cf:6a:d3:e1:55:76:b6:f6:93:0f:4c:ca:
         56:85:1f:28:76:b9:ac:67:1f:eb:5b:df:53:62:f2:af:83:ec:
         ee:d3:b8:99:ea:72:f3:7b:89:13:1b:e4:c7:b3:c1:e2:4e:36:
         c9:4d:34:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:02:14 2026 by rpki-client