Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37372e302f32342d3234203d3e20323732343138.roa
File:                     3138362e36352e37372e302f32342d3234203d3e20323732343138.roa (raw, json)
Hash identifier:          OYI2uzATQrFRyPlcfew00eRUpbC2Vpj9TJYQnNoOnXQ=
Subject key identifier:   5D:38:0B:1D:2E:54:9D:85:DF:B5:A8:44:BF:16:9F:1E:B8:83:DB:8D
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       22212B137AACBF76B05E5C647C63579F8387F35F
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37372e302f32342d3234203d3e20323732343138.roa
Signing time:             Tue 21 Jul 2026 16:43:53 +0000
ROA not before:           Tue 21 Jul 2026 16:38:53 +0000
ROA not after:            Tue 20 Jul 2027 16:43:53 +0000
asID:                     272418
IP address blocks:        186.65.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 20:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:21:2b:13:7a:ac:bf:76:b0:5e:5c:64:7c:63:57:9f:83:87:f3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: Jul 21 16:38:53 2026 GMT
            Not After : Jul 20 16:43:53 2027 GMT
        Subject: CN=5D380B1D2E549D85DFB5A844BF169F1EB883DB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:1f:b5:f7:ab:32:7b:5e:b6:89:67:e2:c0:
                    a0:26:6f:bf:62:f4:bc:55:52:59:19:1f:10:8c:23:
                    d9:0a:36:53:5f:a0:5a:79:17:13:4d:34:3f:22:69:
                    ee:cb:fa:33:91:94:33:31:64:74:32:68:c9:9c:49:
                    13:a1:3b:ad:bd:52:ea:65:8a:e8:b3:a9:27:f0:22:
                    09:89:f0:74:f0:4b:8a:de:29:27:62:cd:50:51:cc:
                    b0:08:a6:2b:5e:aa:a2:04:07:65:c3:c5:6a:00:f6:
                    5a:06:a2:42:3f:c9:cb:84:79:ce:90:e2:2a:75:39:
                    35:79:8b:d5:71:37:ae:f1:94:3a:8d:58:c3:80:3e:
                    8a:02:70:d9:88:b8:8b:58:2c:4e:cf:39:d2:41:32:
                    f3:c1:23:1d:d6:75:ea:cc:d3:b9:a7:15:5d:a3:b4:
                    a2:0a:f1:06:a8:a0:85:22:cc:3b:7b:21:d4:aa:73:
                    c4:6e:c9:cd:cb:81:a8:4a:eb:08:e9:b8:0e:26:01:
                    79:1a:a7:46:ff:db:27:9b:66:62:67:a6:33:87:b3:
                    6a:b3:8f:81:6e:e8:66:58:cf:fa:71:d7:d0:37:c3:
                    e6:e4:d3:ed:da:f0:d4:2e:7d:0b:12:ba:cd:45:76:
                    07:6f:ac:7c:2a:56:7d:f2:36:31:5a:97:f2:56:52:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:0B:1D:2E:54:9D:85:DF:B5:A8:44:BF:16:9F:1E:B8:83:DB:8D
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37372e302f32342d3234203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:43:c8:f0:22:8e:60:aa:38:42:c0:10:74:13:3c:21:e1:36:
         3b:61:dd:e0:ff:1c:ac:fc:1a:4c:7f:85:c1:14:0c:aa:b1:8e:
         5f:11:e1:66:cf:72:f9:27:97:02:68:17:a8:b0:19:e1:29:8f:
         b0:31:83:4e:63:54:99:ce:42:7d:e7:71:92:3c:16:7d:2c:81:
         9b:1a:94:3e:1e:92:8f:24:92:89:53:27:97:f3:e9:00:f8:65:
         b2:1b:8c:d4:f7:1b:7b:32:00:40:62:dc:21:0e:2f:15:c0:6a:
         1f:84:95:10:a0:3a:d9:fb:e5:90:55:4f:e9:23:7d:13:87:2b:
         12:62:c5:c8:65:61:58:1e:11:3f:aa:03:01:14:12:71:0c:96:
         69:b6:ae:21:43:db:e3:f3:f5:3c:15:a9:27:a8:e1:21:32:ba:
         e3:d6:69:b8:d3:d6:9f:1d:d5:f6:c5:ee:36:57:9f:fb:e2:4e:
         51:95:30:9c:66:57:d3:7e:61:43:9e:d2:82:35:ef:f3:26:11:
         41:35:15:1f:08:39:b0:a2:e7:09:7c:aa:c5:72:8e:a5:c1:a0:
         25:c4:e8:a6:2a:dc:82:d0:36:c5:05:cc:92:d9:b1:44:b8:d3:
         21:ed:f8:76:ea:9d:c6:58:96:22:a7:6b:93:14:f6:3c:ad:35:
         a3:39:e0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:41:46 2026 by rpki-client