Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37382e302f32342d3234203d3e20323732343138.roa
File:                     3138362e36352e37382e302f32342d3234203d3e20323732343138.roa (raw, json)
Hash identifier:          AVXQeu+fD/3m19aFc4hi6gkenFWfPdcIxDDS+g65jQI=
Subject key identifier:   09:F7:CE:77:BE:8C:8C:C1:DD:41:8A:62:0A:24:EA:4E:DA:01:0F:3F
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       1145C5E777CC6101F9EB92B71F654F3D4C6195A7
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37382e302f32342d3234203d3e20323732343138.roa
Signing time:             Tue 21 Jul 2026 16:45:53 +0000
ROA not before:           Tue 21 Jul 2026 16:40:53 +0000
ROA not after:            Tue 20 Jul 2027 16:45:53 +0000
asID:                     272418
IP address blocks:        186.65.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:c5:e7:77:cc:61:01:f9:eb:92:b7:1f:65:4f:3d:4c:61:95:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: Jul 21 16:40:53 2026 GMT
            Not After : Jul 20 16:45:53 2027 GMT
        Subject: CN=09F7CE77BE8C8CC1DD418A620A24EA4EDA010F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:b4:18:7e:c7:ef:25:7b:44:82:25:e3:40:
                    69:6a:57:49:0d:3d:26:ac:4b:b1:2a:43:c0:c7:c9:
                    1d:6c:74:19:cb:22:9c:77:75:b1:e2:13:ee:ff:5f:
                    16:6d:33:e2:17:f4:a1:cc:cb:6a:07:29:ff:54:f8:
                    ab:4b:ea:37:e6:6c:48:50:6d:39:33:42:30:8e:f1:
                    e2:9a:7e:ed:6f:bd:8e:21:fd:73:98:94:d0:79:96:
                    ab:16:fe:a8:bf:4a:be:d8:5a:21:36:5b:e0:a3:d8:
                    ff:ec:d8:ad:70:4f:4f:5f:e2:41:70:5a:47:f2:d9:
                    98:58:dc:56:d5:49:26:2f:b2:64:e6:07:6e:bc:17:
                    fa:6a:7a:a3:06:76:72:77:0c:f9:82:08:e8:b4:93:
                    a4:93:3d:92:9f:8b:af:b7:bf:62:d7:a8:7b:6b:16:
                    3f:b6:44:5f:03:20:97:d8:57:57:55:56:fa:9a:e8:
                    11:4b:8f:d4:c0:94:61:95:eb:2c:eb:13:e6:da:e7:
                    1d:ab:6b:81:0c:79:f7:34:6c:d9:98:71:55:c8:e6:
                    65:a3:65:03:2c:dd:2b:7d:58:f0:ca:86:81:72:a3:
                    52:a6:bf:16:06:74:b7:0c:09:64:2c:75:66:95:8c:
                    f5:4f:2b:db:38:8b:d3:a3:e3:b7:cd:7b:4e:47:1a:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F7:CE:77:BE:8C:8C:C1:DD:41:8A:62:0A:24:EA:4E:DA:01:0F:3F
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/3138362e36352e37382e302f32342d3234203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:f5:d6:d6:4c:02:0e:42:54:69:17:f5:11:f3:1b:6b:e2:
         bb:8f:31:ce:70:a7:d2:36:37:51:c0:f1:3e:a8:bc:81:a8:9e:
         9a:3b:10:b7:76:a0:c1:9e:d4:87:96:86:a8:f9:9f:70:8c:7c:
         02:ad:30:b3:a3:8a:9f:b1:6b:eb:92:40:a0:96:5f:6b:e0:e1:
         8f:b9:3e:81:51:11:1f:27:be:17:8d:ce:d6:a2:3b:10:73:68:
         77:24:61:e7:aa:67:97:f3:1b:45:10:0e:ed:03:a9:80:40:db:
         94:33:47:48:68:b6:f4:31:a8:18:7f:cd:b9:a8:3d:5b:13:d4:
         64:1f:d8:cb:dd:ce:1b:ad:98:15:d8:fb:a9:73:45:ec:f8:18:
         8b:42:bd:93:3d:ba:a5:37:35:df:5d:0b:d7:b8:ff:3b:b2:03:
         88:68:7b:e9:b7:69:07:b1:ec:98:3c:70:65:b6:02:19:f4:a0:
         24:39:40:30:9a:44:e1:ff:a1:eb:4c:15:3e:9d:3e:f4:7d:5e:
         e8:a7:23:ef:b5:e4:89:ba:3a:8c:7e:68:15:9a:b4:58:8c:bc:
         1d:9b:b0:c7:94:7d:27:6c:fe:bd:66:d5:b4:26:ac:4c:c7:d2:
         c4:a6:95:2c:af:98:07:9b:41:5d:39:49:9f:25:61:69:a2:79:
         af:20:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:44 2026 by rpki-client