Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          EXVU4R+jN/A3fu9KeuKCKd9r7zhlwxwAqhILhUSfjVI=
Subject key identifier:   B0:57:F4:8B:C7:A7:BF:83:AC:FD:B3:0A:21:45:C6:19:D9:E4:E6:40
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       1BFECFB2C501F7EF62863D79AEEA5A31D611299F
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:31:20 +0000
ROA not before:           Fri 08 May 2026 20:26:20 +0000
ROA not after:            Fri 07 May 2027 20:31:20 +0000
asID:                     272418
IP address blocks:        2804:80e0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fe:cf:b2:c5:01:f7:ef:62:86:3d:79:ae:ea:5a:31:d6:11:29:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:26:20 2026 GMT
            Not After : May  7 20:31:20 2027 GMT
        Subject: CN=B057F48BC7A7BF83ACFDB30A2145C619D9E4E640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:0e:5d:55:f4:8c:98:74:38:9a:f3:55:43:
                    df:82:85:95:88:cc:25:a4:c7:9f:d0:41:35:55:d2:
                    65:d7:86:6e:69:50:44:94:f2:3b:26:8d:a8:7d:b2:
                    e0:b8:8a:ed:a4:b2:2b:33:fb:d1:f0:01:29:a3:22:
                    42:ff:c8:29:a3:38:7d:91:72:bd:23:3d:62:0e:a3:
                    bb:9a:3e:e4:de:3a:95:19:48:05:dd:8d:07:25:43:
                    6b:81:43:52:e8:b7:20:7a:d8:57:c5:bc:f6:37:c9:
                    56:ae:27:c7:6f:51:5f:1b:a4:d7:2b:b5:2c:91:f8:
                    fc:66:cf:a3:1a:0a:ae:2e:a1:4a:44:ca:29:de:f0:
                    43:d9:4c:79:af:8d:0e:8b:92:a1:b1:1c:44:0e:55:
                    91:9c:cc:08:54:c8:8d:82:ac:ea:42:a2:07:6a:96:
                    0a:75:33:79:52:03:6b:46:fa:02:3f:ef:76:3f:6d:
                    f0:d5:c6:04:9c:99:e4:0d:5a:23:06:c7:3e:6d:d3:
                    46:34:91:e8:18:82:97:98:69:12:d8:72:6e:33:43:
                    f3:a5:55:90:f8:41:16:5b:37:71:da:3d:99:b7:d0:
                    ea:8d:31:7d:3a:b2:7f:18:1a:1c:48:0d:a1:09:4b:
                    e6:40:35:92:f6:22:47:80:c1:38:6f:93:9d:38:ba:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:57:F4:8B:C7:A7:BF:83:AC:FD:B3:0A:21:45:C6:19:D9:E4:E6:40
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:55:c3:f2:5c:79:6d:7b:ec:66:ea:fe:26:86:fb:ef:fa:
         4b:04:ea:71:75:fa:26:87:b2:f3:92:35:4e:64:4f:f2:75:6d:
         1e:57:5f:a5:5d:da:c3:42:07:4d:11:c2:10:76:a0:67:e5:f1:
         0a:28:1b:dd:cb:ef:dd:f2:45:33:0c:0a:19:da:fb:78:a1:8b:
         60:0d:fa:3f:23:0e:0a:64:e5:b5:f1:86:83:9f:73:d7:6d:42:
         bc:fd:30:35:89:3a:67:71:5c:47:2e:b1:ff:38:d6:48:eb:d1:
         de:eb:50:0d:42:75:18:1c:76:2c:44:86:b3:7b:17:c6:06:8c:
         42:66:f5:76:45:39:91:91:7a:9a:98:0c:a4:d4:cb:b0:93:b6:
         d2:39:03:1f:9e:ed:c0:1f:5b:2c:a5:2c:85:59:fe:2b:d9:06:
         77:d3:0b:1d:c3:b3:ae:5a:07:a9:2f:b2:61:6d:3d:49:16:fa:
         57:8a:a2:29:34:83:16:14:3b:12:b1:90:70:01:b0:6b:f6:64:
         65:a1:69:fb:87:65:c5:43:dc:68:3e:6f:29:53:7c:e9:66:88:
         3b:25:69:17:b9:26:a5:78:49:41:48:6b:b1:22:0b:a1:b5:d2:
         8b:63:43:b9:c3:1d:b7:eb:58:b2:57:5b:64:07:11:c6:cb:ec:
         e1:d3:5d:43
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUG/7PssUB9+9ihj15rupaMdYRKZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDREVBMkIzOUM1ODk0QTYyM0I5NDMyQjZDRTlENjA1
Mzc4M0I3ODAeFw0yNjA1MDgyMDI2MjBaFw0yNzA1MDcyMDMxMjBaMDMxMTAvBgNV
BAMTKEIwNTdGNDhCQzdBN0JGODNBQ0ZEQjMwQTIxNDVDNjE5RDlFNEU2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbg5dVfSMmHQ4mvNVQ9+ChZWI
zCWkx5/QQTVV0mXXhm5pUESU8jsmjah9suC4iu2ksisz+9HwASmjIkL/yCmjOH2R
cr0jPWIOo7uaPuTeOpUZSAXdjQclQ2uBQ1LotyB62FfFvPY3yVauJ8dvUV8bpNcr
tSyR+Pxmz6MaCq4uoUpEyine8EPZTHmvjQ6LkqGxHEQOVZGczAhUyI2CrOpCogdq
lgp1M3lSA2tG+gI/73Y/bfDVxgScmeQNWiMGxz5t00Y0kegYgpeYaRLYcm4zQ/Ol
VZD4QRZbN3HaPZm30OqNMX06sn8YGhxIDaEJS+ZANZL2IkeAwThvk504ulntAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsFf0i8env4Os/bMKIUXGGdnk5kAwHwYDVR0j
BBgwFoAUQM3qKznFiUpiO5Qyts6dYFN4O3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjJFZkFFTGJWY3p4R3d1a2NtRHJvcjhkakdtZUFYU1ZWdDdTNWU3d1ZS
ekgvMC80MENERUEyQjM5QzU4OTRBNjIzQjk0MzJCNkNFOUQ2MDUzNzgzQjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQ0RFQTJCMzlDNTg5NEE2
MjNCOTQzMkI2Q0U5RDYwNTM3ODNCNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIyRWZBRUxiVmN6eEd3dWtjbURyb3I4ZGpHbWVBWFNWVnQ3UzVlN3dWUnpILzAv
MzIzODMwMzQzYTM4MzA2NTMwM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMjM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEgOAwMA0GCSqGSIb3DQEBCwUA
A4IBAQBV7FXD8lx5bXvsZur+Job77/pLBOpxdfomh7LzkjVOZE/ydW0eV1+lXdrD
QgdNEcIQdqBn5fEKKBvdy+/d8kUzDAoZ2vt4oYtgDfo/Iw4KZOW18YaDn3PXbUK8
/TA1iTpncVxHLrH/ONZI69He61ANQnUYHHYsRIazexfGBoxCZvV2RTmRkXqamAyk
1Muwk7bSOQMfnu3AH1sspSyFWf4r2QZ30wsdw7OuWgepL7JhbT1JFvpXiqIpNIMW
FDsSsZBwAbBr9mRloWn7h2XFQ9xoPm8pU3zpZog7JWkXuSaleElBSGuxIguhtdKL
Y0O5wx2361iyV1tkBxHGy+zh011D
-----END CERTIFICATE-----
Generated at Wed May 13 19:01:35 2026 by rpki-client