Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a353030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a353030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          p2mq4FKvK9r+upglXWd3QWUJFn6v1ylg2MCG1PG5k34=
Subject key identifier:   11:02:E7:C0:0F:A9:48:41:7E:8A:06:87:81:75:F6:6E:16:C5:24:7A
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       400D8420D5EE429338E3EAE54217895FC7A2E4BF
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a353030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:31:24 +0000
ROA not before:           Fri 08 May 2026 20:26:24 +0000
ROA not after:            Fri 07 May 2027 20:31:24 +0000
asID:                     272418
IP address blocks:        2804:80e0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0d:84:20:d5:ee:42:93:38:e3:ea:e5:42:17:89:5f:c7:a2:e4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:26:24 2026 GMT
            Not After : May  7 20:31:24 2027 GMT
        Subject: CN=1102E7C00FA948417E8A06878175F66E16C5247A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:f9:18:8d:b5:83:3b:3a:e2:25:6a:e9:db:
                    31:69:a4:7f:d3:e5:fe:4a:ad:8a:42:f4:1d:d3:a1:
                    3c:34:a7:a9:86:eb:88:ec:b5:17:a0:09:77:80:f4:
                    af:7c:c6:8e:1f:8a:89:5d:c4:e6:9e:b1:3f:1a:68:
                    02:97:e2:df:0c:ce:55:b2:a4:78:75:b3:56:68:ac:
                    c5:12:bb:c9:e2:ff:a4:e1:bc:db:91:f4:4b:35:58:
                    d4:f0:1c:ef:e6:da:42:ad:ec:78:95:e7:3a:5c:3c:
                    38:b1:5e:c2:9c:e8:ab:3d:aa:f9:8c:1b:85:cd:a5:
                    9e:3a:08:17:2e:ae:f5:a5:c4:a3:54:78:32:3f:53:
                    9f:11:24:b7:8b:4e:df:16:88:cc:bb:b8:d2:7d:7a:
                    ed:b5:2e:c4:f7:c7:d6:34:c8:b5:ba:9f:33:08:07:
                    78:cd:42:90:87:a4:19:b6:41:01:db:f9:5a:73:17:
                    38:34:82:31:af:79:68:72:82:bd:1a:25:3f:75:e6:
                    c3:cb:d8:6b:58:bf:81:ae:be:5c:62:16:e5:af:30:
                    ff:2c:21:75:6d:0d:a3:78:f0:71:ca:dd:26:d8:0c:
                    00:f0:0a:1d:a4:54:c5:ef:d8:9a:46:2e:8a:aa:a7:
                    1e:57:b7:a9:96:e6:4d:fd:0a:d6:55:1f:d2:f5:7c:
                    4e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:02:E7:C0:0F:A9:48:41:7E:8A:06:87:81:75:F6:6E:16:C5:24:7A
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a353030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:9e:06:20:43:b9:92:0e:c6:33:34:6d:77:e5:33:09:d6:
         4a:87:68:ce:7c:f1:b4:fc:46:93:b7:f6:16:a5:a4:fe:d0:55:
         62:44:97:e3:5a:c9:9e:b1:94:de:86:09:02:53:aa:58:1a:8e:
         21:42:f6:d9:96:47:e5:41:c9:be:5c:87:c9:18:2f:e6:ac:44:
         1f:8c:d1:0f:9f:c5:ae:17:21:1b:f4:4b:a1:97:02:5e:69:f0:
         9a:fc:30:c2:c1:19:26:ec:88:40:2b:e9:00:2a:03:4b:3b:95:
         b0:fd:02:f2:9e:64:66:d7:af:f8:fc:de:3f:9e:e5:0a:c0:f2:
         8c:64:02:3f:2f:84:88:69:44:4d:e6:f5:9a:0c:d1:7f:a6:04:
         ed:f5:58:7f:94:ad:77:ac:2b:1c:bc:77:77:e4:0a:ea:00:89:
         b7:bf:80:b8:3f:34:3c:0d:db:93:0a:bc:fb:29:26:7d:84:25:
         cc:d8:3b:b4:a9:e4:57:4d:05:db:9e:d5:94:2c:a2:5f:26:f5:
         1f:50:f0:3a:f3:bb:22:7f:12:38:17:b5:5d:5c:04:fa:fe:a6:
         77:5d:86:7b:51:dc:ce:2b:df:62:96:18:51:24:4c:54:5e:8d:
         ee:3c:a6:81:8c:d5:eb:89:5f:4a:6c:c3:20:a8:2d:3f:81:0c:
         dc:e9:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:43 2026 by rpki-client