Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a3a2f33332d3333203d3e20323732343138.roa
File:                     323830343a383065303a3a2f33332d3333203d3e20323732343138.roa (raw, json)
Hash identifier:          DkPAEYKHB39kQZVZBGxF43Cpr+fCDDDoy8f+iGbWFd0=
Subject key identifier:   27:F7:98:9A:05:07:AA:F5:B8:00:33:28:2E:BF:8C:47:E9:5F:40:D4
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       14250CD2FB711FCFC65610573EB4BBFD6C7A3066
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a3a2f33332d3333203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:31:12 +0000
ROA not before:           Fri 08 May 2026 20:26:12 +0000
ROA not after:            Fri 07 May 2027 20:31:12 +0000
asID:                     272418
IP address blocks:        2804:80e0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:25:0c:d2:fb:71:1f:cf:c6:56:10:57:3e:b4:bb:fd:6c:7a:30:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:26:12 2026 GMT
            Not After : May  7 20:31:12 2027 GMT
        Subject: CN=27F7989A0507AAF5B80033282EBF8C47E95F40D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7b:aa:d9:ff:f8:34:ac:d7:75:a6:3b:c7:b6:
                    27:81:a2:ea:ad:34:29:83:5b:a1:bf:2c:d8:96:c9:
                    1d:4d:81:20:6b:96:79:80:ce:09:65:73:d5:d2:04:
                    43:c8:60:ec:25:67:66:32:5a:fb:50:9a:ea:84:a3:
                    c1:3d:8a:4c:6e:a6:c4:fd:6e:6f:2d:b0:19:79:aa:
                    01:39:eb:f2:ce:a0:8d:10:42:b0:cc:ec:25:70:49:
                    85:96:6f:fc:ed:12:f9:06:94:11:cd:8e:f0:32:e3:
                    26:62:ce:c7:6e:0f:60:88:82:00:3d:c3:89:8f:98:
                    54:f6:3d:5f:56:99:50:47:8f:62:69:38:a4:2f:af:
                    6c:d5:01:57:b6:ff:b7:fc:a7:8b:fe:3f:59:9b:1f:
                    5c:cb:79:59:7f:b8:f1:be:89:f4:f9:84:3a:b2:7a:
                    32:58:63:76:da:64:b9:7e:c4:79:c8:af:2d:03:75:
                    dc:ab:7a:33:df:d2:56:b8:b3:7b:44:9f:07:51:9c:
                    61:59:55:cb:98:95:86:66:4b:d2:26:e4:71:1e:f9:
                    98:22:f7:87:d6:19:0d:60:4b:be:5f:0a:cd:ca:a9:
                    ba:86:c0:0e:2c:55:17:55:67:b6:d8:54:84:ba:1b:
                    03:58:30:43:d5:19:e2:47:a6:40:b7:26:f6:5f:99:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:98:9A:05:07:AA:F5:B8:00:33:28:2E:BF:8C:47:E9:5F:40:D4
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a3a2f33332d3333203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         31:20:b0:73:ec:02:3d:10:6e:64:03:85:a4:26:e7:98:c7:66:
         55:5d:fd:d9:cf:13:30:af:91:5c:0b:30:21:6e:54:17:7a:6b:
         19:f1:b7:65:70:bd:fc:5b:07:ac:6b:e5:2f:2f:7c:c3:89:d5:
         ba:fe:71:85:7f:8b:25:2b:57:a6:02:88:c9:7b:85:9d:a6:8e:
         5f:3b:b9:07:53:25:b3:2e:98:d1:a6:85:31:96:51:59:65:90:
         3b:a2:a2:fa:c5:d1:17:0e:e3:cc:c3:ec:88:60:b2:83:23:10:
         93:bc:03:dc:1c:20:93:34:c7:f5:6f:9f:77:ed:33:a8:6b:69:
         69:97:b3:65:60:41:12:ea:71:2e:a8:3f:3a:43:37:87:90:ba:
         03:5e:da:21:c9:81:8f:77:ac:45:68:b9:4a:f7:4c:5a:f8:92:
         b5:ff:44:5c:58:f7:15:76:3a:87:f1:66:bc:11:4d:51:5d:54:
         fb:6d:40:f5:05:83:fa:0f:20:a9:9c:72:02:79:32:fd:8e:c7:
         08:94:1d:05:16:11:3b:d7:f2:9f:2b:10:6e:0e:1e:b5:dd:11:
         68:6a:15:9b:40:f5:94:1f:d2:06:8f:25:35:12:7a:95:5c:7d:
         2e:c2:a2:8f:9b:11:3b:40:11:e3:44:a8:de:ed:8a:d0:20:3b:
         27:fc:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:47 2026 by rpki-client