Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a613030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a613030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          rcwL1offiOyG5o1eDe9ElPURVzphLx+KEW/xQx3AGSU=
Subject key identifier:   4A:E3:4D:85:71:48:9F:EF:3D:D7:E7:F7:68:6B:FC:29:A1:98:9F:5A
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       552E319C38E02B9F7BD9853D4C3409966DF75A64
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a613030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:31:37 +0000
ROA not before:           Fri 08 May 2026 20:26:37 +0000
ROA not after:            Fri 07 May 2027 20:31:37 +0000
asID:                     272418
IP address blocks:        2804:80e0:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2e:31:9c:38:e0:2b:9f:7b:d9:85:3d:4c:34:09:96:6d:f7:5a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:26:37 2026 GMT
            Not After : May  7 20:31:37 2027 GMT
        Subject: CN=4AE34D8571489FEF3DD7E7F7686BFC29A1989F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:47:7b:fe:1f:06:68:1a:e0:38:3f:d2:41:
                    b8:bd:84:88:44:a4:02:dd:79:05:aa:47:c0:f5:73:
                    8e:ec:80:99:95:c3:17:25:f5:d5:c8:23:23:7f:60:
                    a3:d9:f1:18:13:58:8d:ad:d9:94:a1:26:f9:fa:71:
                    f1:63:63:dc:70:ca:82:47:64:94:2e:d4:fc:ef:d4:
                    89:34:06:a7:4b:2e:82:89:10:da:9b:43:7c:e6:42:
                    6d:6d:a8:b1:f8:7b:35:b4:03:0f:52:60:a9:32:50:
                    3a:c2:c4:4f:3a:4a:fd:2f:23:6d:bb:c0:46:a5:aa:
                    36:2e:9d:d6:9e:99:0e:52:de:d8:a4:dc:04:08:00:
                    f5:fd:a7:5d:b3:4f:6a:b1:ce:cc:f3:8b:98:9b:d7:
                    09:10:e6:e2:87:74:30:47:a1:c5:58:7d:e8:ad:af:
                    d0:25:07:9b:cf:c5:14:7a:8d:26:e8:7d:c6:2a:df:
                    b4:4d:88:70:68:1c:a4:a5:e3:57:83:cb:d7:69:77:
                    14:4f:ad:e1:80:8f:1e:c5:b8:5f:6f:22:ae:3a:ad:
                    e8:8b:dc:ed:40:ae:7a:a5:33:12:32:db:c8:ad:57:
                    69:ec:b7:62:b7:31:ab:65:4a:24:38:54:0c:a7:eb:
                    79:ea:b8:d5:1e:e1:7c:3d:9b:28:92:8c:7b:ca:02:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E3:4D:85:71:48:9F:EF:3D:D7:E7:F7:68:6B:FC:29:A1:98:9F:5A
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a613030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:63:b8:b1:3a:6d:26:f6:2b:9b:7e:d7:e4:30:58:9f:17:40:
         a9:4f:ba:b9:8f:dc:3f:37:c4:96:5e:56:ee:b4:f6:44:79:46:
         7b:ea:b4:97:78:40:a3:04:98:ce:dd:73:e4:b1:a3:63:cf:35:
         a8:19:0e:07:40:9d:57:62:6c:5a:38:97:36:54:88:93:c6:d1:
         91:3a:62:95:f4:98:e0:a7:a1:96:eb:db:bc:62:c0:05:43:6e:
         bd:9d:cc:82:ab:63:c1:f5:77:7c:e4:f7:a3:c9:41:d6:ae:a1:
         89:83:25:5b:a7:80:80:db:3c:b2:b8:0b:ea:56:65:0c:5b:6c:
         29:1a:df:d6:d3:1a:35:a9:af:66:99:5d:c0:cf:c5:4f:23:6e:
         5e:6d:39:c7:c5:a6:95:f2:a4:c7:86:e5:d6:f0:0b:7a:94:f5:
         99:27:c9:92:aa:47:87:bb:a9:94:3a:28:1b:c8:f6:13:d5:42:
         8b:df:f5:50:6c:2a:9f:4d:88:db:a9:99:e2:3c:d9:9f:4b:66:
         9f:be:97:b1:12:39:90:6d:61:78:03:ee:64:29:24:8f:10:97:
         d3:8d:7b:6b:ba:6d:af:64:bc:be:67:b6:13:d3:99:3f:4d:74:
         cb:a1:84:af:43:69:09:0f:7c:ac:27:3b:59:7f:e1:3e:7e:04:
         5c:ac:a8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:30 2026 by rpki-client