Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          kUx8+Oo3Kvik8QIrEZF7oC+l0XwbXkwb7+d4ZIWhtGM=
Subject key identifier:   29:D2:0C:6A:CB:E7:37:08:84:B8:F5:8B:78:B8:99:0F:7F:0D:D4:72
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       5FE01DF2A593C6A20615AFA1CE36ADE036B89F68
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:31:39 +0000
ROA not before:           Fri 08 May 2026 20:26:39 +0000
ROA not after:            Fri 07 May 2027 20:31:39 +0000
asID:                     272418
IP address blocks:        2804:80e0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e0:1d:f2:a5:93:c6:a2:06:15:af:a1:ce:36:ad:e0:36:b8:9f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:26:39 2026 GMT
            Not After : May  7 20:31:39 2027 GMT
        Subject: CN=29D20C6ACBE7370884B8F58B78B8990F7F0DD472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:45:4e:4b:12:4a:3c:72:7f:31:46:c3:3b:
                    41:61:21:2c:08:27:0e:ee:9e:5f:0c:52:72:89:f9:
                    25:1c:c1:3a:73:a8:85:9e:23:d8:03:40:7e:4e:0a:
                    34:7a:7c:f9:9a:ad:07:1a:25:4e:a4:31:49:09:e7:
                    35:71:84:07:89:24:c3:e4:7b:84:a3:f5:3b:89:80:
                    47:3d:88:4d:dc:ac:b5:f7:46:ff:03:b6:a5:30:12:
                    27:ac:64:dc:c8:30:a6:af:07:f7:67:49:b3:3a:fe:
                    72:53:82:c2:d1:f3:25:74:47:0d:04:ca:4b:4d:64:
                    2e:31:5c:5b:69:e8:57:ce:86:59:23:9e:d8:12:c3:
                    5b:fc:5a:a3:68:c6:e4:58:65:53:f4:5a:9f:2a:3c:
                    23:0b:f7:bc:3e:14:2c:89:e3:e5:f8:e1:9a:67:44:
                    07:3c:96:ef:82:b0:51:79:72:00:75:db:36:85:e6:
                    df:1d:2c:52:cb:88:45:32:ac:d3:b9:49:f5:a5:05:
                    1a:b0:64:03:46:c7:3e:34:30:03:fc:75:d6:fc:a9:
                    a9:33:70:bb:d9:65:bb:47:53:fe:c3:e0:fb:94:73:
                    92:3c:78:34:37:92:8f:dd:cc:dd:b1:cc:a5:bd:b0:
                    41:58:a1:64:30:af:02:97:3c:28:5d:23:ef:f7:06:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D2:0C:6A:CB:E7:37:08:84:B8:F5:8B:78:B8:99:0F:7F:0D:D4:72
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:17:19:a9:ce:df:3f:56:bb:46:69:70:83:cc:85:29:7a:d0:
         ae:4e:ca:16:0c:89:85:46:49:23:3b:4c:62:fe:5d:10:22:49:
         97:00:d1:79:20:63:ac:f0:f4:a9:84:84:07:74:ca:68:e0:b8:
         81:32:30:7d:da:f2:40:d7:ab:55:40:0e:f7:80:6c:9c:d4:de:
         89:23:4c:af:75:78:58:6f:d4:37:cd:4b:6b:dd:f9:26:fb:a8:
         7a:b4:08:d0:5a:c5:08:32:26:1d:4e:32:88:44:ac:17:da:bd:
         25:19:1e:fd:d6:69:c6:03:fa:31:33:91:60:f7:d7:b8:ae:77:
         75:16:cc:9a:f8:c5:06:b9:d5:8b:f2:5d:32:52:1d:10:02:43:
         61:46:3f:87:57:c9:77:a4:68:a5:28:69:e5:f2:0a:0f:d5:10:
         7b:90:5d:75:e2:70:76:f7:5e:5f:21:6a:3a:7e:09:42:78:a6:
         60:a5:2e:43:9e:69:60:5e:02:f8:75:fb:4c:0a:d2:dd:67:4c:
         f7:7a:82:e5:38:11:d4:f2:64:18:63:bb:ce:25:b6:e3:3e:7b:
         58:42:1e:89:14:fb:0d:8b:b5:53:5d:41:8e:c7:30:09:16:73:
         9f:51:36:2b:d7:13:cb:42:b2:26:a7:46:c5:18:38:16:03:01:
         44:42:31:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:27 2026 by rpki-client