Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a633030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a633030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          WoeUr6GmzaQRuJw4tsf6nYsfnswPXwKuXn/8Wp5X668=
Subject key identifier:   44:20:2E:34:95:6D:FF:0A:7C:0B:FE:BD:AA:A4:30:D4:E1:97:68:28
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       0400260F21F57BD6515B2049CDCE8CE733D7A65E
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a633030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:31:41 +0000
ROA not before:           Fri 08 May 2026 20:26:41 +0000
ROA not after:            Fri 07 May 2027 20:31:41 +0000
asID:                     272418
IP address blocks:        2804:80e0:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:00:26:0f:21:f5:7b:d6:51:5b:20:49:cd:ce:8c:e7:33:d7:a6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:26:41 2026 GMT
            Not After : May  7 20:31:41 2027 GMT
        Subject: CN=44202E34956DFF0A7C0BFEBDAAA430D4E1976828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:d6:37:00:45:c4:21:d6:2a:8c:45:19:ca:
                    d5:e2:7e:19:e8:b9:6b:67:56:8a:8d:0f:36:68:de:
                    06:83:51:18:92:c5:f5:4f:2d:23:d8:29:4f:7e:34:
                    d8:45:37:f0:d2:f8:1f:69:c5:81:08:61:bf:12:9b:
                    f9:1f:e3:01:29:4e:3b:e4:d6:79:b1:26:d4:cd:09:
                    dd:a6:5a:16:65:f4:3f:90:d5:07:95:94:19:0e:25:
                    25:f4:a9:b1:3d:d4:90:30:8d:ff:f2:de:ff:a0:6b:
                    52:05:b1:0f:bc:8e:f8:62:9a:08:90:3b:62:20:bb:
                    c2:52:69:c3:9f:02:18:1c:ad:ef:c9:8c:af:b5:6d:
                    c6:b5:7e:63:a5:a0:2a:be:48:26:b5:2a:b0:3e:ab:
                    b2:6a:41:1a:7b:c4:d5:7f:30:d3:37:b7:95:2b:1e:
                    20:41:1a:3a:63:b6:fa:9c:9c:16:00:8b:59:d7:23:
                    0e:95:35:de:84:f0:66:58:d8:93:ce:0e:47:da:13:
                    49:0e:c3:93:cc:33:37:11:da:0c:d6:e6:7f:8e:85:
                    dc:04:83:d5:d2:40:fa:c9:7b:0c:e3:18:31:36:33:
                    9f:27:ea:79:66:dd:59:66:8b:32:b3:47:e6:b7:14:
                    84:ab:42:8a:be:92:a7:55:9d:1b:ba:3c:0c:b3:fb:
                    9d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:20:2E:34:95:6D:FF:0A:7C:0B:FE:BD:AA:A4:30:D4:E1:97:68:28
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a633030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:12:bb:4b:35:34:f4:37:4a:80:be:18:5e:50:90:d5:4a:6b:
         13:77:cb:19:32:80:77:3b:a9:f8:22:33:03:96:db:d0:be:b4:
         2c:2a:60:4e:91:d2:f6:4d:a1:bc:d5:2b:d1:22:0c:aa:6f:df:
         76:58:37:a4:e4:bb:1c:78:72:69:8b:ef:04:a0:40:ee:96:fd:
         7e:75:75:d6:b2:c4:43:bf:02:2e:1f:2a:67:e6:ee:29:2d:ec:
         93:cf:21:42:29:95:f3:a0:42:0e:d6:84:49:70:be:86:5f:fd:
         46:22:94:69:db:44:eb:fb:a0:e7:b1:e3:d3:ef:f7:11:93:6b:
         a8:d4:af:59:32:9a:53:50:55:2c:f9:22:10:6c:23:80:a4:e7:
         24:6f:7e:45:cc:94:20:fc:e7:4a:d1:47:22:83:98:58:d2:8b:
         6d:3a:df:40:b4:04:42:3a:a2:76:59:ee:b5:9a:92:61:c0:32:
         cb:24:f2:d9:32:22:a0:b6:74:4a:4a:09:20:64:57:d4:95:35:
         2d:f3:fc:22:54:1b:d6:24:43:67:fb:eb:e0:10:17:60:90:c7:
         f0:a9:7e:70:b0:af:fe:bc:3f:40:1c:67:69:4d:b9:13:a5:3a:
         53:57:e8:4b:24:38:b3:44:c5:b9:35:d5:1d:34:8a:a3:95:dd:
         fe:6f:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:01:35 2026 by rpki-client