Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a643030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a643030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          5HVh9xpIt1npr7Y7ga8SzjlhGkfZaWsUqfrImMo9fCI=
Subject key identifier:   39:21:3A:9C:A5:5F:CC:AA:7E:3F:0B:82:39:BE:6A:04:B7:02:18:FB
Certificate issuer:       /CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
Certificate serial:       70E935F8AFE254CA7FA7BDA1F05473CC5027C106
Authority key identifier: 40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a643030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Fri 08 May 2026 20:31:43 +0000
ROA not before:           Fri 08 May 2026 20:26:43 +0000
ROA not after:            Fri 07 May 2027 20:31:43 +0000
asID:                     272418
IP address blocks:        2804:80e0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl
                          rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:35:f8:af:e2:54:ca:7f:a7:bd:a1:f0:54:73:cc:50:27:c1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CDEA2B39C5894A623B9432B6CE9D6053783B78
        Validity
            Not Before: May  8 20:26:43 2026 GMT
            Not After : May  7 20:31:43 2027 GMT
        Subject: CN=39213A9CA55FCCAA7E3F0B8239BE6A04B70218FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:b2:23:e9:8f:65:04:4f:a1:88:0a:7f:e9:
                    09:ec:24:d6:1b:45:ea:9b:36:6f:94:fc:45:5c:84:
                    2d:95:af:51:af:42:18:d0:da:86:79:6a:c0:22:aa:
                    ad:3d:8a:16:fb:0d:ed:3a:28:5a:d9:3d:03:21:3e:
                    42:8a:8b:00:ff:0b:2c:46:3d:3e:8c:c1:d9:bd:1d:
                    56:f1:6f:58:f9:c9:4e:25:2c:66:bf:45:ed:7f:4a:
                    34:95:a1:fb:30:ef:80:9f:1b:c9:69:59:a4:27:41:
                    a3:e8:bf:c6:53:79:4b:b3:4b:bb:ee:12:3f:68:b9:
                    6f:9b:82:64:d8:9d:77:33:de:15:dd:65:49:a3:eb:
                    af:12:a6:10:45:ee:87:5d:20:a8:eb:48:1f:eb:ba:
                    84:8a:a4:1e:77:72:3d:d9:ab:be:7f:0d:63:2b:da:
                    bb:e3:6f:f5:b9:5f:b0:dd:73:4c:a9:ff:12:cd:82:
                    2e:51:e5:01:d5:f1:8b:5e:38:5b:5a:e8:f5:52:4f:
                    7a:0f:85:d2:70:9d:69:8f:f8:45:c5:cb:2f:94:2a:
                    73:0a:6b:94:03:fa:89:6e:df:4d:e2:31:d8:e7:e6:
                    0c:d0:5e:21:c0:c4:d3:ba:6f:ac:6d:eb:61:1e:26:
                    c8:b7:6d:e2:56:29:55:3a:25:01:d1:28:e0:fd:50:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:21:3A:9C:A5:5F:CC:AA:7E:3F:0B:82:39:BE:6A:04:B7:02:18:FB
            X509v3 Authority Key Identifier:
                keyid:40:CD:EA:2B:39:C5:89:4A:62:3B:94:32:B6:CE:9D:60:53:78:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/40CDEA2B39C5894A623B9432B6CE9D6053783B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CDEA2B39C5894A623B9432B6CE9D6053783B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22EfAELbVczxGwukcmDror8djGmeAXSVVt7S5e7wVRzH/0/323830343a383065303a643030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:b0:f7:2b:ea:67:e7:ac:76:54:6a:3c:e3:ec:82:ba:44:
         80:12:42:e6:55:20:2c:e4:26:ca:89:11:9a:aa:d4:11:a4:13:
         ed:c7:59:7e:64:e6:f1:aa:bd:1e:58:ca:9f:7d:b0:50:41:9d:
         1d:64:a1:94:e2:c7:6d:33:de:85:c6:1e:d8:66:40:50:c5:7c:
         02:a8:04:6c:fd:f5:31:95:72:2d:ae:48:c3:58:12:42:d1:9c:
         07:f4:7c:aa:07:f4:00:88:39:3c:d7:d4:1e:d8:aa:3a:43:f4:
         9e:7b:71:a1:d7:ef:f4:01:e1:84:a0:91:3a:5e:00:53:84:3c:
         21:c9:6d:47:d5:fa:30:4d:80:6e:e7:53:7a:cd:5a:a0:28:ea:
         04:2e:fc:64:a1:24:6f:de:06:95:2e:5b:28:19:57:f6:89:a7:
         e3:f7:7c:e4:7a:40:90:7c:5f:44:a8:47:c1:c0:f8:ac:43:13:
         0f:71:33:d9:0b:c4:31:90:1b:3c:75:15:69:ed:b3:d0:c0:36:
         69:10:2a:c4:cc:f7:ed:54:ca:77:b2:52:a9:66:c5:a5:0a:02:
         e7:2d:08:c3:fd:f8:07:89:e8:86:5d:a0:fb:c0:b3:43:04:67:
         ea:e5:6a:48:e5:45:66:8d:67:2a:58:6e:76:75:dc:5a:ed:b0:
         ad:cf:03:a1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcOk1+K/iVMp/p72h8FRzzFAnwQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDREVBMkIzOUM1ODk0QTYyM0I5NDMyQjZDRTlENjA1
Mzc4M0I3ODAeFw0yNjA1MDgyMDI2NDNaFw0yNzA1MDcyMDMxNDNaMDMxMTAvBgNV
BAMTKDM5MjEzQTlDQTU1RkNDQUE3RTNGMEI4MjM5QkU2QTA0QjcwMjE4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XLIj6Y9lBE+hiAp/6QnsJNYb
ReqbNm+U/EVchC2Vr1GvQhjQ2oZ5asAiqq09ihb7De06KFrZPQMhPkKKiwD/CyxG
PT6Mwdm9HVbxb1j5yU4lLGa/Re1/SjSVofsw74CfG8lpWaQnQaPov8ZTeUuzS7vu
Ej9ouW+bgmTYnXcz3hXdZUmj668SphBF7oddIKjrSB/ruoSKpB53cj3Zq75/DWMr
2rvjb/W5X7Ddc0yp/xLNgi5R5QHV8YteOFta6PVST3oPhdJwnWmP+EXFyy+UKnMK
a5QD+olu303iMdjn5gzQXiHAxNO6b6xt62EeJsi3beJWKVU6JQHRKOD9UDbLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOSE6nKVfzKp+PwuCOb5qBLcCGPswHwYDVR0j
BBgwFoAUQM3qKznFiUpiO5Qyts6dYFN4O3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjJFZkFFTGJWY3p4R3d1a2NtRHJvcjhkakdtZUFYU1ZWdDdTNWU3d1ZS
ekgvMC80MENERUEyQjM5QzU4OTRBNjIzQjk0MzJCNkNFOUQ2MDUzNzgzQjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQ0RFQTJCMzlDNTg5NEE2
MjNCOTQzMkI2Q0U5RDYwNTM3ODNCNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIyRWZBRUxiVmN6eEd3dWtjbURyb3I4ZGpHbWVBWFNWVnQ3UzVlN3dWUnpILzAv
MzIzODMwMzQzYTM4MzA2NTMwM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMjM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEgODQMA0GCSqGSIb3DQEBCwUA
A4IBAQCeKrD3K+pn56x2VGo84+yCukSAEkLmVSAs5CbKiRGaqtQRpBPtx1l+ZObx
qr0eWMqffbBQQZ0dZKGU4sdtM96Fxh7YZkBQxXwCqARs/fUxlXItrkjDWBJC0ZwH
9HyqB/QAiDk819Qe2Ko6Q/See3Gh1+/0AeGEoJE6XgBThDwhyW1H1fowTYBu51N6
zVqgKOoELvxkoSRv3gaVLlsoGVf2iafj93zkekCQfF9EqEfBwPisQxMPcTPZC8Qx
kBs8dRVp7bPQwDZpECrEzPftVMp3slKpZsWlCgLnLQjD/fgHieiGXaD7wLNDBGfq
5WpI5UVmjWcqWG52ddxa7bCtzwOh
-----END CERTIFICATE-----
Generated at Wed May 13 19:01:34 2026 by rpki-client