Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa
File:                     3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          zDuAsWvrHqYyunvJB25cWSYEUocqvIsxs7IG/pTDCbs=
Subject key identifier:   01:A9:F0:55:83:64:CF:23:84:4F:82:A3:2D:0D:39:8F:BB:8F:F6:A3
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       14212EF1152DD895E5EDD94453C2DCBA808D54FB
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa
Signing time:             Wed 27 May 2026 14:34:49 +0000
ROA not before:           Wed 27 May 2026 14:29:49 +0000
ROA not after:            Wed 26 May 2027 14:34:49 +0000
asID:                     267484
IP address blocks:        177.154.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:21:2e:f1:15:2d:d8:95:e5:ed:d9:44:53:c2:dc:ba:80:8d:54:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:49 2026 GMT
            Not After : May 26 14:34:49 2027 GMT
        Subject: CN=01A9F0558364CF23844F82A32D0D398FBB8FF6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:b4:c9:92:fa:3f:a6:31:c1:62:1f:dd:f1:
                    06:e4:1a:98:d8:4e:8b:bf:5e:eb:1b:6a:7d:55:05:
                    ef:82:56:0a:b1:4b:29:13:82:d6:e9:2e:81:3f:39:
                    8c:f2:1f:b9:48:6c:94:a6:48:6d:05:31:60:45:4d:
                    ce:6a:56:6d:9e:ba:6f:71:e8:e6:bd:c4:b5:b9:35:
                    83:7d:1a:a1:9c:5b:c5:e1:0f:c7:6f:ee:3e:9c:af:
                    4b:9d:dd:8b:37:3c:0d:8e:8a:e2:6c:30:06:a7:f4:
                    3e:6e:90:dc:91:db:b4:6f:80:60:ac:01:0e:fe:2a:
                    a3:e8:11:e0:34:d6:f7:76:b0:fa:db:59:7c:b5:40:
                    de:26:46:71:21:55:d5:ac:a8:63:96:bd:e8:14:6d:
                    12:05:a2:13:cc:f2:8d:d0:13:c2:6a:d4:06:6b:ea:
                    64:57:7d:76:67:3a:c2:33:1d:9f:10:fa:ee:34:d5:
                    2c:33:4e:d6:a1:72:8a:cb:78:a4:4a:a1:00:a6:4d:
                    44:50:ad:70:48:17:3c:5d:7a:62:2b:92:fe:9c:0f:
                    96:df:15:1f:95:82:9b:ca:8f:79:6e:31:a0:ff:7e:
                    7b:fd:54:18:9b:4f:f1:3e:1c:63:1e:f6:e2:20:de:
                    6d:fc:d3:37:4c:90:0b:ab:a6:14:94:13:9e:58:ad:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:F0:55:83:64:CF:23:84:4F:82:A3:2D:0D:39:8F:BB:8F:F6:A3
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3137372e3135342e36342e302f32312d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:c6:18:fa:dc:7d:73:53:42:68:36:70:dd:d5:95:02:e0:
         8c:cf:99:c7:09:30:48:75:57:d3:39:e4:61:0c:60:d0:7d:75:
         e3:38:31:52:26:62:05:3b:aa:9b:37:bd:43:ae:d0:0a:3a:b9:
         5c:44:b7:aa:e8:31:b8:14:50:cc:ef:dc:0e:c1:3c:6a:7f:24:
         90:17:25:e1:4b:eb:cd:bd:0d:53:8d:31:08:32:20:af:45:51:
         c0:ed:e4:52:0d:68:24:3b:ef:6e:c4:f9:c5:9d:09:d0:84:47:
         a9:43:64:07:e0:08:cc:8e:5b:c1:d9:3e:41:38:1a:0a:ca:d8:
         7b:0a:1c:0d:2d:e8:d4:a9:62:20:45:a4:a1:1f:5c:29:66:9a:
         57:f1:fb:a8:06:42:6d:e7:5d:49:f7:ed:3f:6e:2c:2c:f9:57:
         73:d7:ae:5c:42:a0:ae:7a:1c:b2:f3:c5:c8:a9:30:a6:1e:cc:
         d8:81:73:2d:15:36:71:bb:3c:39:91:48:a1:28:12:c7:07:9a:
         c8:90:16:6a:69:5a:00:75:43:b1:16:19:e6:1e:2c:93:77:fe:
         9d:f7:c8:6b:bb:68:3a:23:87:d4:6d:30:99:dd:cf:26:4d:2c:
         91:79:5c:b1:3b:6d:90:13:3b:70:a6:6c:62:c3:ca:82:c9:a4:
         85:69:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:32 2026 by rpki-client