Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
File:                     3138372e38352e3230302e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          5BClHJZiq+daEQ0M6booJqKHR1jxV7D0UhXatHuhWrk=
Subject key identifier:   3C:34:EF:29:94:89:43:6B:18:1A:ED:78:A4:A9:BA:85:30:C6:71:47
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       47ECEA67CB2D3F6D631A49E95F3B60FB3C8BBDEB
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
Signing time:             Wed 27 May 2026 14:34:43 +0000
ROA not before:           Wed 27 May 2026 14:29:43 +0000
ROA not after:            Wed 26 May 2027 14:34:43 +0000
asID:                     28349
IP address blocks:        187.85.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ec:ea:67:cb:2d:3f:6d:63:1a:49:e9:5f:3b:60:fb:3c:8b:bd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:43 2026 GMT
            Not After : May 26 14:34:43 2027 GMT
        Subject: CN=3C34EF299489436B181AED78A4A9BA8530C67147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:a3:8f:6d:d0:7e:dd:db:77:df:66:7b:1b:
                    6e:9a:7f:25:63:ad:dc:8c:fc:f1:63:d2:77:b4:d1:
                    4c:00:9c:6d:f0:9f:a1:cf:36:a5:4e:42:04:64:3c:
                    ef:d0:47:a1:a9:05:ef:c8:c0:ee:27:c2:26:df:35:
                    db:49:df:41:92:e8:c7:61:df:71:78:68:b0:39:ca:
                    14:ca:e7:bd:12:ee:2c:35:ed:bd:40:3d:fa:67:4f:
                    f8:ef:7e:89:8c:8c:7e:40:bf:81:33:64:e1:e8:52:
                    cb:37:41:91:09:09:f8:d5:37:c5:79:06:e5:47:50:
                    d5:73:c0:59:d5:24:56:04:c7:0c:36:50:d0:a3:d4:
                    b7:ec:b0:91:47:5d:5c:e1:7b:88:3e:a6:28:cc:3f:
                    72:32:e5:c5:4a:ed:53:17:f4:c3:4d:f8:b0:25:f3:
                    cf:e0:2e:18:97:9b:20:bd:6f:70:7f:04:e3:ae:4b:
                    4c:bb:fd:bc:90:d4:2a:fc:e6:6d:66:75:b3:62:f0:
                    79:c6:fb:7b:f2:64:0c:18:5c:b6:00:4e:ec:98:1c:
                    c0:a4:a0:d4:71:cd:28:46:54:25:14:3b:22:40:d5:
                    6c:df:5e:ba:04:9f:ca:4f:54:c5:0c:01:f1:d6:9c:
                    1f:b3:7c:95:f0:58:7b:0f:09:d1:65:64:1f:09:22:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:34:EF:29:94:89:43:6B:18:1A:ED:78:A4:A9:BA:85:30:C6:71:47
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:20:bf:aa:3e:78:f1:58:a4:7e:36:8d:46:44:76:3a:79:51:
         4a:28:e1:48:8e:ad:ab:8b:72:93:f5:b6:99:24:d2:10:ec:b2:
         68:28:0b:c7:b6:94:56:65:31:e3:68:58:65:da:99:f1:24:91:
         46:5a:22:5f:81:29:d2:92:37:18:c7:ee:b9:0f:d1:65:c8:f5:
         92:c0:fa:04:7a:24:d9:ae:e3:2c:ec:a9:c9:21:75:07:3d:1f:
         c2:1b:dd:1a:ca:f0:1d:e6:54:56:2e:21:48:56:ff:b6:51:a2:
         a4:cd:94:10:81:ff:23:6f:fd:6d:7a:e5:43:67:56:e7:a8:b5:
         fb:e9:8a:24:88:ea:dc:5c:0a:98:90:66:a1:52:8a:18:0b:60:
         b9:ab:a6:fe:4d:c6:b6:fc:57:25:df:75:6b:18:f3:ad:b6:34:
         b6:52:e5:af:c3:41:89:f2:5a:82:64:0d:6f:b4:f4:1f:89:51:
         ab:c7:bf:8c:3b:15:a3:85:ee:46:ed:87:b0:64:bb:fa:04:4d:
         7a:9c:5a:c8:92:49:99:e6:93:d9:6b:52:a9:7f:fa:76:e2:88:
         86:c7:99:5c:b9:5a:b6:e8:10:bf:c8:b6:f1:ae:4b:79:c7:b5:
         25:a8:3c:12:a1:91:6d:c3:72:29:fa:81:61:4b:46:e2:f7:20:
         b1:6d:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:41:24 2026 by rpki-client