Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3231362e302f32322d3234203d3e20323637343834.roa
File:                     3138372e38352e3231362e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          /72259UxfgimIv7eLGPdL0qcZOCcp+eSDe9mUyH1tIs=
Subject key identifier:   BA:97:5A:41:46:92:F9:89:BE:A2:12:C5:7C:45:FF:23:84:46:01:9D
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       0127FB39BB86521FEB55958369D67EF4E856297B
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3231362e302f32322d3234203d3e20323637343834.roa
Signing time:             Wed 27 May 2026 14:34:49 +0000
ROA not before:           Wed 27 May 2026 14:29:49 +0000
ROA not after:            Wed 26 May 2027 14:34:49 +0000
asID:                     267484
IP address blocks:        187.85.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:27:fb:39:bb:86:52:1f:eb:55:95:83:69:d6:7e:f4:e8:56:29:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:49 2026 GMT
            Not After : May 26 14:34:49 2027 GMT
        Subject: CN=BA975A414692F989BEA212C57C45FF238446019D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:0e:d5:58:e7:65:bc:21:b9:b5:3e:e2:c6:
                    e0:55:ad:f0:9b:71:53:52:23:a8:51:21:bc:0d:cb:
                    6f:f5:f6:f7:a7:7a:f7:6c:5d:10:c9:0b:cc:2c:df:
                    c3:2b:56:eb:4d:24:9c:eb:fd:2e:37:14:13:c6:04:
                    d9:5a:18:a4:ab:f1:ba:a2:6e:69:a4:c3:e0:38:77:
                    cb:8a:3c:6a:28:e8:53:d5:3f:c8:e0:60:80:1d:76:
                    62:d8:05:c2:bc:d4:f7:b8:c8:67:55:44:05:ad:cb:
                    f7:1d:b9:c2:aa:e8:53:52:52:36:51:78:94:98:96:
                    84:a2:cb:86:93:89:40:b7:42:c7:9d:2e:60:a6:ab:
                    fc:b5:84:01:7b:00:d0:8a:ac:75:26:28:cb:72:86:
                    a2:10:7c:e1:2b:56:ba:fa:37:75:75:0a:a9:5f:60:
                    7c:4f:e9:35:fb:31:91:64:35:0c:dc:94:88:31:73:
                    7e:d7:9e:67:2a:19:70:ed:f5:c7:2b:80:a8:92:f8:
                    83:3c:24:85:87:73:ed:03:2f:35:fe:0c:a5:d3:54:
                    60:a1:33:b9:6c:dd:3f:70:6c:d0:cc:f6:06:4a:8c:
                    31:84:25:4c:cf:19:fd:c0:f8:d0:50:3b:ad:76:cc:
                    5a:ac:e1:c6:e2:c5:67:fa:f3:27:c3:62:97:66:c7:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:97:5A:41:46:92:F9:89:BE:A2:12:C5:7C:45:FF:23:84:46:01:9D
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3231362e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:37:fb:da:d1:6b:7c:a2:ef:db:23:21:22:73:57:42:f0:
         68:5a:8a:07:fc:45:1a:35:a3:39:b4:c1:79:ed:2d:a6:ed:12:
         af:4e:78:53:d2:95:22:b7:d2:e7:d6:d7:52:7c:9b:7e:86:d1:
         a6:56:65:3d:91:32:07:1d:5f:02:bb:67:03:da:1f:94:59:1a:
         c9:5d:90:89:b9:f2:26:97:d8:17:bc:71:3c:fb:f3:7a:3e:32:
         38:6f:38:77:b7:16:cf:92:cb:36:2a:13:e1:70:2d:40:66:8d:
         dc:a1:76:5d:ba:d8:35:6d:ca:3e:76:40:35:c6:42:18:e2:a0:
         8f:9f:b9:eb:1b:64:15:d6:fb:34:96:1f:d7:87:45:94:7a:f3:
         64:2d:08:52:9f:ef:2d:01:66:78:89:61:0d:bd:e6:c5:4e:f7:
         cf:cd:a2:16:6b:33:29:4b:7f:a5:c5:23:5e:42:87:13:ec:75:
         94:8d:7d:28:1a:48:f2:00:ca:22:a6:65:ab:43:15:5f:34:3c:
         d9:d9:a3:34:36:7e:85:5b:7a:94:45:fb:a7:b9:48:15:7e:71:
         27:e1:1a:f5:b7:1a:39:07:8b:da:ad:d7:54:0d:7f:40:10:fb:
         d0:64:ba:b9:8b:2f:bc:2d:c6:f7:72:34:1f:d0:2f:ba:46:17:
         d5:a2:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:28 2026 by rpki-client