Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
File:                     3138372e38352e3232302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          Gwgngm+PZodLio3/oY9WGvMcag7rNC7fxAdpEUCccn4=
Subject key identifier:   36:A2:BD:A7:C4:15:27:43:E0:88:CD:69:12:65:22:79:A2:2C:FB:93
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       0CD88857BDE152754D4400FBE99E924FC0C2310E
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
Signing time:             Wed 27 May 2026 14:34:48 +0000
ROA not before:           Wed 27 May 2026 14:29:48 +0000
ROA not after:            Wed 26 May 2027 14:34:48 +0000
asID:                     28349
IP address blocks:        187.85.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d8:88:57:bd:e1:52:75:4d:44:00:fb:e9:9e:92:4f:c0:c2:31:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:48 2026 GMT
            Not After : May 26 14:34:48 2027 GMT
        Subject: CN=36A2BDA7C4152743E088CD6912652279A22CFB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:b2:5b:3d:b3:9f:30:b3:63:b5:ba:3a:a3:
                    7c:13:b5:3f:d0:e7:e4:a4:87:f8:70:7e:76:c2:ad:
                    e3:e1:26:5b:6b:b3:a9:7b:34:c5:79:d1:89:d3:a8:
                    e1:66:36:48:e9:f1:34:8a:58:b4:60:d5:62:a5:df:
                    7c:69:d9:4e:da:ca:8b:45:e3:66:e4:de:c5:62:1f:
                    f6:71:e7:e8:7e:3c:7d:e5:10:f3:8f:3f:85:aa:39:
                    8c:49:eb:dc:97:ca:08:21:c9:fa:ab:ea:df:f4:f4:
                    ef:d3:c2:44:19:96:c9:d2:7a:87:a4:72:e3:7c:06:
                    95:2d:c8:83:7a:7e:51:d1:5f:56:d5:28:58:11:b3:
                    bd:56:82:d3:f4:f3:ae:e0:38:8b:39:a9:a2:3e:00:
                    90:c2:a9:f4:5f:f0:bb:8f:a1:fe:46:6e:46:38:c6:
                    1c:8b:d3:fb:8f:34:2b:82:92:cb:b2:d4:44:e0:5c:
                    1e:cd:4c:0e:82:8d:bb:69:87:4d:33:8c:c4:66:e4:
                    7f:da:df:96:ea:67:ff:27:06:a2:46:ba:69:a4:a7:
                    ce:7e:a4:01:cc:14:9b:d7:32:6e:76:55:4d:a9:99:
                    1b:0b:c7:76:51:ae:9e:d0:b5:79:c2:45:b4:a4:f2:
                    2b:98:85:ac:8c:e8:4a:89:89:e6:49:bf:b3:bb:38:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:BD:A7:C4:15:27:43:E0:88:CD:69:12:65:22:79:A2:2C:FB:93
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:30:3c:b2:d6:d1:7a:fb:35:86:2f:8d:34:7b:39:83:ec:99:
         b8:6c:9c:2e:df:d6:88:cf:42:c0:c0:52:23:0a:1c:f8:93:b4:
         16:c0:35:37:9f:ad:42:52:d7:4f:c6:f7:e5:79:12:37:92:d8:
         38:2e:e0:75:ff:65:73:b3:d5:5c:39:4a:ed:4b:62:c1:7d:cc:
         8b:34:8c:24:9d:74:1a:dc:a5:e8:9f:86:18:3b:00:e7:b6:7d:
         09:eb:98:17:bd:f8:4b:3e:2c:8c:c7:ed:ea:cf:52:55:a0:26:
         0f:dc:73:77:91:67:e9:bb:76:f1:61:5b:7a:78:9b:a9:e2:da:
         68:4d:3e:1b:5a:ae:8b:c8:01:4c:16:69:d5:99:44:3f:a1:87:
         41:74:f4:07:fd:ae:eb:15:d8:a2:06:87:ea:4a:56:ca:93:44:
         ce:07:4d:0d:88:71:3b:46:2c:41:50:73:ca:be:51:38:89:06:
         4a:cb:ee:ef:87:f5:ac:7c:c5:2e:1e:03:38:a8:cb:4f:6e:b1:
         76:8d:b8:74:a5:93:84:18:b4:6e:89:96:42:57:b9:b8:92:24:
         66:23:86:72:aa:60:5d:e2:71:ea:37:3a:bc:ad:f5:b2:cd:05:
         12:cd:47:a1:36:ef:6a:4d:95:c8:bc:43:c7:15:74:4f:6c:08:
         c1:8b:c3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:01:30 2026 by rpki-client