Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
File:                     3138372e38362e3131322e302f32302d3234203d3e203533303637.roa (raw, json)
Hash identifier:          A3Vko83JRlAb5s+k+lApAuqLoc8/+XR64F1IsinmiUQ=
Subject key identifier:   71:31:33:3D:AD:00:24:48:2F:B1:23:EC:92:63:09:44:D6:75:96:0D
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       45288921C6FE7D94232DECCDDA4578C95C6032AC
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
Signing time:             Wed 27 May 2026 14:34:47 +0000
ROA not before:           Wed 27 May 2026 14:29:47 +0000
ROA not after:            Wed 26 May 2027 14:34:47 +0000
asID:                     53067
IP address blocks:        187.86.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:28:89:21:c6:fe:7d:94:23:2d:ec:cd:da:45:78:c9:5c:60:32:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:47 2026 GMT
            Not After : May 26 14:34:47 2027 GMT
        Subject: CN=7131333DAD0024482FB123EC92630944D675960D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:5b:14:dd:20:f0:d9:59:6c:0a:9e:18:34:
                    1b:61:c8:34:e1:c0:a0:e3:cb:e4:b4:b8:d3:a8:f2:
                    b2:f8:f0:ed:4f:f8:30:d4:2f:e3:3e:bd:cd:64:06:
                    04:5d:17:d2:e1:18:c1:f6:3e:ea:7a:25:c4:71:8f:
                    46:be:dc:25:5d:f5:24:b6:33:f6:2d:f2:05:1b:a2:
                    eb:5b:50:05:6e:7c:7a:ec:08:c8:55:d6:25:5f:e8:
                    42:c3:7b:c6:4c:d6:a1:f9:62:da:cb:d4:e8:64:5d:
                    16:58:c9:f1:38:b1:dd:57:7e:56:b1:36:90:89:86:
                    98:b6:07:52:2b:3b:e5:5f:bc:2c:93:12:c2:09:21:
                    70:48:7b:d3:26:f7:15:38:40:42:c9:21:ef:a1:f2:
                    b3:b1:7c:ae:47:0e:b2:40:78:79:8d:c3:04:2a:a9:
                    49:b4:fc:2f:c8:9a:d2:0b:82:ad:63:16:50:e6:63:
                    80:c7:af:38:03:19:22:3b:48:62:17:5d:0e:82:b5:
                    fb:d4:6a:bf:c6:ec:0e:75:62:6b:b7:87:0f:96:c4:
                    0c:41:70:68:63:40:91:05:0f:3b:02:94:8d:48:6c:
                    26:1b:8c:e3:fb:9f:0d:eb:02:b2:ea:4a:3f:19:55:
                    e0:5e:57:a9:cd:d8:cf:95:6d:ab:a5:07:c3:93:b1:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:33:3D:AD:00:24:48:2F:B1:23:EC:92:63:09:44:D6:75:96:0D
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:80:57:54:5b:02:0a:25:e0:af:b2:41:be:24:aa:76:23:
         f9:c2:73:fe:4b:e9:42:bb:88:4d:79:53:3c:05:1e:54:47:fb:
         d2:5d:3b:8c:e2:23:9e:45:b7:f5:6e:02:c2:fd:f5:7d:2b:c7:
         93:87:29:ae:e6:90:32:48:a7:92:b2:da:84:bd:1d:85:c0:8a:
         5e:6c:27:63:bc:15:b5:d6:9a:41:26:be:dd:9f:31:78:99:80:
         04:1f:90:35:3a:d6:08:c9:f3:83:9e:d9:e4:8f:4d:2e:74:92:
         86:5e:0d:a8:59:f2:ec:dc:66:cf:e8:5d:d8:7d:66:aa:9f:fb:
         32:eb:96:58:af:62:94:82:0f:f2:01:9e:40:b6:70:d8:08:ab:
         67:e2:72:c4:81:bd:9d:5b:6f:ce:b5:97:bf:e8:67:76:44:03:
         fc:7d:67:cc:9e:31:6b:5f:1b:81:3e:50:78:cd:83:2f:3b:86:
         72:3a:8b:2c:2b:82:b8:cf:ac:c1:8d:e3:35:df:b1:38:16:4a:
         37:6d:3e:44:6d:3d:e5:ea:07:80:d3:04:38:be:7c:02:a2:d1:
         f1:a7:61:3a:2e:e2:ee:7a:bf:48:ff:c9:19:6f:f3:98:66:62:
         ae:b1:d8:53:4c:cc:e1:00:7d:36:fe:b7:01:85:ff:e3:67:b1:
         c6:4a:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:14 2026 by rpki-client