Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa
File:                     3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          3eaBfZQE3TUHt1hU3aFzZ2Uj8Lvzr4YPKLD0FM5LeUY=
Subject key identifier:   92:25:55:DF:43:04:0C:56:9B:74:9D:BC:31:1F:6E:84:E1:7C:5C:74
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       329B9CC6A2BE207DC849CC9A97182D26451026EA
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa
Signing time:             Wed 27 May 2026 14:34:40 +0000
ROA not before:           Wed 27 May 2026 14:29:40 +0000
ROA not after:            Wed 26 May 2027 14:34:40 +0000
asID:                     267484
IP address blocks:        189.126.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9b:9c:c6:a2:be:20:7d:c8:49:cc:9a:97:18:2d:26:45:10:26:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:40 2026 GMT
            Not After : May 26 14:34:40 2027 GMT
        Subject: CN=922555DF43040C569B749DBC311F6E84E17C5C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:89:1a:b3:d2:8a:88:23:6a:de:41:6c:03:
                    53:70:f2:e7:4e:2a:b0:32:b1:ee:d4:2d:21:5b:c4:
                    1d:d2:39:ce:44:ba:c2:aa:51:fd:03:d0:ac:ba:54:
                    36:35:3d:15:14:6c:db:15:8d:be:da:67:6a:0d:15:
                    7a:f7:19:2e:69:5e:69:0a:82:d4:d3:9b:1e:d5:f7:
                    91:d9:22:ef:a6:6f:c8:ce:e7:eb:54:f3:6d:2f:5a:
                    81:24:00:1f:44:db:fc:e8:af:84:a2:99:d9:a9:7a:
                    88:79:e3:28:d6:31:fb:f8:bc:99:87:cd:72:d7:96:
                    4c:bf:7f:82:b5:a8:d8:f4:02:2b:af:c5:d0:9c:69:
                    ae:65:db:bf:a8:50:83:a7:71:f2:1d:4f:d6:f9:6b:
                    43:98:bb:6d:c4:71:67:79:1c:21:33:80:87:e3:0c:
                    3d:e0:70:eb:50:6a:33:15:ee:d1:6a:29:4a:12:f9:
                    aa:27:ab:61:9a:67:c7:8e:a4:3c:e5:3c:0a:3b:f4:
                    5d:90:31:0c:e5:bc:0b:76:f2:c8:cd:9d:60:f5:bb:
                    39:65:1e:34:8d:1a:13:4a:a1:ff:a2:9d:4f:14:68:
                    1c:22:c6:a9:bb:85:aa:77:79:7c:d0:2a:03:f5:32:
                    0e:b6:f5:b6:0b:07:fc:aa:3d:66:78:46:22:76:96:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:25:55:DF:43:04:0C:56:9B:74:9D:BC:31:1F:6E:84:E1:7C:5C:74
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:aa:e1:5b:09:3d:7e:77:00:42:4a:84:cd:1b:9b:33:ce:
         fb:b4:b0:f5:8e:71:12:38:72:8e:b5:52:6f:a8:9f:29:e1:f3:
         48:0f:d9:1b:b1:f6:09:3c:60:d8:5b:e1:8e:fd:cc:40:7b:eb:
         bc:33:6f:7a:a1:d2:17:ce:95:1f:55:65:51:d3:39:92:ad:dc:
         16:ac:ca:8b:93:8f:11:76:3d:d8:78:ef:e0:65:02:9c:48:99:
         eb:2e:de:6b:1d:aa:01:b8:48:14:56:c0:45:3e:ba:ea:d0:65:
         a5:d4:58:60:35:3f:99:00:27:7c:b3:ec:09:ad:db:9a:b5:4e:
         af:61:5e:da:07:82:1f:02:25:ff:48:e5:14:d0:aa:63:0a:7b:
         8e:56:0a:20:a1:f7:6a:82:bd:7f:ce:bb:80:60:e1:e0:4d:f9:
         f5:dc:e5:bc:e9:60:85:85:72:bd:3d:a5:cd:f2:b2:14:e4:4f:
         8d:bc:0a:4f:21:56:80:34:12:ae:d3:22:f9:95:ca:f2:53:1f:
         3e:83:81:4e:f5:98:ea:15:9a:16:ca:bb:63:68:71:3f:18:5d:
         4e:ad:d6:d6:b9:ef:f2:71:bc:03:18:ba:e0:6e:07:17:59:29:
         ed:d0:ed:21:21:85:ea:9f:3d:15:60:76:86:bf:7d:63:ce:91:
         90:eb:14:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMpucxqK+IH3IScyalxgtJkUQJuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRCNDYwRjVGRjg2MkY1NjlBOEZFQ0RCOEExMkE5QTcw
QzBFNTBBMjAeFw0yNjA1MjcxNDI5NDBaFw0yNzA1MjYxNDM0NDBaMDMxMTAvBgNV
BAMTKDkyMjU1NURGNDMwNDBDNTY5Qjc0OURCQzMxMUY2RTg0RTE3QzVDNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUYkas9KKiCNq3kFsA1Nw8udO
KrAyse7ULSFbxB3SOc5EusKqUf0D0Ky6VDY1PRUUbNsVjb7aZ2oNFXr3GS5pXmkK
gtTTmx7V95HZIu+mb8jO5+tU820vWoEkAB9E2/zor4Simdmpeoh54yjWMfv4vJmH
zXLXlky/f4K1qNj0AiuvxdCcaa5l27+oUIOncfIdT9b5a0OYu23EcWd5HCEzgIfj
DD3gcOtQajMV7tFqKUoS+aonq2GaZ8eOpDzlPAo79F2QMQzlvAt28sjNnWD1uzll
HjSNGhNKof+inU8UaBwixqm7hap3eXzQKgP1Mg629bYLB/yqPWZ4RiJ2lqRBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkiVV30MEDFabdJ28MR9uhOF8XHQwHwYDVR0j
BBgwFoAUNLRg9f+GL1aaj+zbihKppwwOUKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS8zNEI0NjBGNUZGODYyRjU2OUE4RkVDREI4QTEyQTlBNzBDMEU1MEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0QjQ2MEY1RkY4NjJGNTY5
QThGRUNEQjhBMTJBOUE3MEMwRTUwQTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzEzODM5MmUzMTMyMzYyZTMxMzYzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBb1+oDANBgkqhkiG9w0BAQsFAAOCAQEAU+eq
4VsJPX53AEJKhM0bmzPO+7Sw9Y5xEjhyjrVSb6ifKeHzSA/ZG7H2CTxg2Fvhjv3M
QHvrvDNveqHSF86VH1VlUdM5kq3cFqzKi5OPEXY92Hjv4GUCnEiZ6y7eax2qAbhI
FFbART666tBlpdRYYDU/mQAnfLPsCa3bmrVOr2Fe2geCHwIl/0jlFNCqYwp7jlYK
IKH3aoK9f867gGDh4E359dzlvOlghYVyvT2lzfKyFORPjbwKTyFWgDQSrtMi+ZXK
8lMfPoOBTvWY6hWaFsq7Y2hxPxhdTq3W1rnv8nG8Axi64G4HF1kp7dDtISGF6p89
FWB2hr99Y86RkOsUAg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:42:40 2026 by rpki-client