Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
File:                     3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          yC1fW9uH7sIFfDC3ocYnYBd6hs1iQQmUHnaISQgkPCU=
Subject key identifier:   0F:32:F9:02:07:05:B0:AF:8B:B6:07:8C:CE:63:94:E1:E3:CF:C3:A5
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       4A10F43037C1B7616956001C98287AF1137C8BE0
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
Signing time:             Wed 27 May 2026 14:34:47 +0000
ROA not before:           Wed 27 May 2026 14:29:47 +0000
ROA not after:            Wed 26 May 2027 14:34:47 +0000
asID:                     28349
IP address blocks:        189.126.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:10:f4:30:37:c1:b7:61:69:56:00:1c:98:28:7a:f1:13:7c:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:47 2026 GMT
            Not After : May 26 14:34:47 2027 GMT
        Subject: CN=0F32F9020705B0AF8BB6078CCE6394E1E3CFC3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:44:a2:29:2e:e0:79:0b:47:05:dd:7f:63:
                    ce:d6:02:0e:b0:5a:96:16:c0:f2:81:b3:7a:fc:ec:
                    d6:c4:c0:10:6a:59:6d:fa:16:2c:2a:18:b3:dd:22:
                    96:b9:ca:d6:de:d5:df:2c:33:5c:e5:a4:94:09:b5:
                    d8:a9:1b:e9:09:70:46:a4:2e:0d:c1:6d:78:08:02:
                    b1:d5:9a:dc:eb:b2:9d:3d:f7:17:5e:5c:e8:8e:1a:
                    22:67:09:62:2a:8d:ae:9b:fc:51:1d:e5:48:88:5f:
                    94:b0:34:7c:0d:53:0b:5d:f7:d2:51:0f:4d:f0:ac:
                    42:11:64:cc:39:c5:ef:2e:21:47:da:a8:e0:27:05:
                    6d:da:93:25:41:3e:96:b5:b2:79:06:4b:a8:d8:4f:
                    0a:6e:55:d9:5f:b3:9a:b8:6f:5f:90:24:45:f1:66:
                    43:44:29:cb:4a:89:37:9e:ef:66:ce:54:87:3f:34:
                    95:73:f0:9c:02:26:e4:8c:cb:f1:a1:59:4c:2f:3b:
                    e4:57:fa:50:38:05:3d:af:94:d9:ff:de:3c:15:23:
                    b9:91:b3:16:b9:e0:61:f4:2c:d3:15:78:e5:e7:a0:
                    bb:77:d6:7b:3d:4d:d2:78:42:e0:12:0d:81:e8:d8:
                    74:fd:59:55:7a:58:1a:47:5b:4f:91:80:5a:d2:13:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:F9:02:07:05:B0:AF:8B:B6:07:8C:CE:63:94:E1:E3:CF:C3:A5
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:30:5b:9b:1c:b6:f5:51:f1:99:73:16:22:e1:ac:dc:79:f3:
         83:4e:9e:80:22:be:b7:c3:68:ef:77:71:f1:26:b5:82:1e:0b:
         b8:8d:3f:de:ff:4d:ba:22:62:09:37:0a:f1:80:02:a6:ac:8c:
         4a:7e:55:fa:9a:c0:3a:94:31:bc:7e:6e:4a:9c:cb:8a:c9:1e:
         ec:29:32:f9:c7:5c:4f:ad:3a:ef:6d:e3:7b:88:97:66:12:66:
         52:31:3b:5e:d8:83:48:fa:2a:25:2d:90:53:08:96:47:f4:d0:
         72:42:b7:f5:df:36:4e:d5:ac:6e:67:f7:cc:da:df:74:b3:a8:
         0e:c6:a0:28:7e:b5:bc:be:54:32:c0:9c:e2:cd:10:64:e2:bb:
         23:86:05:61:e2:36:ae:1a:31:70:78:9e:6e:68:1b:d3:88:db:
         6b:e1:80:a2:bd:d7:92:09:47:7d:39:e0:9f:bd:f9:46:cf:d2:
         3a:c6:1a:27:b1:f6:68:12:cd:c8:e0:30:3a:a5:61:d0:bc:03:
         10:81:80:15:8b:80:3d:a4:e6:e9:a8:95:a6:94:d7:6a:da:eb:
         84:9b:81:82:e9:a1:57:44:01:19:27:70:3f:30:2b:62:2c:a7:
         05:3d:48:ee:f9:93:fd:fa:03:53:a5:28:11:d7:90:6e:8e:1c:
         e4:d3:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:18:02 2026 by rpki-client