Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138322e302f32332d3234203d3e20323637343834.roa
File:                     3138392e3132362e3138322e302f32332d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          e285apjl/ewjnQsgilyjk6+uk6M9fLg3vlHkg04tegk=
Subject key identifier:   EB:40:8C:66:2D:CC:8B:AC:00:88:98:43:83:DA:F0:78:7B:AD:3B:4C
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       63B74A9B035832A7B57C0131D699F8D869C239A1
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138322e302f32332d3234203d3e20323637343834.roa
Signing time:             Wed 27 May 2026 14:34:48 +0000
ROA not before:           Wed 27 May 2026 14:29:48 +0000
ROA not after:            Wed 26 May 2027 14:34:48 +0000
asID:                     267484
IP address blocks:        189.126.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b7:4a:9b:03:58:32:a7:b5:7c:01:31:d6:99:f8:d8:69:c2:39:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:48 2026 GMT
            Not After : May 26 14:34:48 2027 GMT
        Subject: CN=EB408C662DCC8BAC0088984383DAF0787BAD3B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:cb:72:19:1c:b0:c0:e6:50:2c:4c:b5:da:
                    e1:df:86:d7:fb:68:3a:e7:59:9f:97:55:1a:c4:78:
                    cd:b6:20:21:d4:37:99:75:9b:10:38:79:41:00:9f:
                    c4:2a:db:39:cf:a1:b7:58:ce:3e:d9:69:08:14:58:
                    92:ab:31:9c:f7:03:b5:8b:e8:a8:6d:bd:e4:73:4a:
                    a9:fc:10:d6:44:18:df:cb:de:33:47:09:8e:1e:98:
                    d6:3e:91:5e:56:66:04:b2:2c:a3:82:b7:31:1a:0e:
                    ec:10:5d:50:58:79:8f:ed:e0:08:11:be:cd:33:cb:
                    1c:ba:ed:f7:9b:fb:ff:dc:27:0f:b6:24:4b:a9:cf:
                    c1:35:d5:0f:50:ee:c8:ae:a4:97:96:ef:3a:23:98:
                    8a:21:4e:a5:64:66:62:8d:2f:8b:f9:3e:f2:78:d2:
                    7e:fd:e2:80:cb:05:9a:20:bd:f4:b8:c0:a6:85:70:
                    f4:aa:77:50:de:06:7b:f3:25:1c:60:15:6f:3f:0f:
                    23:a7:a1:05:40:f2:96:8c:e2:12:03:c9:41:ef:04:
                    87:35:2a:f6:81:e5:7b:02:29:d4:d9:3f:55:20:42:
                    67:3a:68:43:7b:aa:06:cd:a9:87:5b:2f:bd:fd:2e:
                    0b:44:b7:59:96:3c:50:d3:15:30:1a:0d:21:93:10:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:40:8C:66:2D:CC:8B:AC:00:88:98:43:83:DA:F0:78:7B:AD:3B:4C
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138322e302f32332d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:24:85:d0:46:ee:46:2b:e7:05:8c:5a:c2:0a:05:0e:66:
         7a:e3:0a:3d:07:63:7c:84:65:f6:3f:de:00:89:7a:a6:bb:08:
         53:55:1e:6c:4a:90:b4:2b:3f:93:d2:e4:93:f3:12:cb:04:1e:
         fc:b8:04:12:28:3e:89:dd:03:2b:21:31:58:10:90:53:6a:3a:
         44:90:fa:ee:d7:7e:54:1d:6a:3c:f8:2c:20:60:09:7a:6f:0a:
         9c:ba:05:29:dd:43:82:0b:0d:af:d3:74:bd:2a:85:5f:bd:c1:
         53:65:af:dc:5d:ff:65:dd:34:7f:a9:0d:5d:1b:c8:8a:65:09:
         91:1e:64:9d:b3:c9:c5:6a:b0:ee:9a:53:fe:d4:7c:64:22:dc:
         08:3c:c3:a5:86:26:94:da:82:57:77:86:24:a8:cf:98:e8:ef:
         1f:83:0b:55:cf:f0:fa:91:aa:32:ec:91:ed:99:c1:80:62:6a:
         88:f8:62:29:79:02:63:44:4b:0e:6d:3e:3f:cf:26:63:3d:45:
         f2:5c:27:4a:fa:0c:82:34:84:69:c2:db:f8:4a:5f:57:5d:80:
         6d:c3:38:bd:85:e7:7a:bb:24:3f:3a:d3:98:83:69:60:c4:8a:
         75:fd:e6:f6:65:37:57:f0:2b:46:20:4d:a1:82:c2:39:47:b5:
         3c:a1:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:22 2026 by rpki-client