Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa
File:                     3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          /dbn9L+TnRNmmt+5N0R+mVu1F3jYwcHWI3oozTtW7Ao=
Subject key identifier:   2B:52:E7:72:1D:E1:C7:BD:2E:E9:A2:3E:BD:8B:C8:F0:D9:56:B9:B7
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       727E123BE4C05E840D9C0C2E0B0AD16AA40668BF
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa
Signing time:             Wed 27 May 2026 14:34:40 +0000
ROA not before:           Wed 27 May 2026 14:29:40 +0000
ROA not after:            Wed 26 May 2027 14:34:40 +0000
asID:                     28349
IP address blocks:        189.126.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7e:12:3b:e4:c0:5e:84:0d:9c:0c:2e:0b:0a:d1:6a:a4:06:68:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:40 2026 GMT
            Not After : May 26 14:34:40 2027 GMT
        Subject: CN=2B52E7721DE1C7BD2EE9A23EBD8BC8F0D956B9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:61:e6:e6:3c:99:04:c7:ad:73:f1:6e:59:
                    be:f6:0a:ed:1c:88:ba:b4:eb:0b:e5:b3:bc:ac:92:
                    d5:be:4a:cb:86:e6:f2:69:a0:5d:01:65:22:14:16:
                    12:2a:3c:76:d3:42:2a:19:04:2d:b3:8a:a5:3d:6d:
                    a1:f9:fd:62:b1:c1:c6:9f:46:8c:f5:fd:1c:13:82:
                    92:68:60:2f:62:9e:13:17:b7:3a:d5:42:b0:c6:dc:
                    4c:c1:b7:1d:89:17:6c:16:37:28:f3:4e:de:19:8f:
                    5f:7d:3b:c6:5b:ce:d7:6a:6c:5d:0d:9f:07:19:ac:
                    79:c1:a1:9e:e5:07:54:bd:d9:a8:b8:48:07:35:7f:
                    a6:4f:9c:b7:c9:e6:da:74:30:6d:3e:7c:70:24:6f:
                    e8:90:d6:9e:44:a9:3e:4f:f0:dd:8b:9b:c0:c3:2f:
                    a5:ee:5c:a1:d4:99:4f:67:1f:b5:da:49:5c:67:ef:
                    12:cb:d1:ea:7e:00:9b:ad:9c:31:69:2d:a5:0c:72:
                    9c:92:df:1d:cb:0a:e1:6d:f9:a7:9e:ba:fa:d1:e5:
                    37:4e:28:b6:f8:44:27:40:a4:de:6f:e1:af:cb:65:
                    77:9e:d8:77:de:b3:43:27:93:11:08:49:18:eb:93:
                    40:12:ba:3e:f2:63:1a:74:03:a8:dd:17:9a:5b:ca:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:E7:72:1D:E1:C7:BD:2E:E9:A2:3E:BD:8B:C8:F0:D9:56:B9:B7
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3138342e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:17:cc:21:9a:e9:cb:0c:b9:71:24:71:0d:76:06:4a:17:
         7d:2d:d5:78:88:f6:30:20:6f:b2:86:c0:a4:0f:1d:ba:f1:45:
         99:76:81:29:5d:cb:4b:cf:56:00:bf:3c:5d:51:ef:5c:59:c7:
         f2:e2:40:65:07:bb:08:b1:44:53:c0:c4:f6:73:c3:8a:cf:cc:
         5b:7a:0b:77:a0:df:16:13:2f:5a:64:11:73:8f:a8:42:0e:d1:
         c2:6a:ea:75:f4:4c:86:5b:48:fe:89:a8:f3:37:98:9a:ac:ac:
         58:13:35:65:1e:41:18:c9:0f:e6:99:26:f0:c7:f4:06:96:14:
         bd:85:04:3a:45:d4:87:78:8d:f5:f6:58:26:5c:ad:2b:e1:a4:
         32:b9:a9:96:36:a5:c3:81:98:5c:43:67:cb:07:cd:6a:93:85:
         87:35:de:3f:76:9b:fd:a1:f8:e2:76:90:6b:f8:7c:a3:ed:8e:
         03:3e:85:8c:93:22:ea:a1:fd:63:45:b9:23:f2:cd:73:52:e9:
         01:a8:a6:0e:da:08:7d:90:6f:d0:8b:07:c9:31:be:49:f6:50:
         56:78:32:fa:93:eb:18:a8:fb:c3:17:76:32:9a:77:cf:da:50:
         6f:15:14:c5:82:a9:cb:3b:77:17:89:ba:67:70:34:4a:78:39:
         43:c0:20:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcn4SO+TAXoQNnAwuCwrRaqQGaL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRCNDYwRjVGRjg2MkY1NjlBOEZFQ0RCOEExMkE5QTcw
QzBFNTBBMjAeFw0yNjA1MjcxNDI5NDBaFw0yNzA1MjYxNDM0NDBaMDMxMTAvBgNV
BAMTKDJCNTJFNzcyMURFMUM3QkQyRUU5QTIzRUJEOEJDOEYwRDk1NkI5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFWHm5jyZBMetc/FuWb72Cu0c
iLq06wvls7ysktW+SsuG5vJpoF0BZSIUFhIqPHbTQioZBC2ziqU9baH5/WKxwcaf
Roz1/RwTgpJoYC9inhMXtzrVQrDG3EzBtx2JF2wWNyjzTt4Zj199O8ZbztdqbF0N
nwcZrHnBoZ7lB1S92ai4SAc1f6ZPnLfJ5tp0MG0+fHAkb+iQ1p5EqT5P8N2Lm8DD
L6XuXKHUmU9nH7XaSVxn7xLL0ep+AJutnDFpLaUMcpyS3x3LCuFt+aeeuvrR5TdO
KLb4RCdApN5v4a/LZXee2Hfes0MnkxEISRjrk0ASuj7yYxp0A6jdF5pbyuNfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK1Lnch3hx70u6aI+vYvI8NlWubcwHwYDVR0j
BBgwFoAUNLRg9f+GL1aaj+zbihKppwwOUKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS8zNEI0NjBGNUZGODYyRjU2OUE4RkVDREI4QTEyQTlBNzBDMEU1MEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0QjQ2MEY1RkY4NjJGNTY5
QThGRUNEQjhBMTJBOUE3MEMwRTUwQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzEzODM5MmUzMTMyMzYyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9frgwDQYJKoZIhvcNAQELBQADggEBAEbDF8wh
munLDLlxJHENdgZKF30t1XiI9jAgb7KGwKQPHbrxRZl2gSldy0vPVgC/PF1R71xZ
x/LiQGUHuwixRFPAxPZzw4rPzFt6C3eg3xYTL1pkEXOPqEIO0cJq6nX0TIZbSP6J
qPM3mJqsrFgTNWUeQRjJD+aZJvDH9AaWFL2FBDpF1Id4jfX2WCZcrSvhpDK5qZY2
pcOBmFxDZ8sHzWqThYc13j92m/2h+OJ2kGv4fKPtjgM+hYyTIuqh/WNFuSPyzXNS
6QGopg7aCH2Qb9CLB8kxvkn2UFZ4MvqT6xio+8MXdjKad8/aUG8VFMWCqcs7dxeJ
umdwNEp4OUPAINE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:18:13 2026 by rpki-client