Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa
File:                     3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          1CzeCzxgC6KobdA21lbeW8cSVysMtPzyR2Jua7Bq6HY=
Subject key identifier:   87:E2:01:C8:B7:ED:ED:CE:C1:C7:E7:34:6A:21:C5:2D:FB:B5:67:3C
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       2D39FAFDEE91719895554DD06C1A067B0113A4E1
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa
Signing time:             Wed 27 May 2026 14:34:49 +0000
ROA not before:           Wed 27 May 2026 14:29:49 +0000
ROA not after:            Wed 26 May 2027 14:34:49 +0000
asID:                     267484
IP address blocks:        189.126.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:39:fa:fd:ee:91:71:98:95:55:4d:d0:6c:1a:06:7b:01:13:a4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:49 2026 GMT
            Not After : May 26 14:34:49 2027 GMT
        Subject: CN=87E201C8B7EDEDCEC1C7E7346A21C52DFBB5673C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:08:38:56:a3:dc:1a:69:c7:0d:fb:5e:bf:
                    fa:be:ed:c6:58:6d:93:9d:4e:0e:5c:2d:1d:48:81:
                    60:a5:f0:62:ba:c4:28:14:e2:a0:38:28:b3:f6:b3:
                    7c:07:ba:59:de:36:5d:81:b6:fb:c3:00:92:c4:68:
                    22:80:19:7d:a3:0c:2f:a5:24:aa:10:67:93:16:da:
                    e2:07:42:37:21:90:91:9a:d8:5b:40:52:c7:10:7a:
                    9d:24:5f:f1:c2:16:4a:16:92:b7:71:e4:21:3e:26:
                    e8:b0:9c:db:4d:c9:ba:16:f2:3f:6f:1d:05:1d:69:
                    7e:1e:8f:bd:3c:4f:2f:88:af:af:55:7b:8d:33:d9:
                    e1:17:fa:49:36:af:56:26:17:f1:bc:14:4a:1c:8c:
                    ef:c8:49:cd:63:b2:14:ca:cd:70:6a:19:b1:59:a7:
                    d2:6d:52:3e:90:15:aa:04:2a:08:6e:ce:1b:68:60:
                    70:ee:fc:04:3b:59:5d:be:67:6f:5a:88:35:c9:a0:
                    e1:cd:b6:72:6f:4e:14:ce:1c:52:bb:46:f6:b4:52:
                    39:8d:1f:67:77:16:d7:f7:4c:62:fa:52:54:fc:0f:
                    c5:d9:2e:c7:93:4b:1e:f7:bd:6d:dd:19:18:a7:f9:
                    56:40:c2:2a:fe:77:1c:3c:0c:91:3f:f6:96:6d:0d:
                    fb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:01:C8:B7:ED:ED:CE:C1:C7:E7:34:6A:21:C5:2D:FB:B5:67:3C
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e3132362e3139302e302f32332d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:53:c4:86:a4:c3:c5:ab:0c:64:0d:76:8a:24:65:9c:d2:4d:
         43:23:36:7c:47:3f:fa:c3:ed:5f:9f:d1:12:cb:c3:ab:93:b4:
         cd:17:db:f8:8c:cf:c4:68:cd:53:30:a2:bf:d7:7f:b7:25:e6:
         06:19:b9:53:fc:fa:fe:b2:7b:7c:a1:9c:ad:b9:70:ae:7c:3b:
         37:fb:62:b9:9e:5a:13:85:06:5c:9d:9c:33:95:c9:40:d4:6a:
         3d:e5:18:09:89:c7:27:59:c8:44:58:ca:0c:1c:30:9d:c8:5c:
         a0:4c:b2:54:16:4a:25:59:11:75:bd:93:ad:aa:3f:66:f5:8b:
         f3:c1:37:de:f4:db:2f:0a:b0:e9:d8:84:ac:3f:64:a2:a0:69:
         ff:3c:a8:3e:66:bc:a6:76:8e:da:04:c5:67:0e:a1:14:8b:cf:
         11:7c:f1:3f:20:f2:21:6b:14:c3:4a:7d:12:14:54:18:04:40:
         87:50:86:66:4f:25:cb:5a:cc:64:9f:13:5e:0b:59:5f:af:ef:
         98:a8:90:2e:01:db:b1:00:b2:81:64:ff:b3:65:69:91:59:b6:
         65:e0:2a:0f:e1:02:7c:5c:ec:b8:b5:56:65:a2:44:fd:ce:21:
         73:c3:d9:d7:4d:5a:1d:b0:8a:27:eb:30:87:8e:39:27:37:e2:
         2f:16:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:25:04 2026 by rpki-client