Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa
File:                     3138392e35312e3134342e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          Aoxfj2nZXUEVJfzwVUGORDXTc1WXohaqnNqVGwNhdzk=
Subject key identifier:   94:1B:BC:7F:88:54:4E:C7:EE:15:87:F0:FB:C7:C9:3A:0B:78:F9:30
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       19575C2B2A8CF7FDE88D3336D4431301ECA4B539
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa
Signing time:             Wed 27 May 2026 14:34:43 +0000
ROA not before:           Wed 27 May 2026 14:29:43 +0000
ROA not after:            Wed 26 May 2027 14:34:43 +0000
asID:                     28349
IP address blocks:        189.51.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:57:5c:2b:2a:8c:f7:fd:e8:8d:33:36:d4:43:13:01:ec:a4:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:43 2026 GMT
            Not After : May 26 14:34:43 2027 GMT
        Subject: CN=941BBC7F88544EC7EE1587F0FBC7C93A0B78F930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:23:5c:f3:a3:35:d5:02:9d:60:b7:8c:1f:
                    20:79:4c:9d:b2:5a:b0:01:05:f7:23:76:a0:73:6b:
                    63:26:cd:b8:f9:ed:50:eb:2e:ea:07:b9:a1:24:4c:
                    8e:8c:43:d0:c0:19:35:1e:ff:d5:c5:ac:ca:2c:57:
                    a1:5e:ee:82:06:70:71:52:4f:f8:60:f0:f0:46:a2:
                    0a:bf:bb:a2:a2:53:8b:24:a7:04:fe:a2:33:4e:68:
                    b1:5c:5d:ad:9a:7a:e6:ac:3f:d3:54:8d:fe:52:fb:
                    43:74:c6:9c:3c:e0:15:ee:5a:80:01:38:d7:06:54:
                    75:b3:40:27:95:62:43:4e:6d:4c:ef:60:10:7c:08:
                    f0:63:91:34:09:67:b5:2b:dc:ba:cb:a2:34:d6:c0:
                    a9:fd:2d:db:0b:b1:38:3e:e3:7e:88:bd:fc:bf:a3:
                    12:ed:97:26:20:d2:a2:c8:02:49:60:00:8c:48:d5:
                    0b:73:2f:32:49:e9:c9:5d:4f:cb:65:dd:5b:84:7b:
                    47:f0:e3:48:92:53:4a:8d:ef:30:0f:81:e6:81:ab:
                    2b:93:f0:b2:e7:7e:54:82:0b:33:fb:b3:47:a2:63:
                    d4:50:2a:cb:2c:b3:c4:c0:39:8e:49:6f:ad:82:a5:
                    b4:64:41:6d:ce:3a:6f:2b:1e:e8:29:58:4d:eb:01:
                    ef:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1B:BC:7F:88:54:4E:C7:EE:15:87:F0:FB:C7:C9:3A:0B:78:F9:30
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3138392e35312e3134342e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:d5:36:4a:bc:e5:94:76:74:11:0b:19:fd:03:76:70:01:68:
         c0:e9:36:cc:90:c6:df:bd:47:48:74:8e:41:11:ac:e9:60:81:
         69:5d:95:c8:d1:a1:87:7f:7b:fd:6c:74:45:fc:d0:f3:b2:c8:
         38:0f:d0:4d:fb:18:35:9a:1d:b1:e2:30:27:d3:46:b3:df:06:
         c1:14:97:86:32:7a:89:be:56:91:78:66:72:f8:10:e6:fd:af:
         f8:65:2a:a6:93:79:8a:97:0f:92:b2:dc:5f:5e:c9:57:29:f2:
         94:7f:47:39:e7:e9:cd:c4:e2:22:16:bc:a1:81:37:11:78:99:
         9b:19:54:a3:bb:fa:a6:26:c6:66:86:70:d5:26:3f:fa:85:c7:
         06:6f:be:c5:a5:4b:ac:83:4e:d4:ef:4b:b5:47:61:1e:bc:92:
         c0:0a:9e:24:95:db:4d:df:9c:a2:e2:83:4c:67:b5:4b:3a:13:
         6a:0e:09:85:b2:0e:56:d0:c6:39:d2:07:ae:ab:9d:b8:a1:7e:
         7d:bd:f1:4a:36:58:00:7e:24:58:e7:8c:f7:01:0f:44:c1:de:
         40:73:44:89:6c:07:3e:36:c2:7d:fc:46:34:e8:27:fa:fa:83:
         7a:3f:35:ff:df:f6:bd:ad:4c:97:04:15:18:35:a7:7e:af:ee:
         e4:6a:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:42:26 2026 by rpki-client