Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3230312e37362e3232342e302f31392d3234203d3e203238363437.roa
File:                     3230312e37362e3232342e302f31392d3234203d3e203238363437.roa (raw, json)
Hash identifier:          iPzXJtXr7T9CLmMK2QJR9ZbfUOxYyWn4zYsL8GH+JEI=
Subject key identifier:   CC:DF:AF:E8:D6:06:40:9A:E9:E4:96:BB:51:B1:60:65:B9:09:B4:AA
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       773E7F9F64F39FE634709A8D26A16C65FF366FF1
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3230312e37362e3232342e302f31392d3234203d3e203238363437.roa
Signing time:             Wed 27 May 2026 14:34:40 +0000
ROA not before:           Wed 27 May 2026 14:29:40 +0000
ROA not after:            Wed 26 May 2027 14:34:40 +0000
asID:                     28647
IP address blocks:        201.76.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3e:7f:9f:64:f3:9f:e6:34:70:9a:8d:26:a1:6c:65:ff:36:6f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:40 2026 GMT
            Not After : May 26 14:34:40 2027 GMT
        Subject: CN=CCDFAFE8D606409AE9E496BB51B16065B909B4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:43:dd:88:5f:bc:e5:d6:3b:00:ef:4e:b6:
                    02:a5:6b:89:49:47:a2:cb:c3:97:da:b4:e2:b1:f6:
                    43:61:6b:16:ae:68:35:19:ed:a4:ab:98:a2:6e:5a:
                    20:9e:e4:80:22:51:4e:0e:a7:4a:ca:e7:1e:56:f4:
                    13:93:b7:5c:c7:d1:33:76:c8:7d:35:95:ae:55:28:
                    8d:7b:f9:46:3b:41:4f:c2:7f:df:73:c1:ba:30:aa:
                    ea:3a:ae:c5:2b:1d:f9:cc:5d:4a:fc:3d:96:62:ea:
                    6a:02:99:7f:16:0f:55:c7:fb:72:ef:ea:f1:03:bb:
                    ad:10:89:a4:37:69:36:2f:41:58:f5:9d:b9:07:84:
                    cb:ec:e8:be:49:2b:5f:89:8c:d1:94:95:99:ac:73:
                    10:f2:26:a1:25:0f:aa:88:84:44:8a:ee:88:3f:e5:
                    55:a9:44:ec:3e:44:01:53:e6:3d:b6:90:c8:fb:5e:
                    c7:82:20:e9:cc:ca:de:cd:66:05:02:d3:be:e1:07:
                    8a:84:c0:a9:ee:f5:8b:59:2b:57:16:eb:81:a4:de:
                    5a:99:d0:94:e8:af:d0:7c:ca:a8:29:72:e0:71:d0:
                    56:4e:b9:81:2b:85:cf:d4:01:a5:9f:15:bc:63:b5:
                    24:fc:73:e0:26:9d:85:16:60:e3:4f:53:7a:e8:5e:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:AF:E8:D6:06:40:9A:E9:E4:96:BB:51:B1:60:65:B9:09:B4:AA
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3230312e37362e3232342e302f31392d3234203d3e203238363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:f1:de:4c:45:e8:1c:43:db:40:ce:dd:99:5d:dc:fc:64:
         1f:7d:e2:65:d5:73:d1:34:88:63:31:a2:38:ab:52:4d:29:d9:
         bf:98:18:41:1d:20:b9:a7:20:af:b5:70:cb:cd:4d:da:6d:9b:
         39:bb:26:b3:4d:54:55:06:47:91:9c:07:14:9e:89:aa:28:19:
         7e:2b:44:75:22:74:a4:78:0d:24:6b:58:af:4b:21:e1:09:8f:
         f3:36:20:c6:fa:5f:e0:cb:cb:13:ea:11:82:66:7a:17:a1:8a:
         86:22:9a:cf:12:05:df:cb:d2:49:0e:bd:fe:04:43:d7:6a:40:
         2e:b4:c4:7d:be:a0:60:6f:78:9e:16:e4:4c:fc:c0:0d:d4:62:
         cd:e3:06:8d:86:c7:cf:b2:c7:e3:8b:c0:96:28:c3:c0:4e:c5:
         64:fc:54:dd:58:fe:b9:5f:e2:d9:88:02:74:41:81:b1:08:55:
         1e:88:2d:c8:13:a6:c1:31:51:9a:e9:ee:ec:ef:fe:63:03:2e:
         f0:bf:fb:5c:63:a1:be:60:61:a6:e4:a4:17:75:eb:e7:b1:1f:
         bb:a8:fa:49:7e:91:b9:57:ab:f2:ae:8f:51:2c:60:75:a8:f0:
         f9:72:19:42:f7:88:b8:6d:31:ce:9a:3b:20:f4:21:48:77:47:
         59:56:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:14:44 2026 by rpki-client