Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa
File:                     323830343a343162383a3a2f33322d3438203d3e20323637343532.roa (raw, json)
Hash identifier:          YfCCE4QmYhZXdEQkMG0Nqz6f/m5gjCUWSw58dV73sgQ=
Subject key identifier:   A3:18:26:8A:57:C1:89:1D:D6:2C:B9:DB:58:3D:40:B3:FE:62:23:F0
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       43DDD1C2F6072C9D5DED3496454FB408701183B0
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa
Signing time:             Wed 27 May 2026 14:34:49 +0000
ROA not before:           Wed 27 May 2026 14:29:49 +0000
ROA not after:            Wed 26 May 2027 14:34:49 +0000
asID:                     267452
IP address blocks:        2804:41b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:d1:c2:f6:07:2c:9d:5d:ed:34:96:45:4f:b4:08:70:11:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:49 2026 GMT
            Not After : May 26 14:34:49 2027 GMT
        Subject: CN=A318268A57C1891DD62CB9DB583D40B3FE6223F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:91:0a:f3:6e:9d:9d:f9:1f:c9:84:24:f0:
                    a2:92:09:57:5d:f0:2a:a5:0e:a1:28:6c:bc:18:16:
                    c6:e3:58:e7:9b:f9:4b:42:2b:42:62:75:f8:e0:32:
                    13:cc:47:65:0b:e0:6e:be:05:9b:cf:df:59:df:e3:
                    fd:e6:78:96:65:15:5f:9a:35:e5:60:49:8f:10:20:
                    59:4b:19:c5:5f:77:d7:96:cd:ef:f3:c5:d2:41:69:
                    6b:46:d1:b2:84:7b:76:9b:1e:31:ae:87:b1:80:cc:
                    0c:0e:67:b2:a6:11:0e:96:cc:14:b7:9e:22:e8:6d:
                    35:3a:78:17:17:4f:0b:1f:fb:00:c0:51:09:65:2a:
                    7e:3f:47:44:3b:e9:4a:a9:62:9e:a7:4f:d5:3f:ab:
                    64:e9:01:87:35:2f:44:22:26:3e:63:b4:a1:e4:e7:
                    e4:e9:47:7a:7c:5f:d0:02:06:a5:2c:d2:5e:82:84:
                    c5:a4:4a:b8:3b:a8:a4:56:be:1d:9d:84:d6:c6:31:
                    7a:b6:93:ed:23:59:ce:1e:d2:56:c4:f0:2c:51:31:
                    fa:7b:fa:dd:ea:d3:bc:cd:8f:3f:3a:0d:75:2d:f1:
                    a5:df:60:b2:cf:75:1e:38:de:95:30:bb:6b:f7:3f:
                    a7:0b:3f:1c:e1:bb:61:ce:6f:2f:2a:df:da:b9:c2:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:18:26:8A:57:C1:89:1D:D6:2C:B9:DB:58:3D:40:B3:FE:62:23:F0
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:0c:a7:36:9b:1e:ce:39:2f:55:3c:bb:14:80:85:28:8b:
         c1:a7:f3:a1:67:83:b2:af:f8:80:be:89:d2:43:d6:5d:3e:90:
         08:7d:b0:12:3b:1c:44:d0:d2:d6:97:e0:e1:25:94:10:59:4c:
         5b:a0:3c:af:0d:a5:95:b0:aa:12:8f:4c:69:28:45:f0:b7:1c:
         cc:86:65:a5:d0:65:eb:b4:68:87:c3:58:c1:cf:e0:d1:f6:65:
         a2:5e:ae:7b:b9:0a:f4:e0:94:09:2c:b4:c8:1b:7c:90:60:e8:
         e7:97:d6:97:4a:1a:bc:16:c3:08:9e:0f:7a:a5:47:11:4c:10:
         2c:b5:e3:cd:b6:c0:98:99:e4:69:f4:63:7b:c0:17:00:ce:59:
         09:7c:b2:51:ad:e9:7a:85:f7:81:6a:35:f8:ac:79:d2:a6:3f:
         29:3f:6b:6e:9d:51:bb:29:cc:99:16:f7:11:21:1a:00:f3:0b:
         cf:8b:3b:c8:69:94:73:d0:b3:8a:7a:f9:b7:e7:29:f3:42:c5:
         ba:61:49:7f:75:b3:76:1c:52:de:b3:47:67:2a:6a:6d:e6:02:
         f0:e6:9c:d0:ce:f3:1e:43:78:74:3e:fd:f6:e1:80:72:f1:89:
         9d:98:24:b6:71:0e:88:68:3a:80:c6:01:a3:57:40:db:30:0b:
         3d:5a:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:04:09 2026 by rpki-client