Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
File:                     323830343a3535343a3a2f33322d3438203d3e203533313433.roa (raw, json)
Hash identifier:          oTVPN54Z3bOj3J7riCWiZG9KitRBre/pmjH6FWLiWis=
Subject key identifier:   5B:2D:BC:D7:DC:88:6E:11:63:6F:BC:7D:C4:5B:09:BE:05:73:F4:85
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       12DD3EAB745ABDFBA77438A68CA38706E8DB44C9
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
Signing time:             Wed 27 May 2026 14:34:45 +0000
ROA not before:           Wed 27 May 2026 14:29:45 +0000
ROA not after:            Wed 26 May 2027 14:34:45 +0000
asID:                     53143
IP address blocks:        2804:554::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:dd:3e:ab:74:5a:bd:fb:a7:74:38:a6:8c:a3:87:06:e8:db:44:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:45 2026 GMT
            Not After : May 26 14:34:45 2027 GMT
        Subject: CN=5B2DBCD7DC886E11636FBC7DC45B09BE0573F485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:c8:b0:32:3d:ef:eb:0f:f2:97:35:c3:48:
                    17:b7:d0:d9:3e:a4:c2:d2:6c:a0:61:da:69:83:ab:
                    1d:46:eb:a3:20:d6:16:1b:28:fa:a1:4a:1e:e3:3b:
                    54:8f:70:5b:0c:ae:87:2e:e8:32:e4:c7:11:a9:d9:
                    bd:cd:6f:9e:cc:d4:f4:8c:b5:f6:01:dc:72:08:b7:
                    b4:31:d7:93:57:df:8e:b5:3a:21:27:d1:9a:eb:a3:
                    62:f0:b5:25:09:c0:f0:3c:5a:77:7f:b4:90:af:3a:
                    13:65:ea:b5:8b:ec:bf:f1:1c:6e:b3:65:ff:6b:09:
                    0b:bb:6d:13:27:26:63:17:1c:7b:4d:7c:44:6c:7c:
                    f3:18:a7:fa:06:41:cb:8c:a8:d7:1c:26:38:8f:94:
                    a2:c0:2e:84:12:1f:e6:e4:a4:c4:5c:37:2f:a6:21:
                    2f:1c:65:c6:39:ae:93:4b:6d:d5:77:47:dc:1d:3e:
                    6f:9f:31:96:f0:d3:3f:b0:c4:05:25:1f:9e:7e:2b:
                    36:60:e6:6b:23:57:77:5a:e6:bb:83:07:29:6f:ed:
                    bb:4b:5a:8c:fa:14:93:db:09:e1:40:50:82:4e:f7:
                    9d:83:6c:13:74:bd:2e:72:a1:63:09:a3:b3:76:65:
                    b1:14:3a:c8:46:8e:c2:25:db:31:58:51:b5:11:66:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2D:BC:D7:DC:88:6E:11:63:6F:BC:7D:C4:5B:09:BE:05:73:F4:85
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a3535343a3a2f33322d3438203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:66:97:b1:3c:9f:05:45:c4:c6:82:2f:32:36:12:34:35:
         cd:37:31:d6:fa:9e:3e:c3:94:67:44:e5:34:d6:e9:15:d5:f5:
         06:53:f6:61:cc:04:99:fd:bc:ad:8f:94:c7:83:c4:ef:ac:d5:
         a9:be:b7:0a:0d:7e:b3:12:2a:43:a0:a3:01:de:ee:40:cb:4a:
         73:73:72:71:a0:3b:44:bb:7a:f5:cc:39:9d:fd:c9:1a:a3:06:
         77:a9:22:f4:e6:d5:ea:0a:39:bf:2e:67:ab:9d:2f:64:7c:80:
         ca:f0:8c:85:99:a8:88:8d:73:98:da:ea:26:cc:36:ec:c1:28:
         54:59:dd:6f:69:2c:78:30:60:11:b9:61:7e:44:d0:22:7c:9b:
         76:9f:6f:da:c9:e9:6d:ad:66:88:1f:da:98:52:37:f6:dd:af:
         86:46:54:24:5f:b0:2d:55:43:e9:f0:3b:54:cf:c1:fc:eb:d2:
         60:a1:8b:f0:25:2a:10:bd:4e:35:df:4b:d4:6b:f2:cb:15:8b:
         6b:b7:9c:be:12:b6:d1:2e:b7:7b:f8:0d:ee:22:a4:5e:6f:b3:
         ef:b4:16:f7:d2:de:59:75:8b:a0:b7:48:01:b3:5d:b3:bf:f8:
         0a:36:7a:62:bd:6a:ce:6a:1b:ac:6d:db:0a:f9:9c:cf:80:92:
         f8:63:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:45 2026 by rpki-client