Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a313a3a2f34382d3438203d3e20323637343834.roa
File:                     323830343a6135303a313a3a2f34382d3438203d3e20323637343834.roa (raw, json)
Hash identifier:          WESLgi4esLmujR7v3T8gFnrplMlLvmIcY+lMVG6uUgY=
Subject key identifier:   7A:B3:87:C4:CB:D7:7A:0C:3C:55:75:34:54:B2:C0:2D:5A:A5:4C:11
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       5D78774B6E0F9277E1C4F07463C15F75953393D9
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a313a3a2f34382d3438203d3e20323637343834.roa
Signing time:             Wed 27 May 2026 14:34:44 +0000
ROA not before:           Wed 27 May 2026 14:29:44 +0000
ROA not after:            Wed 26 May 2027 14:34:44 +0000
asID:                     267484
IP address blocks:        2804:a50:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:78:77:4b:6e:0f:92:77:e1:c4:f0:74:63:c1:5f:75:95:33:93:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:44 2026 GMT
            Not After : May 26 14:34:44 2027 GMT
        Subject: CN=7AB387C4CBD77A0C3C55753454B2C02D5AA54C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:9c:26:fc:48:b5:6a:db:21:47:9e:3f:ad:
                    3d:12:9d:02:2d:46:7d:2c:f5:8e:3c:62:b0:27:fe:
                    e6:2e:cf:cc:60:7f:b0:39:6a:61:8e:96:c6:aa:03:
                    7c:aa:5c:1e:89:d8:f5:13:f6:c1:54:f5:69:06:4c:
                    eb:ff:4d:fd:9f:db:2d:9b:33:e2:69:54:0f:a0:1f:
                    39:88:d3:89:4d:58:40:fa:bb:6d:85:85:9a:81:2e:
                    ac:b7:0a:86:bd:78:d5:fd:d0:85:39:1e:42:c0:6b:
                    cb:d5:7b:6d:05:76:8b:09:f4:c9:31:c0:c9:f9:ef:
                    84:3b:12:2d:e3:cc:a2:47:cb:95:04:50:2c:6a:88:
                    44:ed:8b:9a:12:33:b3:cb:9c:1f:79:c1:19:bb:bb:
                    7b:b1:79:76:28:f5:a2:0d:c7:0b:84:be:10:7e:03:
                    e0:39:6a:3c:97:5f:e4:81:dc:67:fb:69:85:57:65:
                    29:9b:86:d1:8d:5b:ba:29:c0:e1:f9:69:e4:63:fb:
                    1c:e8:37:da:d9:41:c2:73:dd:24:e8:98:68:04:c5:
                    0f:6e:cc:e0:88:49:95:d1:f7:77:bb:4d:93:2b:b3:
                    b5:4d:16:78:68:13:4c:9d:4f:92:46:a9:7a:85:aa:
                    92:90:fa:63:f3:09:6c:47:23:fe:04:56:da:c0:46:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B3:87:C4:CB:D7:7A:0C:3C:55:75:34:54:B2:C0:2D:5A:A5:4C:11
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a313a3a2f34382d3438203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a50:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:d6:56:bc:eb:22:5a:92:72:11:3b:fe:c3:d7:0f:5f:7e:69:
         ed:4d:6c:16:d8:87:8e:cd:9a:2a:d9:03:a3:44:7a:00:fa:e0:
         25:c5:47:04:da:d6:ff:ca:59:6f:2d:76:20:b1:c8:5c:57:ac:
         6e:69:f3:8d:ba:14:54:34:d7:bb:68:7b:31:a2:d6:1e:fd:74:
         a2:38:9c:a5:8d:76:0e:2d:63:06:e3:f4:b6:ae:a2:ec:6c:72:
         a4:3f:3d:da:73:93:b0:5e:72:5e:10:12:52:49:24:f0:e0:14:
         76:ae:95:d8:8e:6e:5b:80:a8:13:cc:ec:54:cc:29:1e:83:4a:
         2f:8b:bc:3e:d7:8a:cc:22:30:7f:a8:03:a9:0f:81:99:b3:7a:
         29:d1:ba:7f:13:c3:e6:ea:94:d5:ea:de:bf:e3:a2:ab:df:cc:
         df:c9:e1:88:9d:c9:5b:04:1c:1b:f8:70:d2:48:45:b7:2f:eb:
         30:0b:ae:93:d9:09:a1:67:2e:42:6e:2a:1d:45:24:d1:1d:9f:
         bc:0a:5e:8d:36:2e:6e:c7:fd:ff:88:b4:af:eb:d2:85:ca:18:
         96:79:21:28:cb:6b:73:3c:9d:f2:b1:d6:ec:26:f2:6a:d1:43:
         83:e1:5d:50:2f:a9:5b:8b:f6:85:01:eb:96:54:55:fd:0c:c1:
         64:52:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:22 2026 by rpki-client