Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a3a2f33322d3438203d3e203238333439.roa
File:                     323830343a6135303a3a2f33322d3438203d3e203238333439.roa (raw, json)
Hash identifier:          cS5vI1VRumjqAEsG+u5Gjs1qBeg7k3/Lf3Fcs5lYR90=
Subject key identifier:   3A:6A:BC:1A:8C:75:45:3C:ED:C9:79:6B:2A:4E:BE:3F:B5:44:4C:F7
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       2EAA4A4640DDA437CE6D7BB7DDE31A5722897E68
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a3a2f33322d3438203d3e203238333439.roa
Signing time:             Wed 27 May 2026 14:34:43 +0000
ROA not before:           Wed 27 May 2026 14:29:43 +0000
ROA not after:            Wed 26 May 2027 14:34:43 +0000
asID:                     28349
IP address blocks:        2804:a50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:aa:4a:46:40:dd:a4:37:ce:6d:7b:b7:dd:e3:1a:57:22:89:7e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:43 2026 GMT
            Not After : May 26 14:34:43 2027 GMT
        Subject: CN=3A6ABC1A8C75453CEDC9796B2A4EBE3FB5444CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:4f:89:32:ee:af:32:83:88:e4:d1:78:f7:
                    b6:99:9b:be:64:12:a5:df:2d:b7:20:3f:c7:7a:a2:
                    4e:2d:47:d2:b0:9b:03:84:a4:e0:70:fa:38:98:9e:
                    94:57:b9:23:d6:1f:c0:05:f3:81:bb:0a:a1:03:e9:
                    7c:1b:69:3f:12:18:fb:dc:04:f8:ca:0d:d4:a9:cc:
                    bd:3f:4c:7d:54:22:7b:bd:9f:2f:b7:08:86:f5:d3:
                    1b:ca:fc:75:bf:b2:36:d2:39:62:59:7b:45:20:e7:
                    f5:77:d8:ff:bd:a9:66:09:d1:5b:35:96:17:21:36:
                    50:09:8b:eb:7f:7a:d4:37:de:8e:6b:3e:59:a5:af:
                    96:5b:58:b5:94:87:4d:f2:66:18:17:5f:5d:cf:6e:
                    ab:75:f1:59:6f:41:d6:73:fe:3c:bd:56:3e:e8:ad:
                    e8:0c:c8:7b:8f:e4:c5:b8:02:74:e8:0a:dc:54:d0:
                    8f:62:d8:f7:e7:62:0b:b0:0f:cc:30:ed:86:16:0e:
                    51:e2:d1:0c:33:81:27:0a:37:9f:f3:b7:56:3e:6c:
                    c6:1f:15:40:89:f5:40:0b:f9:7a:83:01:cc:20:6c:
                    52:95:95:07:95:c7:a7:ca:32:0f:ec:96:36:56:e4:
                    07:9d:6c:62:a9:b1:0f:40:3c:a8:47:21:61:d6:a8:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6A:BC:1A:8C:75:45:3C:ED:C9:79:6B:2A:4E:BE:3F:B5:44:4C:F7
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6135303a3a2f33322d3438203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:74:55:0e:c4:a3:95:3c:70:2e:29:ce:30:3c:36:14:9d:
         69:d5:6f:85:a6:ec:f5:a7:5f:74:fb:82:ec:f5:ab:fc:de:39:
         1e:92:b3:45:6a:24:f0:7a:54:33:13:38:53:0e:a3:58:70:6a:
         54:84:9c:69:ab:d7:fd:03:2c:74:ec:d0:07:0c:93:f9:ac:1d:
         0b:ad:d0:a0:00:e1:5e:58:bc:02:a9:6b:15:fa:fd:38:2a:a6:
         b2:89:2e:b5:d5:58:cf:b6:72:68:bc:33:3c:11:f0:35:77:65:
         2f:b8:a0:31:75:88:a3:45:36:7d:25:6b:80:a4:a0:a3:43:92:
         e7:17:55:01:32:5f:1d:6f:5b:12:fe:ed:9b:8a:68:f2:6e:18:
         ed:76:c8:c7:8b:89:11:35:6b:9c:65:49:de:41:f5:6b:c5:73:
         76:50:5d:f5:9c:25:46:7a:8b:89:ee:dc:fe:3a:81:2b:96:68:
         73:d2:99:a3:1e:7f:22:3c:74:05:c1:5d:d6:c5:d6:30:9c:ab:
         c0:00:67:a6:f3:0c:96:4a:00:34:27:73:ac:a4:90:42:8e:26:
         60:b7:a0:ac:6a:98:63:75:0d:bc:ca:d0:0c:e7:6f:0b:ae:83:
         f5:88:8f:bd:e8:6a:1c:6a:4a:1b:f0:40:56:e4:06:3c:95:2a:
         78:37:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:06:52 2026 by rpki-client