Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3138372e3233362e302f32322d3234203d3e20323637343834.roa
File:                     34352e3138372e3233362e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          Tbl5mWkqTHskqnkhBncl2T22ryfbKKRaKw/htJ+6JCA=
Subject key identifier:   F9:E5:04:9F:81:82:6D:EE:DC:F3:0E:1A:69:F0:BE:76:93:C4:B9:EA
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       7608A2D9D99F6D220AA0A9212DC665323E6B0F82
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3138372e3233362e302f32322d3234203d3e20323637343834.roa
Signing time:             Wed 27 May 2026 14:34:39 +0000
ROA not before:           Wed 27 May 2026 14:29:39 +0000
ROA not after:            Wed 26 May 2027 14:34:39 +0000
asID:                     267484
IP address blocks:        45.187.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:08:a2:d9:d9:9f:6d:22:0a:a0:a9:21:2d:c6:65:32:3e:6b:0f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:39 2026 GMT
            Not After : May 26 14:34:39 2027 GMT
        Subject: CN=F9E5049F81826DEEDCF30E1A69F0BE7693C4B9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:09:6a:90:3b:ea:45:a9:f7:5f:ae:b4:0f:
                    98:d6:4f:08:9b:15:8b:1e:8e:8c:fa:fb:a2:5b:c7:
                    1a:ab:8f:04:97:9f:89:f4:3d:48:e3:aa:ff:f5:3e:
                    5c:2c:f2:e2:9c:8b:28:61:2c:45:c1:e9:1c:3f:b3:
                    21:7a:01:74:3c:55:15:ca:05:7e:12:ce:ee:38:f5:
                    79:6d:e8:66:82:3c:80:bd:83:23:13:8a:2e:da:9e:
                    0e:53:7b:69:24:ec:b8:5b:b3:5d:d3:d3:6b:3b:a9:
                    25:4d:8c:6a:8c:ef:5f:ca:34:92:01:7f:2f:d7:6e:
                    59:89:16:38:1d:43:ae:d0:00:b5:a7:12:c3:39:63:
                    bd:1d:6c:41:2d:bb:aa:ae:85:e6:ed:09:c7:5f:e5:
                    8c:cc:cf:d8:c3:f9:45:d1:4a:49:c5:e9:1f:1b:96:
                    9b:41:ee:82:ee:e0:4c:1a:1e:87:96:82:66:d2:2f:
                    e7:a7:8b:1f:1a:d0:81:15:87:9e:1d:f4:76:56:ef:
                    4b:91:8e:fc:2a:90:07:22:8c:64:08:5c:7e:6c:b0:
                    2e:37:d4:bb:8e:01:6e:a6:06:14:b4:bf:66:ac:17:
                    cf:de:e9:56:54:48:da:28:85:bf:3e:32:a4:a2:bb:
                    77:98:cd:04:75:18:7c:f4:42:ab:f9:36:21:91:4a:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E5:04:9F:81:82:6D:EE:DC:F3:0E:1A:69:F0:BE:76:93:C4:B9:EA
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3138372e3233362e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:62:46:9e:c0:b2:b4:db:ca:88:a1:f6:7d:b1:bb:07:f7:56:
         21:22:54:16:07:7e:67:ca:e6:35:f1:12:fa:60:51:26:be:a4:
         56:95:ed:74:c0:5a:31:d5:95:d5:20:1d:85:57:8d:db:58:a6:
         70:4c:9e:33:b8:c9:5b:95:96:ba:42:36:53:ed:3c:6a:cc:a0:
         62:57:94:bd:9b:b8:68:73:f8:fc:e8:27:4b:6e:2e:8b:f9:8a:
         33:50:bd:0f:ec:71:b6:0d:20:16:56:30:7a:24:e3:e9:8e:35:
         25:aa:20:dc:bc:ad:3a:42:88:5f:ff:bd:f1:fd:43:f7:ed:67:
         30:0d:d5:12:36:9a:b5:10:29:c1:46:dd:56:66:08:e8:35:4e:
         dd:6d:a9:f0:95:47:b2:fd:b2:45:4b:a6:fa:23:23:85:70:fe:
         4a:48:88:e8:8c:5c:b2:72:92:43:c4:f6:26:63:43:5c:95:c3:
         4a:63:ba:67:38:39:db:30:14:ba:e6:da:a1:63:07:70:e6:64:
         1e:6e:ab:a5:6a:b6:6f:d1:f2:0c:c3:75:5b:da:5d:32:38:b4:
         6d:6b:85:84:ad:e1:25:6a:53:f9:f4:f2:dc:e7:ed:1e:ec:e5:
         05:77:a7:db:c2:69:e1:29:76:70:aa:58:ee:68:d3:47:c0:7d:
         0b:09:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:26 2026 by rpki-client