Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
File:                     34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa (raw, json)
Hash identifier:          h5iQ976Ulu8eiV8FEphEB4VsIB6rOQce2GLx5xfqXes=
Subject key identifier:   12:3F:84:70:5D:3D:49:44:E6:15:61:68:D5:41:65:18:CC:DF:7F:61
Certificate issuer:       /CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
Certificate serial:       6C51A34D53B85EE6E1A01923193D692D66B1868A
Authority key identifier: 34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
Signing time:             Wed 27 May 2026 14:34:41 +0000
ROA not before:           Wed 27 May 2026 14:29:41 +0000
ROA not after:            Wed 26 May 2027 14:34:41 +0000
asID:                     267203
IP address blocks:        45.231.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:51:a3:4d:53:b8:5e:e6:e1:a0:19:23:19:3d:69:2d:66:b1:86:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B460F5FF862F569A8FECDB8A12A9A70C0E50A2
        Validity
            Not Before: May 27 14:29:41 2026 GMT
            Not After : May 26 14:34:41 2027 GMT
        Subject: CN=123F84705D3D4944E6156168D5416518CCDF7F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:49:f6:9c:0d:3a:97:e7:f2:95:63:71:2f:
                    b8:43:82:8b:f9:7e:fa:2c:a2:ab:35:ed:75:5d:c8:
                    06:dd:9a:86:c2:dc:ab:a5:6a:ca:b0:de:2c:ab:76:
                    42:6b:91:99:ee:93:47:6a:cf:1f:a3:3a:48:83:01:
                    94:fa:16:e1:2e:5d:c7:7f:82:09:49:56:2a:76:5c:
                    50:da:d6:d7:9f:16:ac:c8:c9:11:a2:78:77:d7:83:
                    6f:19:2c:c2:eb:d6:da:52:dd:29:71:9e:01:f5:94:
                    de:d9:de:be:99:20:cc:ef:f8:15:5f:33:12:88:a4:
                    ec:fd:cb:ec:04:71:8d:1b:e6:51:75:a0:a8:20:4c:
                    0a:04:55:1b:46:5a:48:cc:bb:a2:89:fe:ba:3b:dc:
                    1a:a2:9b:05:a2:91:33:38:cc:3b:42:b1:9d:0d:81:
                    fd:81:01:b2:9a:a6:04:4f:eb:36:29:83:0d:21:2c:
                    03:f9:5b:9a:ff:d6:6b:50:21:ad:ee:28:60:a0:09:
                    fe:7d:6b:e0:c7:25:40:d1:b4:b1:7b:f7:24:82:90:
                    8e:e1:ac:31:26:19:0e:28:66:49:6b:34:4b:98:85:
                    25:a7:f3:db:25:10:0a:c5:10:e2:1f:6e:e6:27:90:
                    41:e6:fb:5b:b6:2c:76:38:61:23:c8:40:92:08:03:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:84:70:5D:3D:49:44:E6:15:61:68:D5:41:65:18:CC:DF:7F:61
            X509v3 Authority Key Identifier:
                keyid:34:B4:60:F5:FF:86:2F:56:9A:8F:EC:DB:8A:12:A9:A7:0C:0E:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34B460F5FF862F569A8FECDB8A12A9A70C0E50A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:f2:49:94:9d:af:dc:d2:16:bc:39:ab:90:bd:cf:29:cf:10:
         4c:57:c2:08:d5:28:f8:f8:c7:8b:1a:fb:0f:f7:96:51:05:97:
         e1:b0:2b:40:d1:f2:ee:98:02:ba:46:3b:b4:8c:0e:bd:5a:b6:
         82:af:c2:06:67:98:e7:6f:4d:d8:0b:ed:88:d4:28:ae:36:33:
         f6:de:8b:db:4f:bd:d5:f9:36:ea:84:7f:df:f7:55:49:a6:21:
         d3:ea:15:71:40:97:0e:9c:1e:21:1a:cf:5c:21:f2:4d:3b:7a:
         8f:24:48:3b:5e:bf:e3:0e:d8:01:b7:d2:83:62:ab:5e:7e:ae:
         f1:3c:dc:26:3c:e6:d8:80:46:76:f2:c6:a0:76:3e:02:0e:df:
         a4:fa:f4:44:9c:97:ba:2d:1d:42:41:6b:a8:20:c8:25:dc:7f:
         0c:46:8a:ef:bf:71:78:92:c8:4d:32:7a:2e:80:d2:67:0f:11:
         b0:6b:e2:60:ca:bf:1d:19:3b:3c:d1:69:6e:f3:72:8c:07:eb:
         2b:bb:73:7a:9a:f1:23:79:91:b7:2e:42:dd:23:94:2d:76:ed:
         be:20:1e:f8:84:62:5e:d3:43:52:d3:2f:f8:01:2f:a7:fe:60:
         20:a7:1c:e3:0c:a8:cf:ae:d6:26:66:93:0e:fc:de:d9:3c:aa:
         1d:99:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:16:52 2026 by rpki-client