Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32322d3233203d3e20323636303336.roa
File:                     34352e342e32382e302f32322d3233203d3e20323636303336.roa (raw, json)
Hash identifier:          cKjn0QkZjcWT+YQfTrZ3nRc+SvsY+eVsOgAyvYNGPcU=
Subject key identifier:   28:13:D0:B7:3B:F6:25:88:56:7C:20:53:5A:8E:70:D6:5B:4C:25:00
Certificate issuer:       /CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Certificate serial:       4331D375DD18881BE2C9BD39CE70498750C065A6
Authority key identifier: 53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32322d3233203d3e20323636303336.roa
Signing time:             Fri 21 Aug 2026 21:25:19 +0000
ROA not before:           Fri 21 Aug 2026 21:20:19 +0000
ROA not after:            Fri 20 Aug 2027 21:25:19 +0000
asID:                     266036
IP address blocks:        45.4.28.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:31:d3:75:dd:18:88:1b:e2:c9:bd:39:ce:70:49:87:50:c0:65:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
        Validity
            Not Before: Aug 21 21:20:19 2026 GMT
            Not After : Aug 20 21:25:19 2027 GMT
        Subject: CN=2813D0B73BF62588567C20535A8E70D65B4C2500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:83:97:19:b7:58:1f:68:74:42:a8:e2:b0:
                    16:be:47:8c:b2:45:4b:66:4f:6a:34:33:a3:ed:5d:
                    15:4d:0d:98:53:29:07:04:e5:1b:e8:8c:85:f0:0a:
                    ff:8e:dc:48:1f:c5:19:66:47:de:17:12:58:b7:10:
                    91:65:2f:fe:1a:b2:a8:3b:c6:bc:a4:d9:e9:4a:e8:
                    37:52:b2:99:64:c6:25:09:c8:b0:ff:d7:fc:df:e5:
                    fe:6f:af:dc:56:5d:3a:cd:30:4e:02:9d:8f:c3:3d:
                    4c:48:7c:00:f3:8b:2d:77:aa:8b:fa:a8:c6:1b:31:
                    fc:15:a1:bc:7e:77:31:38:64:85:10:6f:e0:94:a7:
                    ed:1e:46:4c:16:9a:79:be:f9:22:80:15:13:c3:55:
                    87:99:e6:2d:34:eb:4a:aa:a6:74:be:ad:b4:01:78:
                    fc:61:a8:dc:c7:a9:d6:d9:5f:ce:5b:4a:10:db:3a:
                    30:91:35:a5:86:da:92:48:ab:9a:2b:34:70:b1:68:
                    ed:aa:98:9d:2f:9c:84:1a:8f:5a:69:e3:52:fa:cc:
                    1e:26:7c:64:3d:9d:83:2c:a3:e7:71:05:e3:50:14:
                    fb:cd:35:43:91:46:7f:76:9d:0e:83:d0:17:a7:20:
                    b5:87:e0:09:30:ca:72:c0:a0:19:1b:af:1e:3c:33:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:13:D0:B7:3B:F6:25:88:56:7C:20:53:5A:8E:70:D6:5B:4C:25:00
            X509v3 Authority Key Identifier:
                keyid:53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32322d3233203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:39:8a:e3:8f:31:3c:65:cc:de:d9:fd:68:c0:57:85:72:
         0f:84:d1:18:b0:4c:a2:b6:a6:32:ba:29:29:21:aa:9a:c8:af:
         ca:1c:57:c5:d7:46:be:04:82:11:63:1e:01:fc:e9:48:eb:93:
         a5:e7:e0:d9:a5:4b:aa:3f:14:23:54:ec:2b:9e:7b:9a:82:07:
         f5:ba:c5:8f:c4:79:8c:b1:d2:41:43:e6:93:c9:40:ca:50:eb:
         9a:76:30:28:d5:d1:64:2d:a6:93:f2:d9:99:bc:e9:57:a3:08:
         b9:aa:64:de:b1:19:c5:0a:eb:cf:31:c4:5e:f1:02:b0:e5:1d:
         e9:43:6f:8a:db:f4:4e:c2:f7:ec:fc:9b:c4:1f:b3:e6:11:c0:
         cf:4b:a8:63:bb:e7:e2:03:d6:6d:29:3b:03:67:64:a2:c0:f5:
         4d:58:7f:c6:ea:47:ba:b2:2c:73:b4:6e:74:58:fd:cb:ee:f1:
         34:94:15:a9:7e:0e:3a:78:15:42:7a:12:c0:75:2b:23:0c:ce:
         e0:5b:e6:fb:a5:8c:77:61:5c:b2:f6:7c:14:3b:90:f6:1e:09:
         9e:1f:97:3d:65:0d:59:c5:e0:bb:a1:8f:9a:05:55:4c:f9:20:
         c0:82:05:7a:33:7e:7f:58:9d:ef:21:87:f0:e1:45:fe:a1:65:
         58:6b:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:42:35 2026 by rpki-client