Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa
File:                     34352e342e32382e302f32342d3234203d3e20323636303336.roa (raw, json)
Hash identifier:          JGWALiMeCoJdsegVqCb4iu2ElKIIUtJvrVEzGMqTviE=
Subject key identifier:   41:81:FB:F5:3E:F2:E9:4B:DB:40:61:FE:A8:DB:76:AB:AF:84:5F:40
Certificate issuer:       /CN=99DB3D494C8CBCB5E12E1192671726ECCC6E2067
Certificate serial:       269E24DD89C410E972F3CA70FE8449DC9B7FC987
Authority key identifier: 99:DB:3D:49:4C:8C:BC:B5:E1:2E:11:92:67:17:26:EC:CC:6E:20:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa
Signing time:             Tue 26 Aug 2025 20:17:21 +0000
ROA not before:           Tue 26 Aug 2025 20:12:21 +0000
ROA not after:            Tue 25 Aug 2026 20:17:21 +0000
asID:                     266036
IP address blocks:        45.4.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9e:24:dd:89:c4:10:e9:72:f3:ca:70:fe:84:49:dc:9b:7f:c9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DB3D494C8CBCB5E12E1192671726ECCC6E2067
        Validity
            Not Before: Aug 26 20:12:21 2025 GMT
            Not After : Aug 25 20:17:21 2026 GMT
        Subject: CN=4181FBF53EF2E94BDB4061FEA8DB76ABAF845F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:8a:35:d4:be:36:5f:81:b0:be:dc:b4:82:
                    d3:8b:9f:28:7e:a3:00:c7:ca:5c:72:fe:1a:b9:d9:
                    63:11:d2:51:2a:c5:f8:12:11:0d:08:41:c1:93:c4:
                    d1:69:d9:8b:ab:85:76:96:a0:0a:3b:a8:26:c3:fb:
                    96:27:0a:2b:56:9e:44:51:5d:3e:17:20:b4:b2:62:
                    2b:7b:d5:84:40:24:b8:6e:4c:8b:48:f4:62:28:c0:
                    10:0f:62:08:82:d4:21:e3:9e:14:89:e8:22:51:b6:
                    75:e0:a8:0c:72:64:7d:bd:b8:b0:fc:40:4d:b3:1a:
                    01:24:fb:35:b8:f2:9e:77:29:b3:54:34:10:c2:8f:
                    67:c3:48:38:41:d5:de:af:4d:6d:50:c7:83:5f:54:
                    47:9b:75:3d:86:b1:6a:de:43:e6:03:aa:8e:18:33:
                    e5:14:6e:49:17:d7:7b:be:60:0c:c3:3d:2e:0d:ea:
                    73:88:d1:40:ec:65:be:51:85:9e:34:f8:42:4f:4b:
                    79:d0:85:14:0b:ac:fa:59:3e:d6:a6:3d:24:42:00:
                    f3:dc:0d:7a:74:e6:0f:59:1b:1e:f6:ff:dc:ae:2f:
                    dc:10:60:a5:c8:8c:be:0e:9b:07:a5:ba:f9:c0:2e:
                    57:5b:dd:3f:b9:11:f2:a6:9f:c0:1e:99:4e:91:ef:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:81:FB:F5:3E:F2:E9:4B:DB:40:61:FE:A8:DB:76:AB:AF:84:5F:40
            X509v3 Authority Key Identifier:
                keyid:99:DB:3D:49:4C:8C:BC:B5:E1:2E:11:92:67:17:26:EC:CC:6E:20:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:35:fd:88:8b:1b:42:ed:f2:0f:60:41:86:75:fb:fd:49:
         23:df:ac:66:3e:f2:66:54:8e:17:17:97:ec:c5:90:f5:da:26:
         26:08:6c:b5:bd:98:48:07:66:e8:31:4f:51:8a:e1:b3:29:d5:
         09:96:12:c1:25:7e:8e:66:1b:94:30:6f:9e:f9:e6:d0:31:f2:
         ee:6f:c9:7d:02:5f:40:79:78:51:d1:8d:07:fe:60:85:50:c4:
         e9:cc:28:15:e0:6a:87:6b:c4:1f:94:fd:97:c4:e8:be:de:4f:
         1d:c5:90:df:53:9e:90:17:38:86:21:f3:30:35:47:cd:8f:c5:
         e4:2f:db:fe:4a:da:21:ad:82:4a:6a:6c:6e:30:91:f3:23:58:
         0b:7f:f8:13:ed:e0:c1:0e:ce:4b:6e:60:bd:dc:04:2e:27:8d:
         e4:56:e4:71:75:57:5c:55:42:8c:6d:48:97:41:21:57:55:11:
         7b:a1:9c:c6:29:bb:1c:c5:c0:c3:60:7b:96:12:e2:47:80:8f:
         92:69:a4:e7:1d:eb:37:e2:92:ef:b2:4b:0e:fe:d2:8b:dd:84:
         5b:9a:ad:d8:95:b5:4e:22:70:f4:07:5b:7b:b3:09:5b:18:ec:
         9a:87:2f:77:75:ca:fa:b6:cb:a7:a4:2d:7d:e1:01:ca:4c:de:
         73:d8:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:50:20 2025 by rpki-client