Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa
File:                     34352e342e32382e302f32342d3234203d3e20323636303336.roa (raw, json)
Hash identifier:          q8aE67Fe/7d7ZMHkkU3M1IoPQi8JCXhZ57NzdiRqwoA=
Subject key identifier:   20:27:80:17:10:D5:67:09:25:6E:58:19:01:4E:47:70:BA:CB:CE:D1
Certificate issuer:       /CN=5CB149AF86F89858ADCF9D29260F704D0BB85911
Certificate serial:       35F6B1E785FFFE63298958F7942AF69AB57D95B7
Authority key identifier: 5C:B1:49:AF:86:F8:98:58:AD:CF:9D:29:26:0F:70:4D:0B:B8:59:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB149AF86F89858ADCF9D29260F704D0BB85911.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa
Signing time:             Tue 24 Jun 2025 17:33:02 +0000
ROA not before:           Tue 24 Jun 2025 17:28:02 +0000
ROA not after:            Tue 23 Jun 2026 17:33:02 +0000
asID:                     266036
IP address blocks:        45.4.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB149AF86F89858ADCF9D29260F704D0BB85911.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f6:b1:e7:85:ff:fe:63:29:89:58:f7:94:2a:f6:9a:b5:7d:95:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB149AF86F89858ADCF9D29260F704D0BB85911
        Validity
            Not Before: Jun 24 17:28:02 2025 GMT
            Not After : Jun 23 17:33:02 2026 GMT
        Subject: CN=2027801710D56709256E5819014E4770BACBCED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:8e:72:d5:d4:2e:73:78:57:11:9d:3a:35:
                    e0:5b:24:17:57:01:62:cf:e7:e5:0b:1c:34:15:55:
                    6d:97:22:4e:bc:6e:aa:22:0d:e6:ac:68:7b:88:f2:
                    fd:69:4c:38:5e:b5:9d:6f:c4:9d:a8:04:93:97:8a:
                    47:19:e7:1b:55:11:79:7c:57:30:b7:1e:e3:4f:b8:
                    01:13:a6:9a:62:a8:3b:ae:76:f6:75:35:b6:27:94:
                    41:58:58:6f:01:a1:be:c2:60:f9:e8:0d:cc:9b:dd:
                    e1:7d:a5:cd:bc:68:6b:0e:88:d4:cf:f4:29:1e:cb:
                    a6:90:59:ed:3d:47:8d:c6:08:84:5e:30:72:34:6d:
                    ad:13:24:c7:ad:90:4f:ee:a2:f8:30:0c:c4:1b:61:
                    29:25:af:87:6b:64:e3:61:8a:e3:a0:64:ea:3e:9e:
                    d8:8c:56:cd:a4:cd:63:77:d4:d1:59:fd:e0:e0:ce:
                    50:53:18:61:56:ad:ad:39:32:f6:13:09:be:3e:e0:
                    0d:1a:87:17:30:02:aa:07:09:08:d9:f2:dd:5a:4f:
                    0d:89:1f:90:02:c8:ad:ca:9d:54:5d:6a:64:f8:59:
                    3a:00:fa:64:7f:d4:6b:b8:69:4b:bb:f9:41:83:0a:
                    09:30:76:68:c5:e7:0e:ce:56:68:e7:c3:da:90:7d:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:27:80:17:10:D5:67:09:25:6E:58:19:01:4E:47:70:BA:CB:CE:D1
            X509v3 Authority Key Identifier:
                keyid:5C:B1:49:AF:86:F8:98:58:AD:CF:9D:29:26:0F:70:4D:0B:B8:59:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB149AF86F89858ADCF9D29260F704D0BB85911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:2a:c1:3f:cf:b2:af:75:c6:a2:ea:3a:88:ea:45:fe:e6:dd:
         f1:b8:46:d6:38:d2:2e:8b:9a:4b:05:03:3e:cb:76:35:e0:37:
         9a:1a:ad:66:3d:41:45:91:29:8e:34:40:a7:a4:bf:34:91:c5:
         cb:bf:9b:05:f3:6d:59:be:58:7a:86:9e:52:bc:b6:45:cc:98:
         70:c4:37:6b:ec:e9:fd:c0:59:81:c0:7f:70:08:20:c0:43:69:
         ca:1c:4d:73:92:f1:e7:b3:fa:99:7a:f9:cb:9b:23:44:e6:d1:
         98:61:c6:f3:2a:0c:ee:80:97:aa:c3:99:c6:34:00:11:dc:70:
         32:b7:c3:dd:e3:d6:f7:08:e7:d0:56:9c:81:de:25:c0:c7:8c:
         ae:a6:95:08:3e:9d:ae:95:fb:54:6a:23:a1:71:a5:86:3a:e0:
         64:ce:20:44:02:18:93:bb:82:3f:6d:94:cb:d9:20:09:a2:8c:
         df:42:7d:8a:a2:17:f7:8f:f9:07:19:a9:88:28:28:98:c9:b5:
         44:4e:4b:f1:a7:08:ff:2e:e5:be:41:d2:56:ba:30:8f:1c:5a:
         62:cb:2a:a5:31:78:1f:bf:96:e1:27:2f:ba:38:24:e0:b9:1c:
         b3:65:22:84:f4:c0:18:a1:ab:b0:5f:cf:a2:2d:eb:2d:e3:a2:
         6c:b8:a0:02
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUNfax54X//mMpiVj3lCr2mrV9lbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNCMTQ5QUY4NkY4OTg1OEFEQ0Y5RDI5MjYwRjcwNEQw
QkI4NTkxMTAeFw0yNTA2MjQxNzI4MDJaFw0yNjA2MjMxNzMzMDJaMDMxMTAvBgNV
BAMTKDIwMjc4MDE3MTBENTY3MDkyNTZFNTgxOTAxNEU0NzcwQkFDQkNFRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolo5y1dQuc3hXEZ06NeBbJBdX
AWLP5+ULHDQVVW2XIk68bqoiDeasaHuI8v1pTDhetZ1vxJ2oBJOXikcZ5xtVEXl8
VzC3HuNPuAETpppiqDuudvZ1NbYnlEFYWG8Bob7CYPnoDcyb3eF9pc28aGsOiNTP
9Ckey6aQWe09R43GCIReMHI0ba0TJMetkE/uovgwDMQbYSklr4drZONhiuOgZOo+
ntiMVs2kzWN31NFZ/eDgzlBTGGFWra05MvYTCb4+4A0ahxcwAqoHCQjZ8t1aTw2J
H5ACyK3KnVRdamT4WToA+mR/1Gu4aUu7+UGDCgkwdmjF5w7OVmjnw9qQfVu/AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUICeAFxDVZwklblgZAU5HcLrLztEwHwYDVR0j
BBgwFoAUXLFJr4b4mFitz50pJg9wTQu4WREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkdDWXZCTXdpQmllV1B3cTE5ODhBQVE4R0pqYTlVTEh4M1ZxUEdZZjZk
ZFQvMC81Q0IxNDlBRjg2Rjg5ODU4QURDRjlEMjkyNjBGNzA0RDBCQjg1OTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDQjE0OUFGODZGODk4NThB
RENGOUQyOTI2MEY3MDREMEJCODU5MTEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JHQ1l2Qk13aUJpZVdQd3ExOTg4QUFROEdKamE5VUxIeDNWcVBHWWY2ZGRULzAv
MzQzNTJlMzQyZTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMDMz
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtBBwwDQYJKoZIhvcNAQELBQADggEBACUqwT/Psq91xqLq
OojqRf7m3fG4RtY40i6LmksFAz7LdjXgN5oarWY9QUWRKY40QKekvzSRxcu/mwXz
bVm+WHqGnlK8tkXMmHDEN2vs6f3AWYHAf3AIIMBDacocTXOS8eez+pl6+cubI0Tm
0ZhhxvMqDO6Al6rDmcY0ABHccDK3w93j1vcI59BWnIHeJcDHjK6mlQg+na6V+1Rq
I6FxpYY64GTOIEQCGJO7gj9tlMvZIAmijN9CfYqiF/eP+QcZqYgoKJjJtUROS/Gn
CP8u5b5B0la6MI8cWmLLKqUxeB+/luEnL7o4JOC5HLNlIoT0wBihq7Bfz6It6y3j
omy4oAI=
-----END CERTIFICATE-----
Generated at Fri Jul 4 18:15:34 2025 by rpki-client