Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa
File:                     34352e342e32382e302f32342d3234203d3e20323636303336.roa (raw, json)
Hash identifier:          q+GbD+hHNRs27Hv8QgCsKe2yBec/bNRfPlF0TIGgXOY=
Subject key identifier:   4A:3D:5C:CA:53:68:FE:DD:55:35:81:0D:E5:21:7E:12:14:35:F0:B4
Certificate issuer:       /CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
Certificate serial:       723462C93C338DB7E58108579C1246090B470F63
Authority key identifier: 53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa
Signing time:             Fri 21 Aug 2026 21:25:36 +0000
ROA not before:           Fri 21 Aug 2026 21:20:36 +0000
ROA not after:            Fri 20 Aug 2027 21:25:36 +0000
asID:                     266036
IP address blocks:        45.4.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 23:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:34:62:c9:3c:33:8d:b7:e5:81:08:57:9c:12:46:09:0b:47:0f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C47EB139B35770084D5D6BB4C65707BC2EDCC6
        Validity
            Not Before: Aug 21 21:20:36 2026 GMT
            Not After : Aug 20 21:25:36 2027 GMT
        Subject: CN=4A3D5CCA5368FEDD5535810DE5217E121435F0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:9f:8d:04:93:81:86:16:ab:85:0a:7a:76:
                    50:ab:45:ea:c4:1d:9a:29:cc:aa:7c:76:6a:f1:be:
                    32:89:01:67:15:14:7d:55:da:eb:5b:8f:37:f7:51:
                    56:b9:5a:da:02:9e:56:43:68:37:2c:67:ba:5c:9e:
                    19:20:2d:5d:35:29:ff:0e:50:f4:52:b5:38:a5:ba:
                    ba:a3:ef:5c:64:5a:98:f9:1b:1d:2c:1e:aa:04:0d:
                    00:66:58:ab:a7:f8:b5:25:3a:f5:a6:0d:7c:2f:40:
                    4b:c5:b2:9a:64:c2:8a:2d:e7:e9:2e:25:3b:a7:cb:
                    6f:60:c7:7e:6b:8c:60:1c:3d:4d:45:84:8d:9f:fd:
                    83:ce:26:06:1c:a6:77:01:6b:e7:fe:3d:a5:8f:7c:
                    16:4b:e5:45:29:60:81:e1:36:df:d2:06:0e:0f:11:
                    c4:b8:f7:c8:60:df:0e:5a:f6:15:62:20:b4:6c:9b:
                    32:06:d9:5f:12:ff:90:fa:39:eb:44:e4:85:e4:7c:
                    c6:b2:96:d6:2f:9d:67:a5:31:f2:8d:5a:66:50:b1:
                    6d:0f:ac:3a:ab:70:a6:6e:4e:26:51:f4:2c:f1:3c:
                    c2:2a:3b:cb:6d:5d:f4:df:e4:3f:c7:29:03:a9:1c:
                    52:d3:b5:c8:1e:1e:12:a7:d5:4f:de:7b:1d:08:bb:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3D:5C:CA:53:68:FE:DD:55:35:81:0D:E5:21:7E:12:14:35:F0:B4
            X509v3 Authority Key Identifier:
                keyid:53:C4:7E:B1:39:B3:57:70:08:4D:5D:6B:B4:C6:57:07:BC:2E:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C47EB139B35770084D5D6BB4C65707BC2EDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32382e302f32342d3234203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:c8:98:d7:09:95:bf:64:c1:d9:6f:7a:d4:63:fb:af:35:f1:
         e7:0c:03:c8:80:97:60:12:3e:26:e9:ff:80:c6:bf:d4:f2:8f:
         a2:9b:ca:05:e5:71:48:cb:1d:d7:c3:ed:79:1b:81:78:d0:df:
         85:d1:fa:93:92:65:d2:17:60:b1:9c:f9:3b:70:b5:0d:80:01:
         e1:3e:ba:26:2c:0d:b0:2a:83:46:4e:cf:ab:a0:eb:76:c9:cc:
         1e:b3:35:7c:7f:99:07:40:5a:a5:8a:0d:e4:cb:26:00:cc:54:
         68:0d:14:18:e0:8b:1f:f9:ce:81:e5:2c:14:1d:b6:0b:6d:b1:
         3b:a1:37:01:2f:3b:71:55:0e:41:48:67:0b:1a:5b:80:81:9a:
         22:cb:25:9f:c7:89:b6:79:b1:50:32:78:1c:2d:5c:45:e9:bc:
         ad:b9:52:d9:60:ca:12:c5:59:7c:16:be:9c:b7:26:b2:08:78:
         e8:47:3f:7b:b4:1e:0a:3d:31:fa:d8:69:c1:ec:60:fa:77:03:
         4f:d5:f7:01:82:0d:a0:7a:8d:89:89:24:d8:e7:e3:7e:7c:72:
         1d:fa:0e:06:16:d7:ec:de:4a:98:36:c8:4b:c3:fd:46:2d:0d:
         07:68:34:fb:c7:b6:15:2d:1a:0b:ca:bb:6c:dd:b4:0a:24:69:
         ec:48:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:53:29 2026 by rpki-client