Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32392e302f32342d3234203d3e20323636303336.roa
File:                     34352e342e32392e302f32342d3234203d3e20323636303336.roa (raw, json)
Hash identifier:          7qqIrats1JAcBhAcnNg42BqKPMo3+5Bmw8PIBXZApiA=
Subject key identifier:   83:9D:83:8E:9F:6F:81:BA:72:77:A5:64:6A:4E:B1:4A:E7:D4:DD:9F
Certificate issuer:       /CN=99DB3D494C8CBCB5E12E1192671726ECCC6E2067
Certificate serial:       3930774D4134AE5466CE0C5003D2EEA8E34715B6
Authority key identifier: 99:DB:3D:49:4C:8C:BC:B5:E1:2E:11:92:67:17:26:EC:CC:6E:20:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32392e302f32342d3234203d3e20323636303336.roa
Signing time:             Tue 26 Aug 2025 20:17:30 +0000
ROA not before:           Tue 26 Aug 2025 20:12:30 +0000
ROA not after:            Tue 25 Aug 2026 20:17:30 +0000
asID:                     266036
IP address blocks:        45.4.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:30:77:4d:41:34:ae:54:66:ce:0c:50:03:d2:ee:a8:e3:47:15:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DB3D494C8CBCB5E12E1192671726ECCC6E2067
        Validity
            Not Before: Aug 26 20:12:30 2025 GMT
            Not After : Aug 25 20:17:30 2026 GMT
        Subject: CN=839D838E9F6F81BA7277A5646A4EB14AE7D4DD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:55:47:f3:45:8d:0e:a5:91:46:91:6b:ec:
                    32:80:c1:d4:29:40:65:7d:2d:4f:52:84:59:51:8e:
                    e3:c2:f7:78:00:2a:87:44:cf:3c:f4:c2:ec:2d:4c:
                    af:22:71:34:6b:37:4f:23:58:71:1b:d1:3f:41:c5:
                    2e:2e:9f:b7:b6:f9:03:c8:71:f4:d6:d3:e7:bb:08:
                    01:8b:08:13:87:65:38:d1:c2:03:f3:11:10:63:53:
                    a0:36:e3:69:9e:a6:59:ad:06:00:dc:f3:6f:fd:12:
                    9d:ef:54:d2:9c:2f:94:51:bf:07:aa:fc:09:ed:d2:
                    89:8f:39:c7:2a:03:37:47:68:20:e3:5a:f4:b9:a0:
                    0c:19:9f:33:93:6b:52:39:d2:15:3e:c2:c2:01:38:
                    94:ed:d8:19:29:a1:14:0c:a8:28:80:29:fa:32:7e:
                    f3:e0:47:82:b6:5c:d1:e8:72:6c:be:cc:c8:a2:98:
                    5c:63:a2:51:0b:56:69:42:9c:c7:d2:38:92:69:49:
                    b3:16:72:23:8e:39:47:73:90:5b:bf:b6:52:15:63:
                    1b:a5:78:e6:19:5e:01:e4:cb:b0:56:ac:07:7c:cf:
                    b2:86:4b:5d:ce:e1:86:59:6a:a0:4e:f4:af:f0:fa:
                    e6:5b:05:4e:a6:20:e7:54:1b:b4:f7:34:8d:df:c9:
                    b3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9D:83:8E:9F:6F:81:BA:72:77:A5:64:6A:4E:B1:4A:E7:D4:DD:9F
            X509v3 Authority Key Identifier:
                keyid:99:DB:3D:49:4C:8C:BC:B5:E1:2E:11:92:67:17:26:EC:CC:6E:20:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e32392e302f32342d3234203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:a6:ce:7c:bf:eb:63:0f:5a:b6:0a:2a:0e:63:c5:c1:e1:
         a4:14:21:ab:6d:c1:ca:ba:d5:e3:a6:bb:0c:04:b5:eb:31:6a:
         ac:30:70:e1:11:d2:ab:35:b9:38:c2:41:e3:07:5f:1b:34:f4:
         2d:78:b9:ad:93:01:d8:d5:09:6d:27:c4:21:7c:28:41:2d:5d:
         fc:25:6a:b0:c2:bc:36:b6:5a:63:e3:7f:e9:e1:97:3a:b2:4f:
         f2:43:e8:2d:3c:47:ec:18:db:f6:87:0d:45:de:1d:23:28:4b:
         79:be:e6:63:96:de:87:1c:37:1f:6b:b4:10:db:c3:80:f8:51:
         9a:f9:a0:34:4e:a0:73:c0:4e:f8:32:31:a4:8c:ad:da:97:56:
         4f:d9:9e:5f:4d:2f:01:68:e7:6e:b8:01:37:69:d2:57:3d:3a:
         e1:b0:ba:42:ef:be:ae:15:d9:8a:d4:f4:30:36:22:b3:33:84:
         e5:fe:c6:bf:52:2c:96:62:97:35:93:c7:e5:ec:ae:fc:33:9c:
         43:25:92:bb:09:c0:5c:03:18:5f:15:76:6e:17:42:a4:2f:69:
         12:df:02:5f:1a:9e:6a:04:47:68:75:17:d7:2b:e1:03:0e:b6:
         61:e3:b3:a5:94:eb:53:1d:9a:9b:8a:c8:ca:db:ad:0b:50:60:
         64:2c:b1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:50:22 2025 by rpki-client