Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa
File:                     34352e342e33302e302f32332d3233203d3e20323636303336.roa (raw, json)
Hash identifier:          /F1MptfR+pcUOBkMaMcJhp962Fi/UfE0JHg3aJ0jHeo=
Subject key identifier:   2C:C9:ED:CF:7C:8F:27:63:88:CC:90:B5:9C:80:7A:CB:01:6A:89:6A
Certificate issuer:       /CN=99DB3D494C8CBCB5E12E1192671726ECCC6E2067
Certificate serial:       4372841E6CA0CF2C78233B28556313BD76054B
Authority key identifier: 99:DB:3D:49:4C:8C:BC:B5:E1:2E:11:92:67:17:26:EC:CC:6E:20:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa
Signing time:             Tue 26 Aug 2025 20:17:36 +0000
ROA not before:           Tue 26 Aug 2025 20:12:36 +0000
ROA not after:            Tue 25 Aug 2026 20:17:36 +0000
asID:                     266036
IP address blocks:        45.4.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:72:84:1e:6c:a0:cf:2c:78:23:3b:28:55:63:13:bd:76:05:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DB3D494C8CBCB5E12E1192671726ECCC6E2067
        Validity
            Not Before: Aug 26 20:12:36 2025 GMT
            Not After : Aug 25 20:17:36 2026 GMT
        Subject: CN=2CC9EDCF7C8F276388CC90B59C807ACB016A896A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:b0:2e:8b:d1:37:0d:c2:fb:4a:b0:d6:cf:
                    9d:da:9a:8e:31:20:d3:52:b0:3e:de:e3:e8:d4:64:
                    84:d9:62:10:30:43:ba:91:64:65:18:6d:f7:c2:79:
                    e7:68:30:66:29:46:5c:1e:4a:90:9f:5a:79:4d:51:
                    a6:0c:78:1f:74:4c:e7:53:53:42:fd:f6:05:84:28:
                    58:21:70:fb:20:c8:98:6e:bc:1c:bb:ad:8f:1a:64:
                    f6:52:a0:40:32:83:e5:9f:a1:a5:d7:07:68:77:10:
                    2b:6e:99:be:73:12:a9:46:ed:ad:6e:2d:3e:03:53:
                    fb:ad:5c:4c:3c:38:a9:a2:72:cd:f3:66:45:12:0d:
                    4f:30:6d:eb:5c:35:1a:16:ee:7a:9d:99:52:db:13:
                    14:f5:aa:e0:f6:fc:e7:9a:98:41:c0:e0:bf:e8:23:
                    27:fd:34:b4:0b:ed:fa:74:b2:80:1a:1b:0f:9c:60:
                    44:89:62:a2:71:f8:14:ce:ab:03:de:a3:5c:6e:ee:
                    9f:c5:54:2b:a2:86:90:4c:eb:2c:e9:58:7a:0e:c0:
                    6c:05:92:b2:a9:fa:99:a2:bf:fa:4c:c2:c1:1b:e7:
                    05:04:0c:af:3e:d9:08:84:ae:85:ee:7b:5f:af:d5:
                    72:ac:07:93:cf:30:28:11:43:fe:07:0f:0d:5a:86:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C9:ED:CF:7C:8F:27:63:88:CC:90:B5:9C:80:7A:CB:01:6A:89:6A
            X509v3 Authority Key Identifier:
                keyid:99:DB:3D:49:4C:8C:BC:B5:E1:2E:11:92:67:17:26:EC:CC:6E:20:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB3D494C8CBCB5E12E1192671726ECCC6E2067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33302e302f32332d3233203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:d8:7d:63:30:29:35:0e:75:db:ff:1a:35:6e:65:2b:7c:57:
         ec:be:90:c3:ba:e8:59:10:1d:0c:d7:f7:8f:f0:73:07:c5:63:
         bf:37:b9:85:ad:32:3e:29:c2:99:9a:b3:3d:fa:85:31:a8:00:
         5d:23:97:dd:06:45:a0:c9:23:48:18:67:7e:2b:82:c1:3b:b7:
         29:61:1d:fd:c6:45:32:d1:4f:da:90:54:e1:8f:8d:30:bc:db:
         4f:ee:d1:40:58:ff:37:41:99:3a:a7:26:36:4e:ba:43:d1:dd:
         e6:50:8c:26:70:c5:7f:ea:16:61:5a:9b:4a:af:a5:ce:d0:ee:
         c3:0d:49:77:b8:8a:a7:ab:c4:2c:27:78:27:b5:97:3e:a0:c8:
         c2:6f:03:a9:3d:4c:f4:52:06:6b:28:bb:05:f7:73:ec:73:ef:
         60:16:5e:13:aa:2d:63:90:56:5d:33:22:7a:b1:14:f4:52:13:
         4c:a3:04:07:2d:73:f0:90:1d:60:de:5c:45:44:32:a1:46:22:
         63:39:76:0a:53:26:f2:60:9d:2f:f0:cc:8b:5a:31:cc:a3:51:
         1d:90:d8:b1:a4:af:1f:3f:bf:eb:b3:a6:e3:10:2c:30:e6:cb:
         d6:0c:eb:ab:7e:1e:91:46:7f:2f:b1:ff:ce:24:0c:dc:fa:fa:
         ab:4d:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:49:49 2025 by rpki-client