Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33312e302f32342d3234203d3e20323636303336.roa
File:                     34352e342e33312e302f32342d3234203d3e20323636303336.roa (raw, json)
Hash identifier:          8J4Ywxvv0V+xPUiPPC+GKMGAkP5+9dIK4oaZ0jZasfE=
Subject key identifier:   96:ED:93:1E:8E:B1:5F:73:9B:A7:F5:0F:71:4E:C0:9E:9E:12:52:04
Certificate issuer:       /CN=5CB149AF86F89858ADCF9D29260F704D0BB85911
Certificate serial:       05C8D820CDA510094709891929A40B11A6E1484C
Authority key identifier: 5C:B1:49:AF:86:F8:98:58:AD:CF:9D:29:26:0F:70:4D:0B:B8:59:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB149AF86F89858ADCF9D29260F704D0BB85911.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33312e302f32342d3234203d3e20323636303336.roa
Signing time:             Tue 24 Jun 2025 17:33:21 +0000
ROA not before:           Tue 24 Jun 2025 17:28:21 +0000
ROA not after:            Tue 23 Jun 2026 17:33:21 +0000
asID:                     266036
IP address blocks:        45.4.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.crl
                          rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB149AF86F89858ADCF9D29260F704D0BB85911.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c8:d8:20:cd:a5:10:09:47:09:89:19:29:a4:0b:11:a6:e1:48:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB149AF86F89858ADCF9D29260F704D0BB85911
        Validity
            Not Before: Jun 24 17:28:21 2025 GMT
            Not After : Jun 23 17:33:21 2026 GMT
        Subject: CN=96ED931E8EB15F739BA7F50F714EC09E9E125204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:87:5f:0e:34:86:d7:f9:84:cc:85:62:0b:
                    9c:e4:29:7a:0d:c7:4d:5e:5c:02:2b:f0:6d:47:a0:
                    3f:22:c9:f5:4a:4c:20:8c:ff:06:64:00:ce:2b:d6:
                    8e:63:88:5f:51:a5:8d:f1:f8:ad:ab:11:c9:91:6a:
                    ff:77:8a:d7:d0:ab:9d:7e:49:0e:bf:45:5f:51:6f:
                    0d:8b:56:55:4f:f0:7c:cc:d2:d7:1f:38:b4:d4:88:
                    2c:48:b7:6a:fa:ce:de:85:95:92:ee:8c:9c:56:f7:
                    46:12:6f:26:b3:f2:ec:4b:aa:ce:e8:3a:4b:15:f3:
                    79:96:fc:9b:4a:4e:85:4a:57:c1:f4:00:96:d9:1c:
                    0e:6b:4f:43:5b:6a:98:53:4c:62:9c:97:5a:9c:e4:
                    db:1b:d0:9d:f0:20:af:22:82:04:8c:c5:06:a5:8f:
                    2a:c5:32:07:54:cf:b9:36:a7:a7:ae:6f:ef:49:f4:
                    c3:93:d4:60:35:2c:75:24:70:fc:d5:00:60:04:0d:
                    c6:e6:4f:95:0f:8c:d2:52:a8:74:6e:44:3c:40:92:
                    5e:29:f6:6f:0d:2b:d3:10:24:7c:e0:7d:04:06:ca:
                    4f:4c:b1:6c:32:6c:d0:8f:00:cd:d5:84:96:c8:d9:
                    bd:85:d0:30:17:cf:40:06:56:d0:8a:1e:b4:b3:51:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:93:1E:8E:B1:5F:73:9B:A7:F5:0F:71:4E:C0:9E:9E:12:52:04
            X509v3 Authority Key Identifier:
                keyid:5C:B1:49:AF:86:F8:98:58:AD:CF:9D:29:26:0F:70:4D:0B:B8:59:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/5CB149AF86F89858ADCF9D29260F704D0BB85911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB149AF86F89858ADCF9D29260F704D0BB85911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGCYvBMwiBieWPwq1988AAQ8GJja9ULHx3VqPGYf6ddT/0/34352e342e33312e302f32342d3234203d3e20323636303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:77:1f:4a:57:06:4b:a8:ec:6c:03:c7:4b:ea:56:6c:42:
         cd:e2:d7:bc:87:eb:c8:d9:e8:34:64:78:3b:c6:a2:e5:eb:9d:
         e6:45:37:e3:ca:52:2b:a3:ea:c6:0e:26:df:84:87:30:80:ac:
         e4:24:01:e1:b4:25:b9:45:4a:5f:50:4d:0a:21:eb:4c:cd:41:
         13:68:4e:d8:1e:6c:aa:d0:2d:77:9d:22:ac:0c:8b:71:c4:5d:
         bd:50:1d:d2:68:b5:c1:30:5a:c6:76:64:89:60:4c:88:4b:9f:
         c9:d5:cd:1e:1b:d1:6e:25:1c:8f:05:e7:99:c4:ee:82:d0:77:
         a9:25:ca:b3:1f:74:89:ad:ad:75:04:69:24:1d:c1:4b:f8:49:
         2a:47:dc:e4:66:c8:66:7e:c1:fc:e1:2f:7d:29:4c:d5:51:05:
         99:89:9c:32:d7:02:d4:f4:3c:fc:b0:3f:b1:a8:d7:22:78:5e:
         ee:a1:b3:44:b8:ed:56:b5:aa:5f:34:9f:64:29:1a:7a:b9:05:
         e6:b4:84:17:c9:b6:15:ac:ef:bc:c3:4e:80:05:6b:81:83:1e:
         26:82:69:4a:08:58:58:a9:b7:11:9a:bb:ab:d2:fe:75:03:4d:
         0f:c8:f5:32:6b:b6:f3:dc:38:a0:17:eb:15:5d:67:59:b5:82:
         86:1c:ed:4f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBcjYIM2lEAlHCYkZKaQLEabhSEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNCMTQ5QUY4NkY4OTg1OEFEQ0Y5RDI5MjYwRjcwNEQw
QkI4NTkxMTAeFw0yNTA2MjQxNzI4MjFaFw0yNjA2MjMxNzMzMjFaMDMxMTAvBgNV
BAMTKDk2RUQ5MzFFOEVCMTVGNzM5QkE3RjUwRjcxNEVDMDlFOUUxMjUyMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDodfDjSG1/mEzIViC5zkKXoN
x01eXAIr8G1HoD8iyfVKTCCM/wZkAM4r1o5jiF9RpY3x+K2rEcmRav93itfQq51+
SQ6/RV9Rbw2LVlVP8HzM0tcfOLTUiCxIt2r6zt6FlZLujJxW90YSbyaz8uxLqs7o
OksV83mW/JtKToVKV8H0AJbZHA5rT0NbaphTTGKcl1qc5Nsb0J3wIK8iggSMxQal
jyrFMgdUz7k2p6eub+9J9MOT1GA1LHUkcPzVAGAEDcbmT5UPjNJSqHRuRDxAkl4p
9m8NK9MQJHzgfQQGyk9MsWwybNCPAM3VhJbI2b2F0DAXz0AGVtCKHrSzUc7lAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUlu2THo6xX3Obp/UPcU7Anp4SUgQwHwYDVR0j
BBgwFoAUXLFJr4b4mFitz50pJg9wTQu4WREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkdDWXZCTXdpQmllV1B3cTE5ODhBQVE4R0pqYTlVTEh4M1ZxUEdZZjZk
ZFQvMC81Q0IxNDlBRjg2Rjg5ODU4QURDRjlEMjkyNjBGNzA0RDBCQjg1OTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDQjE0OUFGODZGODk4NThB
RENGOUQyOTI2MEY3MDREMEJCODU5MTEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JHQ1l2Qk13aUJpZVdQd3ExOTg4QUFROEdKamE5VUxIeDNWcVBHWWY2ZGRULzAv
MzQzNTJlMzQyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMDMz
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtBB8wDQYJKoZIhvcNAQELBQADggEBAAimdx9KVwZLqOxs
A8dL6lZsQs3i17yH68jZ6DRkeDvGouXrneZFN+PKUiuj6sYOJt+EhzCArOQkAeG0
JblFSl9QTQoh60zNQRNoTtgebKrQLXedIqwMi3HEXb1QHdJotcEwWsZ2ZIlgTIhL
n8nVzR4b0W4lHI8F55nE7oLQd6klyrMfdImtrXUEaSQdwUv4SSpH3ORmyGZ+wfzh
L30pTNVRBZmJnDLXAtT0PPywP7Go1yJ4Xu6hs0S47Va1ql80n2QpGnq5Bea0hBfJ
thWs77zDToAFa4GDHiaCaUoIWFiptxGau6vS/nUDTQ/I9TJrtvPcOKAX6xVdZ1m1
goYc7U8=
-----END CERTIFICATE-----
Generated at Fri Jul 4 18:06:04 2025 by rpki-client