Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa
File:                     3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa (raw, json)
Hash identifier:          EXoiT1VQtPLA2dxLsHPeIMkv4WknilI3EmQokSPAams=
Subject key identifier:   BF:82:13:D5:25:5C:52:FC:04:04:BB:57:A7:E5:D9:1E:F9:4A:AE:0D
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       32E5F86870282B0013D0A359CF3EA0F89469C85A
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:17 +0000
ROA not before:           Mon 16 Jun 2025 19:54:17 +0000
ROA not after:            Mon 15 Jun 2026 19:59:17 +0000
asID:                     263292
IP address blocks:        170.150.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e5:f8:68:70:28:2b:00:13:d0:a3:59:cf:3e:a0:f8:94:69:c8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:17 2025 GMT
            Not After : Jun 15 19:59:17 2026 GMT
        Subject: CN=BF8213D5255C52FC0404BB57A7E5D91EF94AAE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:a2:d1:39:dd:c8:d0:27:8d:29:f0:20:52:
                    33:86:a7:87:66:54:5f:a7:d2:16:b5:4c:ef:ee:3b:
                    99:c0:0b:d4:31:96:6b:c4:04:cf:4c:38:e4:cf:9c:
                    a9:4f:b3:91:29:11:d9:11:b8:0e:50:e3:04:d5:dd:
                    dc:d5:1c:5a:a9:ef:5c:46:58:d5:cf:d7:82:12:fd:
                    cf:69:37:21:a8:64:1a:e3:07:54:27:10:11:2a:3f:
                    0c:fa:9d:1a:56:ba:fa:b3:61:7f:6a:e4:12:7a:5e:
                    9a:08:4c:88:a9:88:8a:9d:3f:32:b4:85:0b:b0:5b:
                    90:d8:3f:d2:21:c1:62:85:41:f4:19:e4:ae:ca:58:
                    b2:7e:6d:1d:cd:b3:83:73:0f:9a:d0:98:6a:79:b8:
                    40:b8:ed:2e:d7:7b:49:8e:f4:21:0a:56:ac:09:73:
                    bd:ed:1c:8a:7c:b0:08:63:63:9a:89:b0:57:fc:68:
                    0b:d6:23:47:83:35:df:05:92:3f:9d:0c:30:52:11:
                    0f:c0:45:3e:d9:4b:b6:ba:a7:d8:8f:a0:57:91:70:
                    9e:df:c7:d9:ad:04:aa:41:84:df:62:0b:cb:68:45:
                    1d:18:ec:4d:cf:56:ca:44:3d:9f:74:f4:9e:6f:88:
                    6b:12:e1:56:69:57:ec:68:05:59:05:09:c5:2a:b7:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:82:13:D5:25:5C:52:FC:04:04:BB:57:A7:E5:D9:1E:F9:4A:AE:0D
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:ef:fa:40:4d:44:fe:f1:16:7e:34:0e:d5:ac:43:70:e2:07:
         c5:3c:4a:6c:31:a5:b1:e1:64:f9:8d:d8:75:ce:2a:dd:ec:09:
         4a:cd:91:25:8b:c4:8d:c3:a7:eb:41:5c:19:8c:43:43:fd:7f:
         02:3b:48:9d:8a:1a:0b:b1:43:81:d9:ba:ec:39:c1:00:e2:31:
         38:4a:01:23:c6:aa:ee:8c:ef:96:d0:83:54:93:df:a1:a1:64:
         ec:85:80:84:e3:da:53:57:be:bd:be:39:b2:28:82:45:4e:bd:
         0c:73:61:52:75:18:cd:9a:71:75:d2:f1:81:e2:15:27:76:7b:
         0d:2a:1f:ce:e3:64:e7:c3:3a:52:2b:4a:83:d3:e2:bf:f3:bb:
         6f:88:45:e3:74:84:6c:d0:4a:ed:f7:2f:d4:a7:5d:13:6a:67:
         8e:b1:cd:07:dc:96:05:ba:5f:4c:8d:6e:8c:0c:04:14:ba:f7:
         b9:4f:92:30:d7:db:32:00:74:1a:d0:3a:b6:49:5f:72:6c:b6:
         65:2d:c6:60:4c:55:09:3f:1f:51:57:42:08:4e:18:49:f5:d9:
         8a:46:20:91:d6:e7:3a:24:f1:e6:d7:e8:ef:fc:07:22:d2:13:
         17:a8:74:24:ba:52:e2:06:cb:30:d4:a3:6a:72:0a:51:30:dc:
         6d:11:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:53:48 2025 by rpki-client