Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e37312e39322e302f32322d3232203d3e20323633323932.roa
File:                     3137372e37312e39322e302f32322d3232203d3e20323633323932.roa (raw, json)
Hash identifier:          hDrookJQDOUuUNcMr0pqwTbypt8xSFJIQ7Zb3e0LbLM=
Subject key identifier:   6F:4C:C0:A2:67:94:A6:3D:6F:EC:BA:03:96:A7:D7:5E:4C:5F:D6:1A
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       4AC0D71AF664285E97B702C6EBB9F9567A31E752
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e37312e39322e302f32322d3232203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:15 +0000
ROA not before:           Mon 16 Jun 2025 19:54:15 +0000
ROA not after:            Mon 15 Jun 2026 19:59:15 +0000
asID:                     263292
IP address blocks:        177.71.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c0:d7:1a:f6:64:28:5e:97:b7:02:c6:eb:b9:f9:56:7a:31:e7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:15 2025 GMT
            Not After : Jun 15 19:59:15 2026 GMT
        Subject: CN=6F4CC0A26794A63D6FECBA0396A7D75E4C5FD61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:14:0e:3a:54:69:71:29:87:0d:6e:b5:b9:
                    7c:51:a5:83:cc:6a:94:4f:68:ee:f3:18:76:da:4e:
                    e9:7e:98:e3:53:73:5f:d6:c6:0d:f9:83:0f:35:0f:
                    ae:2a:b9:93:5b:e5:87:82:49:6f:ae:e7:cb:fc:4a:
                    74:a9:25:8b:06:62:66:82:46:fa:2f:be:67:82:d9:
                    f1:37:20:d0:42:f5:7d:58:ed:3f:4d:80:7f:86:50:
                    6c:bd:f1:16:fb:eb:69:53:8c:b3:73:21:44:47:d8:
                    56:50:76:5f:e2:26:d6:5d:0e:17:c2:ba:41:ec:c5:
                    84:c7:4f:e2:3e:15:58:e7:f1:ef:b8:7b:36:45:8b:
                    52:1e:ff:19:c8:e5:f0:4a:1f:23:2e:92:20:35:51:
                    bd:d5:33:5a:cd:0f:ed:99:ed:ff:39:b0:19:01:56:
                    c7:14:d0:43:0b:06:6b:ff:9e:25:af:a1:34:a7:2a:
                    a2:4b:75:b0:8f:78:23:2c:0d:25:f0:60:ea:02:94:
                    79:10:41:b9:0f:49:bc:ff:f4:30:06:c5:09:e0:80:
                    8b:04:d5:4e:0d:cb:8e:a0:99:15:1b:dc:00:81:ad:
                    2f:5e:7b:bb:7b:62:5e:02:a2:f9:37:99:4e:7a:ea:
                    73:4f:64:52:17:6e:ac:24:d6:36:87:c4:f6:ce:ae:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:C0:A2:67:94:A6:3D:6F:EC:BA:03:96:A7:D7:5E:4C:5F:D6:1A
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e37312e39322e302f32322d3232203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:5a:43:11:13:0f:88:ef:83:17:41:6d:64:f6:4d:77:e4:8a:
         e1:d3:f8:77:0b:94:52:32:44:f8:a8:ad:29:2c:b7:99:63:a8:
         09:b4:ba:a2:a8:1f:67:58:32:36:30:1b:af:1a:c3:95:76:f0:
         be:cb:bd:e5:5a:fb:05:2e:70:84:dd:f5:02:90:b9:a3:a7:26:
         10:0e:ab:3e:04:aa:b6:de:cd:16:44:07:e8:1c:6b:cf:c3:32:
         cf:e8:32:4b:b8:fb:1f:48:b2:40:ee:a2:86:14:b3:f9:ef:10:
         25:d8:cb:ed:4e:54:03:de:03:57:11:8f:59:79:43:a2:e0:af:
         32:96:03:c1:fd:18:83:6c:13:08:1a:73:88:bc:0c:e4:da:56:
         9a:c5:0b:1c:f8:18:18:9f:d6:b6:5a:ab:49:8f:0a:7f:98:f4:
         c7:87:86:9e:18:02:8e:1f:7d:1a:4a:61:f3:58:f9:c4:4f:5e:
         74:4c:bd:65:77:26:3a:1c:90:a7:ac:5b:2e:db:34:21:cb:fb:
         94:fe:5e:59:05:cf:33:7c:7d:dc:73:61:05:3e:45:7a:cb:75:
         11:b0:f8:57:49:45:15:71:36:33:93:e3:fe:14:58:57:94:a6:
         2b:fc:dc:24:48:32:d1:0b:f1:f0:eb:68:ee:ba:14:18:c1:9f:
         19:2f:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:16:16 2025 by rpki-client