Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa
File:                     3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa (raw, json)
Hash identifier:          h9e0TTiWcPpRJ9wkpMf/lLl14aZKpkY53zyd3kPaxlo=
Subject key identifier:   1E:07:6B:49:0E:19:FE:21:65:CD:C1:DA:44:8B:C0:08:39:8A:45:03
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       2A0368B6635109CFEB00D7CF240AAD7AE8888123
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa
Signing time:             Mon 18 May 2026 20:01:41 +0000
ROA not before:           Mon 18 May 2026 19:56:41 +0000
ROA not after:            Mon 17 May 2027 20:01:41 +0000
asID:                     263292
IP address blocks:        189.126.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:03:68:b6:63:51:09:cf:eb:00:d7:cf:24:0a:ad:7a:e8:88:81:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: May 18 19:56:41 2026 GMT
            Not After : May 17 20:01:41 2027 GMT
        Subject: CN=1E076B490E19FE2165CDC1DA448BC008398A4503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:52:f2:8b:cc:8e:f3:d8:74:1e:26:09:5b:
                    b7:1c:d3:51:14:a1:8e:15:f6:98:68:08:2f:23:20:
                    25:cf:0f:c5:69:48:64:26:01:51:a8:22:31:c8:63:
                    48:7d:66:8c:3f:95:c1:d3:37:0b:5d:ab:d2:df:6c:
                    13:fc:97:0a:41:42:c3:ce:17:87:f6:34:7b:0f:80:
                    e2:2d:da:a5:b4:76:28:36:8a:31:49:52:eb:5a:21:
                    dd:c4:81:27:d2:b5:7c:72:c6:c5:fa:fb:b9:45:d3:
                    65:bf:dd:d1:4a:94:70:23:d3:67:95:f7:f6:92:a8:
                    79:58:82:b4:e9:a5:5d:80:89:52:c1:91:54:e3:dc:
                    ae:a2:1d:ae:03:d3:c7:d5:5b:4e:84:6c:53:a0:54:
                    46:87:41:4f:1c:88:66:6e:35:21:f7:49:3c:99:9d:
                    a8:d0:00:c6:df:fe:9c:74:b0:48:d4:51:29:1c:eb:
                    d4:a4:b3:35:7a:bb:c1:46:74:14:97:0f:18:b8:f8:
                    45:e1:f4:81:29:7d:ca:0b:b1:48:04:7d:f2:84:28:
                    66:f6:a3:25:68:67:25:9a:3f:f3:49:c6:9b:dd:10:
                    4f:17:32:e3:33:89:b5:5c:f1:4b:a6:0d:c0:1c:1c:
                    02:32:3c:06:0e:e8:84:26:fc:6d:e7:59:fd:db:da:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:07:6B:49:0E:19:FE:21:65:CD:C1:DA:44:8B:C0:08:39:8A:45:03
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:be:87:fd:48:eb:c6:4d:39:e9:30:8b:1b:37:5a:36:ab:01:
         f5:bb:9e:b5:cd:86:95:cb:38:fd:7e:73:fd:6d:b9:d9:58:93:
         26:20:3d:db:9d:d1:84:fb:9d:4c:ea:32:eb:ff:0d:87:e2:ef:
         69:88:c7:af:2c:77:4e:4e:25:66:6b:f3:4e:c2:21:3c:47:43:
         45:1a:27:4d:e0:f2:1d:3c:6f:c0:cf:7c:dd:d1:6b:19:48:a2:
         b2:c8:80:5d:e0:0e:57:5f:40:69:db:89:21:25:08:df:3f:16:
         1f:09:25:a2:f3:33:17:e4:3b:91:43:8e:7f:7b:51:3f:42:c6:
         88:ba:4d:94:d5:f6:c5:f4:47:1a:c7:98:18:9a:dc:e6:de:03:
         d1:3c:51:86:53:14:70:95:13:2e:3e:e2:1a:49:57:06:fc:bd:
         ba:6a:33:77:2c:a5:0a:2d:87:ea:b6:29:76:52:83:77:31:7c:
         19:0a:b0:76:6a:c3:4b:d3:54:8b:1a:a5:b3:43:2e:65:94:f6:
         d9:a6:e3:1b:2c:bc:2c:c5:2e:17:77:54:26:01:c1:d3:a1:4a:
         a7:c3:c7:94:33:46:49:f3:83:3f:f1:90:82:75:f4:a8:ba:66:
         f9:d5:71:aa:08:14:93:13:6b:aa:ab:6b:31:ef:09:f5:22:0a:
         53:d7:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:11:21 2026 by rpki-client