Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a313a3a2f34382d3438203d3e20323633323932.roa
File:                     323830343a313639303a313a3a2f34382d3438203d3e20323633323932.roa (raw, json)
Hash identifier:          TpK8HhQzd/2IlXoaZ3EsDDkrrAaigA4zyRXCr58EnQ0=
Subject key identifier:   84:3D:51:A9:DF:9A:DC:2A:89:99:F1:E5:81:AD:1E:6A:17:DC:05:F4
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       777D635360262D210447F5E8186B7D25B0792AA5
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a313a3a2f34382d3438203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:15 +0000
ROA not before:           Mon 16 Jun 2025 19:54:15 +0000
ROA not after:            Mon 15 Jun 2026 19:59:15 +0000
asID:                     263292
IP address blocks:        2804:1690:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7d:63:53:60:26:2d:21:04:47:f5:e8:18:6b:7d:25:b0:79:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:15 2025 GMT
            Not After : Jun 15 19:59:15 2026 GMT
        Subject: CN=843D51A9DF9ADC2A8999F1E581AD1E6A17DC05F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:a2:61:83:75:44:83:e3:76:83:ee:d7:44:
                    e3:24:4e:d7:f9:1a:3a:7b:ce:8c:0d:4c:73:a2:04:
                    ce:7d:e8:a4:da:61:f7:2d:c7:8a:4a:44:da:19:ed:
                    a7:bd:f8:31:89:d8:4a:8b:05:0d:eb:5e:1c:72:3b:
                    eb:9c:42:9d:2c:2a:83:e6:c4:5d:20:14:36:79:bb:
                    27:b1:9c:84:45:62:82:ac:63:14:27:be:19:95:2b:
                    b6:96:37:da:27:5b:f1:45:52:83:88:da:b9:c3:b6:
                    f4:73:70:23:56:4f:4e:e8:9c:84:d9:74:80:28:83:
                    56:fc:71:f7:79:84:87:da:26:ca:0e:c0:90:b4:8c:
                    32:fc:87:cb:5a:a2:70:06:c7:6c:77:9f:ee:f2:cb:
                    b9:ce:5e:d2:2e:e2:c9:47:c6:25:50:af:d6:fe:d5:
                    99:34:15:1e:df:9c:03:b1:00:ae:1f:a7:26:7a:94:
                    e7:04:d3:32:bc:36:ea:0f:f6:61:d7:cb:6b:77:fa:
                    38:dc:34:c9:6f:df:e8:50:3c:9c:36:48:01:3a:48:
                    5c:bc:ca:43:9a:fc:ba:da:f1:2b:2e:5d:14:34:f7:
                    00:1a:30:99:0b:1f:66:03:48:4f:7a:90:f2:ab:66:
                    f9:fb:32:06:5f:23:e4:15:99:ea:1f:0e:1b:86:ff:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3D:51:A9:DF:9A:DC:2A:89:99:F1:E5:81:AD:1E:6A:17:DC:05:F4
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a313a3a2f34382d3438203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:79:07:58:66:d6:7d:2a:30:ed:70:c0:43:2d:e5:29:ee:96:
         17:4e:a7:59:8c:60:57:6e:ed:80:c0:76:0e:8e:76:90:e2:0f:
         0a:b4:93:6f:d9:80:76:cc:5a:d9:0e:07:bc:d9:e6:42:54:da:
         f1:f7:e4:0e:aa:e3:ba:5d:26:05:10:ef:81:59:44:da:ae:cf:
         2e:65:30:7a:25:84:b2:07:c0:7f:38:5f:aa:d9:9a:7e:05:e5:
         ed:23:f9:6b:39:85:18:70:cd:52:49:1f:06:bf:68:63:36:2b:
         21:5f:6e:0c:f5:bb:be:bf:e8:73:a6:c4:ff:a2:75:e3:b1:dc:
         0a:8a:25:58:f4:66:85:64:3f:0c:da:18:e7:04:09:9b:da:8b:
         21:6f:8d:c1:e5:89:e7:8b:5a:23:bd:3f:56:a1:aa:30:85:24:
         27:77:b1:bd:fb:4d:31:e2:80:89:01:86:87:66:64:8f:39:18:
         ef:d3:f9:0c:16:2a:6f:66:f5:47:15:e5:e3:72:d9:84:f6:a0:
         ad:65:1a:41:75:35:a7:93:69:d1:cd:bd:1b:ad:0d:df:4a:8d:
         31:29:b3:09:ec:ef:36:3c:9b:92:66:d0:13:a1:f2:bf:7c:99:
         c4:90:0c:b2:9b:2f:42:f9:72:75:f1:3d:46:bb:fc:3a:d4:35:
         89:b7:59:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:17:32 2025 by rpki-client