Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3330303a3a2f34382d3438203d3e20323633323932.roa
File:                     323830343a313639303a3330303a3a2f34382d3438203d3e20323633323932.roa (raw, json)
Hash identifier:          0PZiTOxRuEYip2kaFEJEraNjYCkfzNiCKF1B+g+lC28=
Subject key identifier:   07:6F:7F:C1:4F:2A:D8:AA:FA:07:5B:B9:76:68:37:22:CE:54:EC:D3
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       7275E3A2977867832D82EB34BEBF896215F868A4
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3330303a3a2f34382d3438203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:15 +0000
ROA not before:           Mon 16 Jun 2025 19:54:15 +0000
ROA not after:            Mon 15 Jun 2026 19:59:15 +0000
asID:                     263292
IP address blocks:        2804:1690:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:75:e3:a2:97:78:67:83:2d:82:eb:34:be:bf:89:62:15:f8:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:15 2025 GMT
            Not After : Jun 15 19:59:15 2026 GMT
        Subject: CN=076F7FC14F2AD8AAFA075BB976683722CE54ECD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:b1:97:0d:67:e1:e4:57:fa:8d:e1:cb:be:
                    73:2c:41:38:22:d2:6d:c1:38:db:16:68:a4:b3:31:
                    f9:88:d9:a6:23:40:dd:be:d1:ca:5b:49:97:a6:b8:
                    f1:7d:3c:25:46:92:af:a1:ca:ce:e4:95:89:81:b8:
                    8f:9a:a8:fd:42:e9:83:f6:82:1a:46:e0:a3:cc:6c:
                    de:c2:e3:ce:db:9f:bf:34:20:2c:e4:1e:57:c8:44:
                    3d:cd:b5:d0:da:64:21:6d:f9:a9:95:ea:f8:20:bb:
                    2f:7f:10:08:6f:a8:89:78:e2:9f:16:c7:87:31:a6:
                    41:8f:b3:10:69:a7:1a:84:f2:37:03:3f:0b:25:1e:
                    13:a5:22:b0:5f:77:ce:78:0c:6e:4d:af:c8:ee:b9:
                    94:d6:29:74:16:4c:c1:50:cd:a9:4e:15:71:6d:27:
                    79:f6:21:cd:9f:1c:c2:11:86:b3:99:6a:37:e4:32:
                    ea:43:b3:ce:a4:e6:7b:7f:e4:e6:8d:8e:47:a4:ca:
                    1a:81:26:e9:a9:6f:9d:90:67:8f:8f:0e:fc:7a:02:
                    a8:c7:94:cc:cc:7b:16:0a:e0:6a:62:51:9a:2e:d0:
                    f3:67:48:55:44:c2:77:5b:14:9f:e4:89:1a:df:7a:
                    ab:33:40:9d:c0:e0:99:c6:44:d7:df:32:be:83:a2:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:7F:C1:4F:2A:D8:AA:FA:07:5B:B9:76:68:37:22:CE:54:EC:D3
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3330303a3a2f34382d3438203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:56:a0:02:a3:26:b3:20:7f:35:eb:b4:f9:c3:41:d0:e7:
         7c:65:ec:55:ae:94:78:f2:5d:67:80:9d:e1:72:86:15:55:af:
         7f:07:f0:27:c3:d7:ae:0e:4b:61:2f:b4:e4:da:1d:b2:9e:66:
         a4:48:3f:09:4e:88:89:c5:27:26:0f:aa:d7:53:d5:47:35:5e:
         e7:60:3a:83:76:58:a9:73:05:e2:b1:eb:76:b6:2f:7b:b5:e7:
         f2:96:ea:b8:4e:12:a1:43:86:56:bd:72:8b:e8:ff:b1:24:15:
         07:49:02:ba:9b:50:1e:b5:25:6b:f6:94:0f:68:d5:ab:f9:fe:
         5f:53:b2:fe:3b:f1:59:74:dc:7f:46:56:5c:1f:13:fc:19:c3:
         9b:cc:59:91:59:95:90:4c:67:cf:99:3b:eb:33:c4:ae:c4:ac:
         6f:80:80:ed:9f:8a:19:f2:fe:c2:0b:89:67:56:dd:ad:0c:87:
         92:7b:28:47:ad:2c:0c:68:b2:c8:7a:be:00:40:8d:b0:14:8d:
         40:08:c4:2f:d3:78:e6:10:a2:de:e4:4b:36:a1:93:b5:15:49:
         e3:56:ce:b1:3e:06:d7:39:30:12:11:22:ae:4a:51:da:8e:49:
         dc:df:e2:7f:bf:73:8c:2f:db:56:6e:2b:ed:00:f8:ee:31:63:
         bf:07:7a:3e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUcnXjopd4Z4Mtgus0vr+JYhX4aKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFFMTAxOUQ2RTdENzJFOTQyMUY1MzAzOUIxNDQ0QTY5
MTU1RDI0MjAeFw0yNTA2MTYxOTU0MTVaFw0yNjA2MTUxOTU5MTVaMDMxMTAvBgNV
BAMTKDA3NkY3RkMxNEYyQUQ4QUFGQTA3NUJCOTc2NjgzNzIyQ0U1NEVDRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qrGXDWfh5Ff6jeHLvnMsQTgi
0m3BONsWaKSzMfmI2aYjQN2+0cpbSZemuPF9PCVGkq+hys7klYmBuI+aqP1C6YP2
ghpG4KPMbN7C487bn780ICzkHlfIRD3NtdDaZCFt+amV6vgguy9/EAhvqIl44p8W
x4cxpkGPsxBppxqE8jcDPwslHhOlIrBfd854DG5Nr8juuZTWKXQWTMFQzalOFXFt
J3n2Ic2fHMIRhrOZajfkMupDs86k5nt/5OaNjkekyhqBJumpb52QZ4+PDvx6AqjH
lMzMexYK4GpiUZou0PNnSFVEwndbFJ/kiRrfeqszQJ3A4JnGRNffMr6DolN3AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUB29/wU8q2Kr6B1u5dmg3Is5U7NMwHwYDVR0j
BBgwFoAUEeEBnW59culCH1MDmxREppFV0kIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvMTFFMTAxOUQ2RTdENzJFOTQyMUY1MzAzOUIxNDQ0QTY5MTU1RDI0Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xMUUxMDE5RDZFN0Q3MkU5NDIx
RjUzMDM5QjE0NDRBNjkxNTVEMjQyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzIz
ODMwMzQzYTMxMzYzOTMwM2EzMzMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MjM2MzMzMjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBaQAwAwDQYJKoZIhvcNAQELBQADggEB
AJJdVqACoyazIH8167T5w0HQ53xl7FWulHjyXWeAneFyhhVVr38H8CfD164OS2Ev
tOTaHbKeZqRIPwlOiInFJyYPqtdT1Uc1XudgOoN2WKlzBeKx63a2L3u15/KW6rhO
EqFDhla9covo/7EkFQdJArqbUB61JWv2lA9o1av5/l9Tsv478Vl03H9GVlwfE/wZ
w5vMWZFZlZBMZ8+ZO+szxK7ErG+AgO2fihny/sILiWdW3a0Mh5J7KEetLAxossh6
vgBAjbAUjUAIxC/TeOYQot7kSzahk7UVSeNWzrE+Btc5MBIRIq5KUdqOSdzf4n+/
c4wv21ZuK+0A+O4xY78Hej4=
-----END CERTIFICATE-----
Generated at Thu Jun 19 19:21:23 2025 by rpki-client