Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a343a3a2f34382d3438203d3e20323633323932.roa
File:                     323830343a313639303a343a3a2f34382d3438203d3e20323633323932.roa (raw, json)
Hash identifier:          DlpdxW+r7fdP1vxx+KQyPEEsZHcIeXrH/TXcCSO8lqY=
Subject key identifier:   B1:D0:2E:27:81:B9:8D:61:48:7A:4E:C1:84:47:74:D6:EA:E0:FE:97
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       650552EAD7543E3686C58C8B95B659A6B0CC7156
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a343a3a2f34382d3438203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:16 +0000
ROA not before:           Mon 16 Jun 2025 19:54:16 +0000
ROA not after:            Mon 15 Jun 2026 19:59:16 +0000
asID:                     263292
IP address blocks:        2804:1690:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:05:52:ea:d7:54:3e:36:86:c5:8c:8b:95:b6:59:a6:b0:cc:71:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:16 2025 GMT
            Not After : Jun 15 19:59:16 2026 GMT
        Subject: CN=B1D02E2781B98D61487A4EC1844774D6EAE0FE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:df:68:ea:0b:2f:8e:ec:13:03:58:15:68:
                    55:40:00:7b:15:69:93:be:5b:8c:ee:40:87:38:9b:
                    60:35:b0:7c:95:14:54:c8:51:e2:95:b8:77:78:a6:
                    c7:bc:f4:5c:8a:e8:32:b7:ce:d3:33:2f:b3:2c:94:
                    13:9b:88:48:8d:90:fc:0d:aa:d8:79:35:ea:60:6d:
                    bb:44:6e:a1:b6:88:bd:1f:7a:39:d3:85:ba:d6:41:
                    d1:7d:07:30:5c:c7:cd:5b:3a:d6:a5:d2:49:90:7a:
                    e2:75:8a:6d:3f:f9:49:e5:f6:12:6e:45:25:6d:96:
                    d4:90:3e:b7:74:43:f7:77:e9:0d:cb:a0:6d:f3:a3:
                    26:cf:63:cf:fb:3b:0f:cc:af:c2:16:2a:ba:96:57:
                    53:2a:55:e5:a5:71:aa:e6:e6:78:36:6f:3d:51:53:
                    21:a8:05:1e:45:b0:82:75:ad:39:11:b9:31:96:06:
                    39:e0:9a:9f:1d:56:d0:ba:e9:41:f4:71:a3:14:30:
                    e0:6b:d7:24:2a:35:2e:58:06:6f:ca:30:ee:3b:45:
                    41:69:bb:6a:d2:9c:83:1d:43:dd:6c:37:84:37:6d:
                    57:38:13:e6:f5:ca:36:33:4a:4b:f5:8c:b1:aa:a5:
                    66:20:6b:e0:cb:45:a4:70:7c:ab:01:75:7b:77:95:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D0:2E:27:81:B9:8D:61:48:7A:4E:C1:84:47:74:D6:EA:E0:FE:97
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a343a3a2f34382d3438203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:4d:6a:b0:e1:49:2d:21:fb:a4:2a:46:01:ba:e8:3c:0a:
         68:7e:c6:77:ae:0a:29:cd:01:df:50:6b:a6:a1:f7:26:27:29:
         de:df:fa:6b:f1:e7:e0:0f:0e:a1:79:62:f5:7a:29:3b:e0:7e:
         87:5a:6f:3c:63:ae:9b:bf:60:c1:f1:44:cc:1f:c7:53:e0:70:
         78:4a:c3:91:e4:ac:af:3e:8e:e9:57:74:c5:2e:06:78:ef:b0:
         51:54:1b:c3:d5:6b:31:a4:85:c1:6e:50:20:76:40:a7:84:96:
         b2:c5:18:b1:69:11:b7:08:88:e8:d3:a2:ea:2b:2d:9b:92:eb:
         6e:49:35:bb:ab:d7:fe:ff:16:b9:ee:e5:0a:97:6e:32:97:8b:
         f0:87:37:ce:8e:15:87:45:7a:35:1e:7d:1d:e6:c1:0d:a0:21:
         1a:c9:3f:6e:af:ac:40:da:26:c0:65:ab:55:7d:02:70:63:c2:
         05:2c:29:d2:e7:db:46:de:ed:50:32:ce:ef:82:4d:2d:70:46:
         12:30:8f:e1:6d:f6:b0:94:c6:94:4c:ea:47:ec:16:1b:f3:ea:
         31:28:15:b5:46:3c:f5:c3:5d:39:c3:f4:f8:a9:9b:b9:99:0f:
         85:99:4e:7c:4c:18:07:92:79:08:c3:e3:68:a5:4c:4d:a9:6e:
         27:bf:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:40:34 2025 by rpki-client