Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a363a3a2f34382d3438203d3e20323633323932.roa
File:                     323830343a313639303a363a3a2f34382d3438203d3e20323633323932.roa (raw, json)
Hash identifier:          Pk/NeUUzhe/Y9QNwFeoJ+ac31/lxA/g4votViYuubk4=
Subject key identifier:   61:73:67:33:EC:0C:96:5D:EB:E4:C1:26:C7:F4:07:B0:34:A2:12:3A
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       529A33240988F034F14872DFCC0DE15FA899499B
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a363a3a2f34382d3438203d3e20323633323932.roa
Signing time:             Mon 18 May 2026 20:01:38 +0000
ROA not before:           Mon 18 May 2026 19:56:38 +0000
ROA not after:            Mon 17 May 2027 20:01:38 +0000
asID:                     263292
IP address blocks:        2804:1690:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9a:33:24:09:88:f0:34:f1:48:72:df:cc:0d:e1:5f:a8:99:49:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: May 18 19:56:38 2026 GMT
            Not After : May 17 20:01:38 2027 GMT
        Subject: CN=61736733EC0C965DEBE4C126C7F407B034A2123A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:e7:46:67:7b:2a:6e:9e:f7:65:2d:81:52:
                    1a:d5:2a:62:9c:5f:70:40:ac:4f:90:50:5b:f1:da:
                    09:d8:f1:eb:3f:c3:5c:93:31:38:1e:44:de:17:76:
                    17:20:a5:81:94:8f:af:d7:80:31:82:23:e7:e8:4a:
                    48:cd:20:ad:81:8f:de:b3:2f:2b:28:8d:c6:85:45:
                    c0:6d:25:a6:a8:d5:88:0b:04:74:e7:00:5f:1f:aa:
                    c2:3e:21:12:25:0f:ea:1b:42:7e:fc:d9:a1:a7:82:
                    41:fd:0a:c6:9e:20:80:0a:5b:a1:b0:0d:04:24:01:
                    e0:3e:a3:0b:a9:1e:b6:9b:27:ba:41:0f:53:da:a9:
                    0f:6c:5c:52:82:9b:23:91:96:14:df:a6:cf:8e:44:
                    16:fc:d8:fc:09:e6:0a:38:e0:35:46:08:eb:3b:f1:
                    6c:7c:1e:8c:b0:7e:7d:eb:83:33:d4:4c:a0:5c:c4:
                    9d:91:82:d3:68:9f:49:1c:ef:48:aa:52:f6:0a:af:
                    54:22:97:c3:81:98:6f:9e:c8:5f:40:ed:af:fa:7e:
                    9c:94:ff:53:4e:02:3a:2e:e0:bd:d6:cd:f1:cb:0f:
                    25:a9:ce:2d:53:00:6c:65:fd:77:46:8f:b0:0f:8c:
                    5c:b9:88:2c:86:31:44:a2:4f:8e:67:6e:7d:b3:c3:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:67:33:EC:0C:96:5D:EB:E4:C1:26:C7:F4:07:B0:34:A2:12:3A
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a363a3a2f34382d3438203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:4a:77:9a:39:22:f1:55:9a:85:d6:e8:02:49:3e:e0:3f:d6:
         bb:dc:75:51:3a:88:d0:a0:76:87:21:f5:93:38:ea:1d:6a:3e:
         e5:c0:ff:97:bb:eb:5d:e6:48:61:f5:bf:56:84:9a:13:9a:9f:
         b5:a0:cd:4d:01:53:67:87:61:af:db:0a:22:7b:fd:7a:dd:23:
         ec:98:b3:b8:75:a0:03:3a:9c:b2:53:ae:b0:2f:d7:01:1c:5f:
         bd:0e:d9:36:b4:7c:22:af:ae:36:b0:8f:dd:5d:af:54:e6:d3:
         09:ee:fb:d3:9e:3d:3d:e7:d9:ff:58:e0:95:60:53:5f:8c:24:
         dc:6a:87:f7:53:17:75:c3:b1:4c:b7:03:c0:18:f8:02:33:a3:
         89:76:03:95:59:71:ce:0b:6b:64:63:40:b1:4b:44:e7:0d:11:
         7d:97:c3:31:fc:cf:7d:b8:8f:c0:06:09:1a:e1:3d:06:40:98:
         21:a7:d8:6c:e2:fa:bc:43:88:e5:f1:97:da:24:9b:81:87:39:
         c7:dc:8e:0e:db:19:06:1e:27:c5:ec:10:58:47:12:5f:c8:ea:
         d7:1f:00:88:ae:da:4c:22:05:72:33:c9:b1:cc:cc:2f:84:96:
         82:cc:35:e6:6d:9d:66:1d:4d:c0:82:98:03:24:df:ea:da:82:
         30:29:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:38:29 2026 by rpki-client