Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3830303a3a2f34312d3431203d3e20323633323932.roa
File:                     323830343a313639303a3830303a3a2f34312d3431203d3e20323633323932.roa (raw, json)
Hash identifier:          1xDiVsaSGrKfFtOwAth2CsjnZfCMBFEBVpE05CqZ+K0=
Subject key identifier:   C8:C4:7D:BF:DE:A4:BB:37:78:33:3A:7C:FB:40:47:3A:F1:72:DF:0F
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       6D531D75D4835DDDF3E956A78B0CD3A6A9AFF4F7
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3830303a3a2f34312d3431203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:13 +0000
ROA not before:           Mon 16 Jun 2025 19:54:13 +0000
ROA not after:            Mon 15 Jun 2026 19:59:13 +0000
asID:                     263292
IP address blocks:        2804:1690:800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:53:1d:75:d4:83:5d:dd:f3:e9:56:a7:8b:0c:d3:a6:a9:af:f4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:13 2025 GMT
            Not After : Jun 15 19:59:13 2026 GMT
        Subject: CN=C8C47DBFDEA4BB3778333A7CFB40473AF172DF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:d4:37:06:77:4f:a7:c4:b1:65:0e:86:8b:
                    d3:42:88:d9:24:0e:9d:3b:9d:39:fc:76:68:1f:d0:
                    b1:48:45:49:27:98:80:2b:ba:fb:1d:c6:a1:21:4a:
                    b9:37:6f:09:19:ca:f9:c0:1f:07:2f:49:f4:da:49:
                    7f:78:60:61:7e:6c:a4:f3:da:a1:2e:ed:ae:cb:5e:
                    b2:73:c1:82:da:0c:1a:49:1b:44:cd:bf:5f:b3:8d:
                    7f:80:99:8d:9c:a1:56:bd:75:7a:54:84:ee:eb:5e:
                    92:23:f2:e0:fe:74:57:b3:ff:64:6b:a7:db:8a:68:
                    a1:ac:67:98:78:0d:4b:3c:5e:d5:6c:88:d5:8d:dc:
                    a0:ad:b7:38:60:83:eb:d0:bf:39:0a:48:e6:b3:90:
                    73:e0:43:a1:11:e6:e5:97:0a:52:cc:15:b8:96:0d:
                    3e:4e:57:99:61:7c:2d:b8:b9:2b:0e:75:8c:31:cf:
                    ab:28:50:23:68:56:d5:b9:7d:e4:d7:8d:05:ca:49:
                    f1:51:2a:1c:06:67:5e:73:3a:89:08:c2:d2:bd:fa:
                    59:e9:70:49:94:82:3f:61:01:1f:44:26:16:92:62:
                    c2:a3:77:7f:46:ae:eb:eb:b3:58:8d:6b:4a:3d:07:
                    26:32:f6:e8:50:2e:ec:84:6e:06:a1:0a:a5:af:fc:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C4:7D:BF:DE:A4:BB:37:78:33:3A:7C:FB:40:47:3A:F1:72:DF:0F
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3830303a3a2f34312d3431203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:800::/41

    Signature Algorithm: sha256WithRSAEncryption
         c8:f9:ee:0a:e0:ff:eb:a9:3f:01:9e:e8:e3:62:e9:7d:8e:3d:
         46:e1:06:93:43:f6:4f:c9:62:63:8d:02:d9:d9:24:3d:e0:03:
         51:dc:11:39:41:5b:33:35:0c:4e:05:d3:37:86:5a:c8:35:19:
         60:bb:e0:b0:c6:84:ae:36:ee:b7:03:90:ba:f6:7d:13:ec:3e:
         0a:a9:87:dd:5a:64:08:9e:0b:36:e9:d6:e0:de:c7:33:b0:d1:
         2b:d4:7f:66:0f:72:c0:1b:f3:bc:82:3f:9c:7a:2a:55:d5:e4:
         03:87:41:86:8f:c5:a4:30:f6:ec:5c:91:60:ed:3a:33:0c:8d:
         d6:ac:a7:27:b9:62:df:af:99:1f:a5:5d:92:8b:b2:aa:49:02:
         7a:ab:65:18:3b:3e:48:ed:b1:f7:49:50:ed:7f:15:a2:2a:6e:
         49:d9:e1:7f:3e:fd:e8:ef:fa:aa:62:10:4a:bc:16:17:c1:9a:
         34:39:41:40:35:df:58:f2:87:6b:61:9c:0d:5d:fb:1c:2e:e3:
         d5:74:11:03:ea:66:8e:1c:fc:d1:d5:02:50:bf:2d:26:b3:69:
         42:94:4a:42:75:f4:80:62:cf:d1:ea:f5:48:e7:62:20:b6:95:
         9a:52:ed:08:ed:82:3d:6d:ef:89:a2:4a:61:2a:dc:ec:b4:e3:
         9f:29:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:42:34 2025 by rpki-client