Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3a2f33322d3332203d3e20323633323932.roa
File:                     323830343a313639303a3a2f33322d3332203d3e20323633323932.roa (raw, json)
Hash identifier:          t1CwYpFHk2477PkSMgxpKyA8zvtK2VSmNxUZyKsNTsg=
Subject key identifier:   E9:E7:06:EA:4F:86:34:9A:BE:20:BF:22:80:27:F9:35:93:F8:71:45
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       74A85820940762C242C7557FCFD510C54AEE5341
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3a2f33322d3332203d3e20323633323932.roa
Signing time:             Mon 18 May 2026 20:01:40 +0000
ROA not before:           Mon 18 May 2026 19:56:40 +0000
ROA not after:            Mon 17 May 2027 20:01:40 +0000
asID:                     263292
IP address blocks:        2804:1690::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a8:58:20:94:07:62:c2:42:c7:55:7f:cf:d5:10:c5:4a:ee:53:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: May 18 19:56:40 2026 GMT
            Not After : May 17 20:01:40 2027 GMT
        Subject: CN=E9E706EA4F86349ABE20BF228027F93593F87145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:29:99:b0:f5:1c:24:10:e1:69:6d:14:4a:
                    25:9b:35:7b:66:fb:0c:a3:97:2e:b3:d3:c3:88:79:
                    8a:55:c8:87:45:06:c5:1b:34:39:ce:2e:15:28:6d:
                    7c:04:36:20:e7:c8:f7:33:1b:d0:e4:6e:f1:71:53:
                    f0:63:2d:6c:8c:68:3c:1b:68:59:72:77:66:30:92:
                    53:1d:f2:04:df:27:58:98:ee:b6:c4:27:d9:5b:d1:
                    5b:2f:1d:23:e1:6e:0b:d3:65:db:c8:f2:ef:89:98:
                    ce:57:69:c3:39:c8:21:bf:a9:72:d0:80:2a:c6:24:
                    fc:21:d7:86:a9:0b:cb:d3:04:db:da:79:6d:fd:1e:
                    bf:97:b2:b7:00:ff:63:56:0f:92:a8:08:64:2d:6f:
                    90:d2:22:4c:2e:ca:d4:99:7e:38:c7:9d:79:f9:cb:
                    2c:77:e1:23:50:7e:06:fa:c7:3d:08:10:97:13:17:
                    dc:b1:29:0b:c8:29:59:dd:a2:56:d9:e7:c6:bd:58:
                    ca:dd:cd:a6:ec:16:e7:27:19:f5:54:d8:4f:30:54:
                    1a:17:9b:ff:57:d7:81:11:6c:0e:1a:ef:88:a5:9d:
                    44:89:99:fc:84:44:3e:07:3d:14:54:74:14:3b:d1:
                    c4:1d:df:fa:31:f1:e8:3b:bf:bb:04:91:93:35:cf:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E7:06:EA:4F:86:34:9A:BE:20:BF:22:80:27:F9:35:93:F8:71:45
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3a2f33322d3332203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:f7:89:7a:33:f4:a6:0c:56:8c:8c:dc:29:e1:bf:02:15:e2:
         49:f6:ea:7d:69:5b:24:5a:38:30:6e:09:a6:c2:b9:35:ae:94:
         f8:53:ca:64:fa:0e:d5:5a:5b:53:29:f0:89:2d:9d:b9:81:e4:
         b8:b5:87:d3:61:10:9f:f9:6d:a6:6e:4f:c7:a2:2f:2c:c4:25:
         c7:9a:27:a2:de:ab:95:d4:19:6b:e6:a9:3a:0f:3e:db:cb:f9:
         8a:f6:28:9b:58:8d:f7:2b:cf:e2:96:62:07:78:37:4b:8e:cf:
         db:e5:a2:d2:9c:7d:4f:d9:13:4f:e5:0c:65:18:18:b3:e2:76:
         a9:10:54:1f:b2:55:80:61:ad:52:62:ec:18:10:21:db:fc:e5:
         d1:38:15:95:23:bb:f5:e2:dc:cb:66:d6:36:4e:66:44:11:7f:
         e7:71:e1:84:72:38:40:a2:9d:c7:3c:c5:6b:ac:c9:b6:32:7b:
         61:08:24:41:b1:ac:89:61:81:b2:33:8f:12:0f:7b:db:be:57:
         99:0a:99:b9:fe:bc:30:a2:14:f5:ab:18:49:cf:d4:1c:0a:b1:
         58:81:0d:5f:40:b4:e6:40:67:2b:5c:d2:b2:7a:b5:d8:11:ec:
         87:e2:15:96:d9:61:c3:e4:fb:79:40:73:78:5d:68:60:40:42:
         a0:40:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:07 2026 by rpki-client