Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa
File:                     323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa (raw, json)
Hash identifier:          0dM/POhH2+U7vB+bEaZ9Ofs3WppDFuZxR1+gSpj5P2c=
Subject key identifier:   AF:10:7C:9E:E9:B1:81:C8:83:C4:2F:C4:D5:A5:20:FE:DB:87:F7:0D
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       27792A5C656BAE7EAC60FCBCF1CA60042861AC43
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa
Signing time:             Mon 18 May 2026 20:01:40 +0000
ROA not before:           Mon 18 May 2026 19:56:40 +0000
ROA not after:            Mon 17 May 2027 20:01:40 +0000
asID:                     263292
IP address blocks:        2804:1690:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:79:2a:5c:65:6b:ae:7e:ac:60:fc:bc:f1:ca:60:04:28:61:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: May 18 19:56:40 2026 GMT
            Not After : May 17 20:01:40 2027 GMT
        Subject: CN=AF107C9EE9B181C883C42FC4D5A520FEDB87F70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:17:d3:d1:f5:d0:05:ea:40:ae:da:4f:bb:
                    81:42:2c:91:1d:d6:55:cc:2b:0c:29:08:73:cc:70:
                    77:ab:56:f0:7e:86:a6:6a:e2:f1:8f:1e:c0:35:30:
                    a4:0d:18:f7:b8:15:ac:3a:ca:38:e2:a6:e9:48:b8:
                    d8:95:98:44:95:53:36:a3:9c:ef:9d:4d:99:86:69:
                    40:a4:84:9a:e4:96:1e:66:9f:96:d8:4b:09:2f:31:
                    a2:07:45:4a:1e:a3:0c:a7:fc:c1:2f:0b:b5:a7:57:
                    43:9a:52:dc:78:01:f3:54:7c:f5:c2:91:d9:39:0c:
                    f3:9d:b5:2c:2e:a0:1f:4f:1e:71:5d:63:a7:e5:5a:
                    b2:f6:d6:83:ec:52:26:a4:e4:99:69:b0:d4:0a:77:
                    2c:5d:f5:48:56:30:62:ef:3e:72:7f:0b:8a:a4:2f:
                    f4:5a:19:5a:5a:35:43:9d:38:35:f4:07:5d:3d:19:
                    e4:db:4f:f9:e5:37:76:fe:db:cf:bd:28:c3:b8:95:
                    62:7e:5f:24:8a:6b:7c:3d:63:3a:d4:56:30:aa:33:
                    50:4d:a6:37:8b:a2:3d:94:86:a9:52:c9:ea:4d:fe:
                    ee:9b:70:15:e1:b6:a2:ad:9d:50:59:99:d0:27:30:
                    9a:13:eb:34:16:6b:3d:5b:2b:0a:09:54:8a:3e:a9:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:10:7C:9E:E9:B1:81:C8:83:C4:2F:C4:D5:A5:20:FE:DB:87:F7:0D
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:87:95:3f:1c:ae:40:4e:7a:12:24:c8:65:a2:e5:fc:51:06:
         17:09:e5:48:dd:5b:3a:0a:3d:c8:3a:c7:bc:01:e4:8d:a6:48:
         db:bb:e8:f1:b4:bd:4b:95:f5:bf:af:27:29:f0:ef:3d:1f:e3:
         8a:ca:1e:33:a7:71:9d:c3:db:05:87:95:1e:d8:37:4f:f9:82:
         53:ff:a3:c5:71:ca:32:96:0d:62:bd:23:fc:a7:e0:b2:d3:03:
         ca:a4:fa:bf:fb:1c:89:1e:0e:9c:d4:a3:d0:a4:0b:43:f2:67:
         6c:bf:97:b6:6d:2a:d7:d5:7e:3d:4f:30:a4:93:30:4d:fc:20:
         f1:19:54:37:75:76:9e:ba:e6:7d:0e:0b:3e:63:fa:06:27:7e:
         fa:65:89:a3:fc:36:d2:1d:c3:bc:85:78:98:f2:87:ad:20:8d:
         a0:31:fc:ed:78:ae:81:7c:21:73:00:a7:f0:fd:d1:1d:fe:70:
         5e:59:f4:d2:4a:81:ce:df:9a:97:82:97:49:fe:3a:cb:02:49:
         9f:a1:45:32:d4:34:84:fa:ea:fd:ce:93:d2:de:c7:f5:1c:24:
         d2:82:26:f2:7f:f5:99:2a:a8:61:1a:2c:06:a9:14:a7:af:42:
         8f:88:47:16:f0:62:98:84:a9:7e:b6:e9:ac:93:1b:43:c1:dc:
         ff:bf:0e:e5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUJ3kqXGVrrn6sYPy88cpgBChhrEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFFMTAxOUQ2RTdENzJFOTQyMUY1MzAzOUIxNDQ0QTY5
MTU1RDI0MjAeFw0yNjA1MTgxOTU2NDBaFw0yNzA1MTcyMDAxNDBaMDMxMTAvBgNV
BAMTKEFGMTA3QzlFRTlCMTgxQzg4M0M0MkZDNEQ1QTUyMEZFREI4N0Y3MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXrRfT0fXQBepArtpPu4FCLJEd
1lXMKwwpCHPMcHerVvB+hqZq4vGPHsA1MKQNGPe4Faw6yjjipulIuNiVmESVUzaj
nO+dTZmGaUCkhJrklh5mn5bYSwkvMaIHRUoeowyn/MEvC7WnV0OaUtx4AfNUfPXC
kdk5DPOdtSwuoB9PHnFdY6flWrL21oPsUiak5JlpsNQKdyxd9UhWMGLvPnJ/C4qk
L/RaGVpaNUOdODX0B109GeTbT/nlN3b+28+9KMO4lWJ+XySKa3w9YzrUVjCqM1BN
pjeLoj2UhqlSyepN/u6bcBXhtqKtnVBZmdAnMJoT6zQWaz1bKwoJVIo+qZzlAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUrxB8numxgciDxC/E1aUg/tuH9w0wHwYDVR0j
BBgwFoAUEeEBnW59culCH1MDmxREppFV0kIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvMTFFMTAxOUQ2RTdENzJFOTQyMUY1MzAzOUIxNDQ0QTY5MTU1RDI0Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xMUUxMDE5RDZFN0Q3MkU5NDIx
RjUzMDM5QjE0NDRBNjkxNTVEMjQyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzIz
ODMwMzQzYTMxMzYzOTMwM2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2Uy
MDMyMzYzMzMyMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEFpD/MA0GCSqGSIb3DQEBCwUAA4IB
AQBoh5U/HK5ATnoSJMhlouX8UQYXCeVI3Vs6Cj3IOse8AeSNpkjbu+jxtL1LlfW/
rycp8O89H+OKyh4zp3Gdw9sFh5Ue2DdP+YJT/6PFccoylg1ivSP8p+Cy0wPKpPq/
+xyJHg6c1KPQpAtD8mdsv5e2bSrX1X49TzCkkzBN/CDxGVQ3dXaeuuZ9Dgs+Y/oG
J376ZYmj/DbSHcO8hXiY8oetII2gMfzteK6BfCFzAKfw/dEd/nBeWfTSSoHO35qX
gpdJ/jrLAkmfoUUy1DSE+ur9zpPS3sf1HCTSgibyf/WZKqhhGiwGqRSnr0KPiEcW
8GKYhKl+tumskxtDwdz/vw7l
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:31:58 2026 by rpki-client