Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa
File:                     323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa (raw, json)
Hash identifier:          KdqjHcxpeNadc9hqLwW1n2lTpXkPX8bRSPkqMniJOJA=
Subject key identifier:   7D:21:32:13:81:F2:49:05:95:13:CA:4A:83:5D:92:81:F7:7A:E1:C4
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       28D7FF97A86033D1B1619B4E20EA13A52A88B70F
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:16 +0000
ROA not before:           Mon 16 Jun 2025 19:54:16 +0000
ROA not after:            Mon 15 Jun 2026 19:59:16 +0000
asID:                     263292
IP address blocks:        2804:1690:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d7:ff:97:a8:60:33:d1:b1:61:9b:4e:20:ea:13:a5:2a:88:b7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:16 2025 GMT
            Not After : Jun 15 19:59:16 2026 GMT
        Subject: CN=7D21321381F249059513CA4A835D9281F77AE1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:17:54:a3:9b:74:c5:6b:10:41:48:bb:e6:
                    ab:b8:90:e3:fa:48:7e:ae:a9:5c:3e:79:a4:12:c8:
                    f6:c9:9e:2f:ce:6d:84:89:66:a4:3b:5f:9b:67:0d:
                    7b:31:8d:e2:af:78:82:ce:64:1b:19:81:18:ff:08:
                    de:e4:20:8a:19:d7:35:c5:d3:9a:70:dc:24:b6:90:
                    78:9f:22:6a:d6:2d:e9:fd:b9:5a:ec:89:c1:71:33:
                    a9:f2:86:db:7a:f9:10:c2:56:30:0a:16:f5:ea:53:
                    47:c4:7e:90:3e:b3:9f:9c:3a:b8:6d:48:d7:94:31:
                    d2:bf:06:7f:b4:03:d3:b9:eb:d4:60:69:64:91:15:
                    7f:5b:03:0e:c8:1b:7b:92:d8:f9:20:4e:22:19:d6:
                    16:f0:5a:c6:d4:5b:f2:77:f4:8b:39:df:e3:c4:da:
                    5d:a9:dc:d1:50:ed:f8:4e:02:6a:ea:64:5a:77:bd:
                    59:a7:c5:02:1d:ff:b6:0d:a7:07:80:7a:75:54:c4:
                    75:92:55:7b:1b:6e:06:97:bb:7a:79:c3:36:e5:c7:
                    36:c9:13:06:3e:f9:91:d1:80:6f:3f:21:01:8b:16:
                    8c:e0:c7:7e:18:47:e2:f2:85:35:f6:9d:43:5d:f3:
                    72:6c:c2:51:a2:b8:f9:2d:88:d1:55:6d:8a:95:54:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:21:32:13:81:F2:49:05:95:13:CA:4A:83:5D:92:81:F7:7A:E1:C4
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a666630303a3a2f34302d3430203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:cc:00:e0:0c:6a:ce:fd:03:a6:87:ea:fc:59:48:d2:ba:c7:
         a4:3c:11:09:5a:77:e5:05:d9:0a:8a:ac:72:1c:03:a8:cd:25:
         26:2a:a5:59:67:77:40:a0:75:8b:c3:f2:f5:db:d1:b8:b7:bc:
         0f:9a:64:a2:d9:c1:86:42:b8:89:41:ac:0f:63:77:f3:95:68:
         cd:d7:6d:f3:27:ad:63:86:4a:69:cc:4f:6e:a3:3a:7c:0b:4f:
         50:92:0a:23:00:0a:05:9e:4f:08:b5:c2:7c:08:8f:ef:ed:a6:
         11:60:e3:e6:be:cd:08:17:c2:d4:d4:55:d3:50:6d:cc:27:2c:
         43:14:37:29:18:85:6a:f4:a5:59:96:70:5c:5d:6a:18:c8:cb:
         e2:25:a9:4d:42:6d:29:61:78:b2:7f:64:df:5f:ed:47:21:bb:
         79:7f:de:5d:6b:86:55:d3:67:9c:b4:4a:39:d2:e1:bb:37:bd:
         e5:e7:d1:14:f5:f6:0d:7c:4e:e2:7e:0e:11:a5:01:86:30:82:
         bd:3b:73:13:4f:b0:54:74:81:db:87:1c:4a:a0:33:7c:55:12:
         88:32:a8:15:2b:76:cb:02:47:84:b5:3e:87:e3:d4:79:3e:93:
         bf:14:32:b5:c9:c1:46:e0:6b:fe:db:b8:d6:41:68:da:e0:5a:
         8d:de:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:18:10 2025 by rpki-client