Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa
File:                     3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa (raw, json)
Hash identifier:          Vu9xnSu3Yc1xgGWxWVP63Nyf2BzsGHfBEdz5uCG7CBQ=
Subject key identifier:   E8:FD:56:27:4D:D4:20:8A:1D:CE:75:A4:6F:5C:34:56:53:43:D8:33
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       483D92607E11257CBDA9A9F3C462C493980B94D7
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:14 +0000
ROA not before:           Mon 16 Jun 2025 19:54:14 +0000
ROA not after:            Mon 15 Jun 2026 19:59:14 +0000
asID:                     263292
IP address blocks:        189.126.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 08:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3d:92:60:7e:11:25:7c:bd:a9:a9:f3:c4:62:c4:93:98:0b:94:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:14 2025 GMT
            Not After : Jun 15 19:59:14 2026 GMT
        Subject: CN=E8FD56274DD4208A1DCE75A46F5C34565343D833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:63:a1:49:35:b1:ca:9f:2b:cb:9d:a6:c5:
                    b1:e0:e4:37:1e:04:c0:59:ac:07:38:3c:70:0f:2a:
                    00:ca:a9:ad:07:70:b4:40:fd:5b:3e:b8:c1:63:e4:
                    a1:42:6c:30:65:cb:2d:97:b6:84:88:3e:c2:89:5b:
                    d0:96:60:36:86:76:be:93:22:51:ab:47:ef:67:bc:
                    0f:d8:58:0c:70:49:36:fb:21:5d:32:07:2c:d9:46:
                    36:45:df:01:ef:91:ff:4f:91:ef:5b:cc:3a:9a:a0:
                    cb:0d:87:90:5e:13:f7:df:4b:bb:a0:4f:75:23:89:
                    b5:32:ec:55:93:69:c0:33:76:4f:09:e1:dc:6b:1e:
                    17:e2:89:37:5c:e7:a0:7a:a7:2c:65:06:6c:f8:8a:
                    41:4d:53:9f:32:3a:a9:20:4a:6e:26:85:59:46:c0:
                    05:08:70:4e:aa:9e:ef:1c:3a:bb:b2:45:8f:45:ff:
                    e6:c6:0f:8a:ee:48:cc:a5:99:7e:59:b1:98:f2:14:
                    1c:41:35:48:61:bf:f1:05:ba:c0:1b:5b:f3:29:ea:
                    ed:1e:8c:f2:99:e2:4e:4b:fb:d3:07:e3:0c:25:15:
                    00:49:94:e2:da:7b:6a:f3:a7:11:f4:35:4e:ae:be:
                    14:84:b4:f6:9f:54:38:9a:20:7a:8e:e3:16:34:91:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FD:56:27:4D:D4:20:8A:1D:CE:75:A4:6F:5C:34:56:53:43:D8:33
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:3b:93:30:98:d4:1f:a4:2f:d0:45:09:fd:8f:84:1d:8f:55:
         24:27:5b:d6:2c:5d:29:03:b1:5f:c7:ad:99:3b:3d:59:74:90:
         cb:4e:0a:f6:4f:18:fb:38:a0:2c:de:c6:73:c0:38:46:fd:88:
         e7:ae:de:34:95:37:79:4a:21:14:6f:2c:6b:0e:75:d1:cc:99:
         ef:65:c3:9e:80:1b:b5:13:21:20:3f:b0:47:2a:03:b0:af:9b:
         f4:93:9f:0a:80:d1:00:c3:08:fe:6b:58:7d:21:40:af:61:3b:
         e6:2f:ab:bc:70:ed:2e:82:fc:22:50:75:c2:44:45:cb:76:e8:
         33:09:e0:1c:14:6d:98:77:d0:0a:74:ba:c4:8b:92:66:00:8f:
         f0:0a:d9:85:d4:2f:29:a7:e8:59:c4:74:b5:91:3d:01:b3:cc:
         99:9f:b6:7a:ff:69:d7:3f:60:22:82:13:a0:91:f8:f8:8e:f1:
         1f:7c:6b:f1:09:5c:b5:19:7f:5b:db:9d:d7:7a:ec:6a:76:27:
         54:c7:a2:59:67:7e:a4:f0:20:5d:69:b3:24:b9:18:e9:72:d4:
         92:07:32:25:06:c2:f9:cc:40:9e:73:68:60:46:3e:82:2c:18:
         6e:3c:9d:86:c6:49:37:99:0e:f4:48:25:75:ea:2b:3b:17:37:
         a5:cc:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:53:38 2025 by rpki-client