Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3630303a3a2f34312d3431203d3e20323633323932.roa
File:                     323830343a313639303a3630303a3a2f34312d3431203d3e20323633323932.roa (raw, json)
Hash identifier:          G5KU1hmjMpVD6SAUQR5IMOnT+wAg0Fkp/q/l01mbfhg=
Subject key identifier:   2A:6F:E5:39:5B:D0:39:DE:78:0C:73:5B:97:AC:EE:9E:60:5F:2D:6C
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       7CCF099E045404E1F250DA2B20677377F463D993
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3630303a3a2f34312d3431203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:14 +0000
ROA not before:           Mon 16 Jun 2025 19:54:14 +0000
ROA not after:            Mon 15 Jun 2026 19:59:14 +0000
asID:                     263292
IP address blocks:        2804:1690:600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 08:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cf:09:9e:04:54:04:e1:f2:50:da:2b:20:67:73:77:f4:63:d9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:14 2025 GMT
            Not After : Jun 15 19:59:14 2026 GMT
        Subject: CN=2A6FE5395BD039DE780C735B97ACEE9E605F2D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:97:e2:9b:9a:2b:d0:17:e5:c7:8b:b3:41:
                    c1:1f:49:11:b2:b0:a7:d9:1a:84:ca:5a:3a:42:b3:
                    8b:02:3f:66:96:90:d9:36:82:21:eb:65:74:c7:84:
                    9e:4a:8c:78:95:b5:be:b5:4a:13:23:db:35:1e:21:
                    6f:ca:00:d8:8d:97:28:79:2e:c9:23:ec:73:52:cd:
                    d0:61:8c:b1:cc:4b:2a:25:77:48:4f:41:c0:a4:1d:
                    b3:29:2a:b1:05:88:5d:7c:74:24:cc:98:8f:c2:c5:
                    23:af:15:78:e0:ee:c6:b7:27:8f:51:72:32:0b:15:
                    6d:05:7c:c2:fc:3b:2f:e3:5f:11:83:87:08:3b:cd:
                    50:87:33:27:53:e5:1f:f0:d0:44:c2:d9:74:fe:0a:
                    c7:b5:eb:00:cf:ef:6a:df:77:aa:c1:26:37:24:01:
                    ed:22:24:4f:b9:64:33:34:23:ed:55:96:73:6e:6d:
                    06:04:ff:86:f2:7a:d2:a2:90:96:c2:d6:a4:05:ac:
                    9f:e6:e3:ac:ae:73:31:2e:e5:70:c4:ca:52:84:2c:
                    5c:6c:b5:fc:03:f9:fb:f4:ba:1b:7f:04:4b:8d:e5:
                    9f:40:29:94:f2:f1:70:10:3d:c0:03:80:90:9b:0e:
                    51:54:33:b4:0e:7a:86:18:c8:93:6b:d5:e1:fd:80:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6F:E5:39:5B:D0:39:DE:78:0C:73:5B:97:AC:EE:9E:60:5F:2D:6C
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/323830343a313639303a3630303a3a2f34312d3431203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1690:600::/41

    Signature Algorithm: sha256WithRSAEncryption
         cd:fe:d6:78:72:d0:d0:3c:42:c1:06:ea:69:20:8c:f6:2e:c1:
         6f:ef:fb:51:71:60:4c:b6:d1:c5:60:87:0a:fa:6a:83:ba:20:
         e2:1e:b9:ae:2f:d8:e4:71:25:ed:49:d6:c9:9e:48:cc:e5:44:
         0c:9b:fb:ec:21:e4:cc:85:78:f4:f3:1e:28:96:9e:34:c7:38:
         8c:cd:c9:41:9f:ad:d8:43:5d:ea:9e:1b:99:87:cb:eb:8a:63:
         05:1d:94:4c:64:21:63:92:55:46:29:7e:c4:15:71:5e:0b:ff:
         5c:ed:cb:18:b1:0c:da:5e:52:17:06:14:23:a3:d2:01:05:4d:
         c2:62:aa:f6:8a:10:85:81:f9:0f:1a:7d:7c:10:1f:dc:c4:ef:
         a1:3a:19:ac:9a:5d:e0:1e:66:e6:f4:5d:24:fd:0f:bc:4c:7b:
         11:c5:6e:58:36:db:e3:6a:5c:c0:3c:cf:a1:2a:d6:03:d3:fe:
         4a:b5:a9:f1:9b:16:39:be:2b:c8:d0:de:c3:2f:f4:bb:bd:8e:
         88:63:4f:07:fa:b9:8f:af:1d:11:bc:35:3b:08:d5:77:c7:99:
         27:22:82:ce:09:2d:2b:81:61:6b:4b:7f:a8:48:94:16:4c:06:
         31:ad:ce:a0:30:b4:73:8e:bd:b0:81:a3:0b:b1:08:d8:dd:48:
         a3:5a:d5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:38:56 2025 by rpki-client