Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa
File:                     3137372e37332e38342e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          CYCzjjz7vC2HSH+XTLuo+vyMZyKi4b1Smps4Q5cy2OM=
Subject key identifier:   FF:B4:94:3D:0F:D2:E7:96:04:D0:85:8B:AC:CC:A3:23:FB:96:81:8A
Certificate issuer:       /CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
Certificate serial:       4282A3388C76475D4FC679EC9DABBB6B4B189981
Authority key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa
Signing time:             Sat 23 Aug 2025 13:03:04 +0000
ROA not before:           Sat 23 Aug 2025 12:58:04 +0000
ROA not after:            Sat 22 Aug 2026 13:03:04 +0000
asID:                     52700
IP address blocks:        177.73.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:a3:38:8c:76:47:5d:4f:c6:79:ec:9d:ab:bb:6b:4b:18:99:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
        Validity
            Not Before: Aug 23 12:58:04 2025 GMT
            Not After : Aug 22 13:03:04 2026 GMT
        Subject: CN=FFB4943D0FD2E79604D0858BACCCA323FB96818A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:46:e0:dd:60:2e:d8:3e:4a:cf:52:c3:10:09:
                    7d:ad:ab:31:f3:24:f8:63:25:c3:6e:94:93:52:16:
                    99:6f:db:bb:7f:ec:b1:90:10:26:77:9a:85:5f:a3:
                    82:f4:c4:ad:5a:ff:47:4a:00:6f:12:67:89:5d:12:
                    32:7b:96:ea:5a:76:36:4f:28:bb:ff:96:16:27:5c:
                    d3:7a:7b:0b:2a:ec:a2:74:a9:4d:56:77:f6:a9:c4:
                    61:76:f6:5e:d5:43:32:0a:77:e9:aa:8b:88:5e:68:
                    cf:5f:66:60:44:ad:e9:85:95:62:b1:96:34:6c:47:
                    d3:24:5c:b7:02:ac:b5:4d:64:c4:fe:3c:b4:e2:d6:
                    b9:f8:30:c5:e0:92:79:b7:85:ee:0e:c0:dd:88:96:
                    ca:ee:9b:c2:0e:98:a2:1a:e0:07:c8:da:db:bc:e9:
                    12:a4:90:d6:ea:69:9c:f8:db:a2:e9:76:06:ab:1a:
                    fe:de:f2:2b:1e:8e:27:af:3b:4a:6c:36:ec:62:02:
                    9b:a7:46:b7:3d:9e:72:30:71:3b:25:26:73:47:41:
                    92:36:02:41:1f:2e:b6:d1:0c:c1:af:6c:0b:d6:bc:
                    df:77:18:32:9c:c5:95:57:f4:0d:54:bb:d2:14:52:
                    39:cb:50:5c:b2:29:78:02:96:81:d3:86:47:35:d0:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B4:94:3D:0F:D2:E7:96:04:D0:85:8B:AC:CC:A3:23:FB:96:81:8A
            X509v3 Authority Key Identifier:
                keyid:23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:84:dd:c1:d9:3e:d6:f5:b5:a4:d4:56:21:9e:0d:78:f5:
         e0:ef:20:1f:62:b1:b4:a2:88:52:f5:26:4f:82:82:9e:77:49:
         0a:42:16:9c:49:c3:0a:0a:b3:b6:f0:ca:df:9b:dd:2b:6f:34:
         44:8d:17:c8:10:1d:bc:e2:44:67:3f:f6:fa:9b:45:ae:55:cd:
         b3:c2:61:2a:4e:4c:c0:97:49:25:6f:f7:4d:ac:4d:5c:49:a9:
         be:25:61:c0:77:88:ed:dd:26:9e:1a:dc:f4:3d:19:ef:34:6d:
         fa:58:0e:a5:a6:5f:a1:47:27:51:2a:ae:a7:6f:72:4f:8d:46:
         11:62:fc:21:c9:2e:35:c4:42:ff:3e:65:b0:bb:55:63:4f:f9:
         5f:1c:a7:c7:54:ce:c2:fb:a3:0f:a8:81:87:6b:9e:39:65:1d:
         86:ad:c9:40:be:ea:91:8c:b4:65:4a:21:37:ee:33:0e:94:43:
         36:1c:c4:db:b0:cd:5d:e0:df:93:60:22:45:eb:95:7b:3d:5c:
         b5:16:93:cb:4d:1c:cd:07:de:7c:69:ce:ce:e6:91:61:ef:5e:
         e2:30:67:79:86:1f:49:a2:9a:a5:9d:08:65:82:83:95:57:d6:
         a2:1c:fc:b3:d1:77:25:74:a7:78:cf:3e:0e:36:1e:2e:44:c7:
         eb:5c:95:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:41:29 2025 by rpki-client