Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38362e302f32332d3233203d3e203532373030.roa
File:                     3137372e37332e38362e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          K/BShfZp8G3dIY9wbJZbZYBIWRmB6ZEclPx8K6R6zpY=
Subject key identifier:   DD:8D:0D:49:C9:3E:F9:E9:92:D8:D6:1B:25:6D:5A:3B:38:37:76:EF
Certificate issuer:       /CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
Certificate serial:       141EE7D0C7BA8489ECBD7E90CD2EE8E6D7E934BA
Authority key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38362e302f32332d3233203d3e203532373030.roa
Signing time:             Sat 23 Aug 2025 13:03:03 +0000
ROA not before:           Sat 23 Aug 2025 12:58:03 +0000
ROA not after:            Sat 22 Aug 2026 13:03:03 +0000
asID:                     52700
IP address blocks:        177.73.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1e:e7:d0:c7:ba:84:89:ec:bd:7e:90:cd:2e:e8:e6:d7:e9:34:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
        Validity
            Not Before: Aug 23 12:58:03 2025 GMT
            Not After : Aug 22 13:03:03 2026 GMT
        Subject: CN=DD8D0D49C93EF9E992D8D61B256D5A3B383776EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:f8:1e:3e:d4:9c:64:ac:37:c5:20:55:38:
                    fe:6a:28:b8:d2:1b:2e:03:54:bb:fe:39:44:21:a0:
                    82:36:8e:ef:df:6e:d7:f3:09:ac:a6:d6:70:0b:32:
                    c5:c6:bf:55:03:87:3e:fc:82:a7:b2:57:3c:ed:ab:
                    40:f4:d7:41:33:89:84:b4:4c:d7:c7:20:05:5a:b1:
                    e5:97:a5:84:49:8c:54:1b:8e:6f:89:ba:c6:40:a3:
                    b4:1e:a2:e9:06:ab:6e:4c:c5:78:e5:c3:b8:10:06:
                    7a:29:50:0f:99:20:74:b1:0e:f0:45:55:d5:11:71:
                    87:19:59:5b:a2:79:8d:72:ba:34:96:01:9a:6d:20:
                    11:7b:aa:26:b8:b0:0d:4c:6e:29:be:9c:f6:2a:40:
                    8c:b2:2f:09:fc:97:f4:c5:43:1e:e7:dc:ac:e9:94:
                    ca:56:e7:14:27:67:30:ad:1c:c4:f1:2a:fe:ba:47:
                    3e:ba:ff:7f:b4:f5:af:eb:f7:cf:23:c5:73:84:69:
                    a4:b1:64:d8:1b:57:1e:51:23:44:a2:d2:89:94:3a:
                    16:a9:01:fe:5c:17:9c:c3:1d:71:90:26:c0:01:7d:
                    1f:72:32:7b:b6:3f:be:3a:88:4d:a0:97:75:3c:c9:
                    47:98:11:4b:c2:27:d8:ba:f0:60:be:ee:6e:11:db:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8D:0D:49:C9:3E:F9:E9:92:D8:D6:1B:25:6D:5A:3B:38:37:76:EF
            X509v3 Authority Key Identifier:
                keyid:23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38362e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:11:42:3a:72:f1:7a:6f:13:3c:3d:4d:02:df:9f:8a:e3:fb:
         82:10:d2:83:e4:1f:c7:4e:85:4e:27:5a:e3:e3:3a:2b:bc:e9:
         ba:44:2b:34:f2:14:08:b4:67:c0:f6:20:bb:24:28:05:ec:88:
         47:c7:35:9a:1b:c6:22:69:bc:3d:d6:4c:ff:9e:e7:ec:a8:d0:
         d7:71:10:cd:97:40:33:bc:5f:64:aa:84:3a:52:15:6d:e8:c3:
         1a:10:25:0a:95:51:9c:e9:c9:d7:b6:95:a7:5f:fa:e9:04:bc:
         7a:3e:60:63:03:bf:b6:43:7b:12:bf:92:97:a1:d9:c9:16:01:
         00:91:99:7f:07:89:4b:b2:07:e8:0d:62:3f:75:db:29:4b:50:
         0e:c3:2a:a5:48:c4:75:18:26:02:bd:31:f2:f6:a8:a9:51:fe:
         9f:38:40:3e:6d:4c:d1:a8:b7:af:89:16:5a:5a:e3:f0:bb:bf:
         44:c6:4b:77:4c:8a:15:4a:67:34:4a:eb:fd:62:1f:6b:9e:bd:
         fd:0e:ac:2f:d1:f5:65:a5:69:02:2a:c9:77:34:c7:9f:dd:1a:
         f6:85:5e:9d:13:c6:18:e4:00:0d:2b:73:0d:fb:b2:ab:11:9c:
         5b:b4:87:bd:38:3b:3b:cc:42:8a:b0:fc:8b:35:78:ee:33:17:
         bc:36:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:52:00 2025 by rpki-client