Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa
File:                     3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          N6QnEbH+R5FQ/47yXEOVIXnS4Y6rYv42kd7tW3S7Yks=
Subject key identifier:   1C:22:71:63:EE:60:69:83:1D:E8:41:12:CF:1D:6A:CF:00:48:92:8B
Certificate issuer:       /CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
Certificate serial:       026B100BB732874164FD5221053D381D40F2562D
Authority key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa
Signing time:             Sat 23 Aug 2025 13:03:04 +0000
ROA not before:           Sat 23 Aug 2025 12:58:04 +0000
ROA not after:            Sat 22 Aug 2026 13:03:04 +0000
asID:                     52700
IP address blocks:        191.240.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6b:10:0b:b7:32:87:41:64:fd:52:21:05:3d:38:1d:40:f2:56:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
        Validity
            Not Before: Aug 23 12:58:04 2025 GMT
            Not After : Aug 22 13:03:04 2026 GMT
        Subject: CN=1C227163EE6069831DE84112CF1D6ACF0048928B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:7e:45:bd:27:6d:e1:f8:21:dc:ae:43:46:
                    f2:81:54:3b:77:18:b2:61:67:c7:dd:bb:f1:8d:b1:
                    65:6a:29:09:4a:a1:a1:bf:30:4e:15:03:5b:00:a5:
                    39:3a:6a:49:bc:d2:c7:f6:5a:20:73:ea:85:25:5b:
                    bc:83:9c:6e:22:62:e9:d2:bf:fa:cc:5e:16:2c:d0:
                    6e:70:fa:77:ec:52:4e:f6:b7:dd:ff:81:f8:a2:c0:
                    e4:02:aa:4d:60:f6:6f:8a:22:9c:e6:12:64:53:9d:
                    42:23:b1:16:fc:7e:a9:15:a4:2f:b9:02:f5:20:f0:
                    d6:47:28:e2:e3:f1:36:ad:61:4b:b1:9c:51:4d:1c:
                    72:c1:21:76:fd:f0:ac:a9:9d:af:9e:af:59:97:d1:
                    78:5f:6d:1e:da:44:cd:fc:fb:08:8d:9b:bb:89:d6:
                    98:41:78:5e:21:38:f0:ca:ba:dd:cf:25:6f:7c:a0:
                    03:f5:ca:bf:dc:a1:b3:c4:eb:01:08:0e:8a:44:e1:
                    10:88:44:62:9b:8a:2e:a2:cc:ba:ab:18:97:25:a4:
                    38:1a:36:d3:a2:3c:a0:50:b6:b4:05:55:02:61:3f:
                    a7:e2:79:2c:f1:cb:32:1e:96:a5:5a:92:20:58:14:
                    04:20:92:e4:26:06:cb:18:74:92:b7:79:a1:68:3b:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:71:63:EE:60:69:83:1D:E8:41:12:CF:1D:6A:CF:00:48:92:8B
            X509v3 Authority Key Identifier:
                keyid:23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:2e:8c:d8:aa:1f:09:2a:66:0e:cc:c8:6a:ae:1a:d8:e5:
         e9:dd:45:b9:b2:25:e8:fa:75:f6:88:87:1e:b2:dc:bd:03:c0:
         62:63:e1:f5:2d:d8:e9:18:8b:70:57:11:a6:7b:7d:5e:2f:66:
         e3:f8:26:47:0a:ed:57:86:22:cc:e2:82:7c:81:49:cc:66:df:
         b9:c1:8f:b3:1a:22:ac:c9:89:b8:5b:bc:28:20:b5:1c:a5:1d:
         77:58:d7:cb:e1:cf:de:6f:68:98:f0:9c:09:a1:b0:98:91:ca:
         18:8b:f9:b9:39:d7:c2:8e:10:e5:8b:99:53:b6:6a:dc:a4:26:
         31:86:99:f0:e1:cd:3f:e8:e7:7a:3d:79:6e:81:a4:af:4b:ba:
         3f:26:cc:0f:2a:25:1c:a4:cb:fc:3c:6e:18:6d:c0:b5:17:8e:
         19:2e:a8:84:52:1a:3d:5f:0b:43:11:d8:f3:f0:6c:7c:dc:1d:
         66:ea:01:f9:d9:b0:84:d5:73:d9:0f:ab:17:49:ef:59:19:23:
         8c:0d:c8:e6:51:c0:4a:1d:3e:f8:a4:0d:aa:92:d2:d4:72:d6:
         40:cc:03:bf:02:4b:36:1d:fe:2b:82:6e:af:bc:e7:17:b4:4b:
         ef:82:30:ce:2e:22:eb:b7:cf:8b:08:6c:98:ca:18:20:c0:e7:
         7f:76:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:07:48 2025 by rpki-client