Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa
File:                     3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          8MDEQl+yPhZo9TbGxEvJ7Z9q9GZQ/7R0QUKvrOJM0tw=
Subject key identifier:   71:94:8F:8F:C5:8B:B7:AE:75:0B:A5:4D:69:24:70:29:E6:31:BD:56
Certificate issuer:       /CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
Certificate serial:       50CE3B0D85E63E95030D100E0F926C667D12C0AB
Authority key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa
Signing time:             Sat 23 Aug 2025 13:03:04 +0000
ROA not before:           Sat 23 Aug 2025 12:58:04 +0000
ROA not after:            Sat 22 Aug 2026 13:03:04 +0000
asID:                     52700
IP address blocks:        191.240.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ce:3b:0d:85:e6:3e:95:03:0d:10:0e:0f:92:6c:66:7d:12:c0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
        Validity
            Not Before: Aug 23 12:58:04 2025 GMT
            Not After : Aug 22 13:03:04 2026 GMT
        Subject: CN=71948F8FC58BB7AE750BA54D69247029E631BD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:ab:66:cd:38:31:7f:18:21:07:c0:1a:dc:
                    ac:57:27:e8:2c:b3:21:85:d3:d6:59:cc:39:2b:77:
                    6a:48:d9:41:f5:6a:60:32:31:63:b4:8d:a1:b1:10:
                    0f:8b:b5:01:42:db:85:4f:1b:c4:34:e5:b2:ed:07:
                    bf:35:73:29:fe:6d:9d:24:c7:43:b3:54:7a:73:73:
                    55:9e:bd:7d:6d:64:03:91:a1:76:12:d6:30:b7:d2:
                    72:e1:7d:c1:b8:65:ba:dd:7b:2d:fd:54:f0:0d:4e:
                    e5:6c:42:56:e8:48:79:93:cd:cc:dc:04:76:fe:0e:
                    47:4e:41:ee:ab:58:a8:5a:ef:35:b7:f2:57:f5:48:
                    dd:d3:e8:98:bf:53:78:a3:27:60:5d:43:b5:95:54:
                    e4:9a:3e:3f:21:c0:16:cc:b0:b1:a3:40:3c:b8:00:
                    35:31:9f:1b:aa:e2:10:37:65:bd:a8:a6:ab:ea:a7:
                    b2:72:a2:de:4f:53:c4:cf:e9:cf:d4:60:3b:7e:7b:
                    e1:4d:34:5c:4a:e8:cb:10:30:6c:d4:25:a3:51:40:
                    07:34:89:c8:ee:64:e9:af:bd:a4:18:d6:ea:17:96:
                    aa:87:43:f4:1c:d6:b2:86:9e:df:cb:af:07:49:6a:
                    23:f6:c6:60:42:c3:79:b3:c9:9d:41:b0:ac:a2:04:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:94:8F:8F:C5:8B:B7:AE:75:0B:A5:4D:69:24:70:29:E6:31:BD:56
            X509v3 Authority Key Identifier:
                keyid:23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136322e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:b7:d4:d6:37:ea:f3:bd:f3:ea:a6:3a:14:7f:74:c8:d2:d0:
         77:44:ca:36:b5:80:53:20:fb:fe:b1:60:6a:45:25:d3:45:03:
         5d:d2:e8:d9:f1:6a:58:34:30:be:7c:35:ee:7d:4f:46:62:64:
         3a:4d:dd:f9:e4:73:df:b7:e5:71:22:bb:a6:8f:45:d6:11:b2:
         06:33:6a:b6:8f:29:2d:61:9f:49:58:34:5d:8a:d8:31:6e:9e:
         ed:0d:9b:49:db:90:24:64:33:6c:eb:16:d4:45:97:95:a1:55:
         dc:bb:f1:68:53:39:c7:47:ea:72:7b:6f:f7:5a:38:95:78:e5:
         ab:7b:1c:57:01:d7:88:24:49:5a:4d:09:50:77:a9:d9:46:db:
         fe:1a:ee:32:42:8f:82:d2:e2:e6:6d:6e:2d:cb:be:d5:d4:5f:
         de:24:16:7c:55:30:2f:e0:94:24:76:2c:16:70:a0:71:10:bc:
         2a:4f:08:45:5b:5d:07:5d:94:0b:e4:e5:d2:e8:ea:34:eb:50:
         9e:f5:bd:5e:3a:41:10:14:59:c2:99:b0:77:18:ad:cc:05:68:
         b5:ef:88:99:ba:1d:25:fb:f5:dc:ab:1c:05:9a:da:2f:fe:3c:
         12:fd:8a:80:18:51:8d:76:94:31:60:54:2e:22:c8:f2:4a:0c:
         bc:ab:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:07:12 2025 by rpki-client