Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa
File:                     323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa (raw, json)
Hash identifier:          zsQbNhEsA2MBcRJzGIKX7kD5kKHasqGIUE5X6OuxKRM=
Subject key identifier:   6D:2E:DC:00:E2:F4:39:D6:A3:C8:20:43:F0:E5:F3:E1:7E:17:33:FB
Certificate issuer:       /CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
Certificate serial:       2E9E06E447F129FB326044213B28AF504F6C9221
Authority key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa
Signing time:             Sat 23 Aug 2025 13:03:02 +0000
ROA not before:           Sat 23 Aug 2025 12:58:02 +0000
ROA not after:            Sat 22 Aug 2026 13:03:02 +0000
asID:                     52700
IP address blocks:        2804:110c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9e:06:e4:47:f1:29:fb:32:60:44:21:3b:28:af:50:4f:6c:92:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
        Validity
            Not Before: Aug 23 12:58:02 2025 GMT
            Not After : Aug 22 13:03:02 2026 GMT
        Subject: CN=6D2EDC00E2F439D6A3C82043F0E5F3E17E1733FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:a2:cf:a2:ef:17:5f:5e:34:5e:3e:bb:8b:
                    98:10:c6:7a:5d:69:98:44:2e:de:0d:f7:e8:0a:ed:
                    f5:13:1f:0e:95:a8:31:72:cc:50:80:6e:a7:73:45:
                    20:f3:8c:36:00:e7:80:f2:9f:fb:27:29:bb:2a:4b:
                    a0:40:54:4f:1b:d5:99:19:19:b8:78:f3:16:4b:23:
                    d3:6e:d7:1e:d6:0c:e2:c4:75:c3:ac:56:6c:b1:06:
                    a5:66:fc:a2:28:d6:bc:c4:62:a2:ff:dd:09:96:30:
                    89:a6:2b:7f:b0:f3:06:c7:55:2a:54:1a:8f:0e:8c:
                    f0:cc:93:29:1c:3f:81:ed:67:b6:33:71:00:8c:19:
                    0a:38:ee:47:62:b1:36:28:27:53:b4:ab:83:2b:f4:
                    f3:af:ae:95:3b:1d:47:d1:46:c2:20:53:48:31:cb:
                    bb:f8:18:a9:0a:20:d1:56:37:cb:ce:21:a5:09:0d:
                    2e:77:06:d6:8a:32:2e:5d:99:f9:61:23:aa:ee:dd:
                    97:35:3d:4a:a2:ee:14:46:95:74:d4:39:a7:e5:c9:
                    33:e5:fb:09:67:a8:75:fe:32:26:ee:84:9d:bc:7d:
                    d5:2d:77:ff:83:d5:5d:5c:f7:17:ae:a4:4d:92:48:
                    9a:80:d9:e2:6c:6a:bb:15:3f:f8:2f:9e:20:c0:04:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2E:DC:00:E2:F4:39:D6:A3:C8:20:43:F0:E5:F3:E1:7E:17:33:FB
            X509v3 Authority Key Identifier:
                keyid:23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a383030303a3a2f33332d3333203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:110c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:54:ef:b2:74:f9:ca:ba:50:49:ca:c6:b5:4f:4f:12:0a:
         80:d9:3a:be:f8:cd:dc:bf:aa:64:07:97:44:f6:51:a4:82:52:
         cc:e5:72:4f:73:19:e5:ae:0c:eb:0e:07:bc:8e:e9:a8:6d:92:
         f8:de:71:79:ea:40:d6:f2:35:9f:fb:d2:0d:38:65:79:0c:ad:
         e1:f7:40:1b:f3:06:46:ca:90:3c:23:58:1b:aa:be:be:e6:19:
         70:86:6b:3b:30:25:4e:25:1b:ab:40:2d:fd:39:63:f1:7b:53:
         b8:ea:83:1f:61:e2:38:a9:43:e2:dc:56:c4:ff:1a:43:60:52:
         12:ab:f2:fb:ce:9c:c6:71:6b:3b:49:ef:3d:63:3f:fc:15:30:
         c8:8f:f4:83:a9:84:03:5f:ef:91:0c:8d:49:94:23:01:e2:b8:
         ab:4b:a9:87:33:38:5f:3b:b0:29:03:c3:b9:64:10:a5:08:a5:
         f4:2c:2a:fd:28:37:d0:34:a6:4d:11:2a:ec:c9:ca:5f:0d:21:
         ce:9d:d1:07:eb:b3:92:10:72:c9:1c:f6:e9:8d:71:c9:72:33:
         20:53:75:a8:95:de:37:67:c9:ff:a7:34:16:b5:5e:97:44:cc:
         fd:eb:e3:98:9f:57:a2:81:44:11:7c:6d:a9:6f:48:d8:31:fc:
         93:2f:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:07:13 2025 by rpki-client