Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a3a2f33332d3333203d3e203532373030.roa
File:                     323830343a313130633a3a2f33332d3333203d3e203532373030.roa (raw, json)
Hash identifier:          mmV7GFSq3gySCXfWiizSlGNhf0aDIyNl4boHYym3qfQ=
Subject key identifier:   CC:EF:51:8C:4B:26:DA:82:03:32:4F:AA:EC:BF:68:ED:79:AC:E2:CE
Certificate issuer:       /CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
Certificate serial:       637307C25EE86D46E33EBB1F6F16D3F3C98569DF
Authority key identifier: 23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a3a2f33332d3333203d3e203532373030.roa
Signing time:             Sat 23 Aug 2025 13:03:04 +0000
ROA not before:           Sat 23 Aug 2025 12:58:04 +0000
ROA not after:            Sat 22 Aug 2026 13:03:04 +0000
asID:                     52700
IP address blocks:        2804:110c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:73:07:c2:5e:e8:6d:46:e3:3e:bb:1f:6f:16:d3:f3:c9:85:69:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF
        Validity
            Not Before: Aug 23 12:58:04 2025 GMT
            Not After : Aug 22 13:03:04 2026 GMT
        Subject: CN=CCEF518C4B26DA8203324FAAECBF68ED79ACE2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:3e:15:a5:e8:e3:b7:eb:5d:9b:fc:5a:b4:
                    9e:f8:e9:39:91:ac:38:92:30:0c:db:64:3b:de:17:
                    b0:0c:e9:6d:d2:88:c9:4d:ce:39:a5:07:97:c6:8a:
                    51:35:d8:73:12:ce:70:17:c1:b2:5c:86:56:12:64:
                    8b:6b:a3:bf:5e:45:82:ed:4f:af:20:15:d4:3f:6e:
                    0d:6a:e6:47:a3:cf:0a:ea:c6:b5:1b:ac:0d:13:0d:
                    b8:51:d4:b6:02:33:0e:1a:c6:46:7a:cd:fe:5e:56:
                    57:f9:e6:b1:32:6a:6c:b2:d6:12:6d:dd:4b:35:25:
                    86:47:10:43:e9:1f:0e:d2:c4:d6:b5:6e:c5:d0:bd:
                    48:ad:c3:49:3e:38:f9:c5:dc:d2:3a:9e:fd:cb:d2:
                    7f:df:9f:4e:e5:e7:41:69:89:b2:15:47:2b:78:b4:
                    6d:23:bd:cb:9d:7b:0a:16:91:58:71:b2:6a:42:79:
                    6f:14:29:67:ba:2a:c5:c5:d7:77:37:2a:e5:e7:01:
                    a5:0e:31:84:a8:55:84:08:fe:24:3c:24:a7:2f:98:
                    af:4b:39:d7:e3:73:60:6e:96:22:fe:e0:7a:2f:a3:
                    ab:46:e3:5e:2b:bf:49:f5:d2:ee:aa:fc:0b:96:67:
                    9c:5f:2c:3b:dc:bc:8e:d1:96:0a:87:f5:fc:c8:7f:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EF:51:8C:4B:26:DA:82:03:32:4F:AA:EC:BF:68:ED:79:AC:E2:CE
            X509v3 Authority Key Identifier:
                keyid:23:14:FD:91:7B:0F:2B:87:53:A2:D4:CC:8D:7F:F8:7B:D1:D0:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2314FD917B0F2B8753A2D4CC8D7FF87BD1D08DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/323830343a313130633a3a2f33332d3333203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:110c::/33

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:2d:a4:3f:d8:c8:bf:6f:bb:b6:01:2d:ee:b7:b1:c6:a1:
         13:97:26:53:c0:8c:c0:f9:b7:5b:ed:32:79:92:88:af:2d:03:
         11:4a:73:4d:f7:b9:d0:c0:41:c0:7e:e1:52:8b:1c:2f:39:17:
         af:60:c3:c1:de:ef:0f:6b:db:8a:a1:e4:cc:0d:63:f8:75:52:
         f6:8e:1b:37:32:d7:f8:a3:b6:56:20:b9:24:e5:e3:fd:f6:f8:
         9d:48:5d:50:4e:d2:f4:38:ae:4a:5d:17:7e:ec:41:70:98:5d:
         17:4d:03:89:04:7e:a1:0c:7c:40:e8:51:09:8f:db:38:26:cd:
         29:53:e1:6f:13:f7:5a:8a:24:a7:ca:6d:6d:a9:fe:bc:2d:f7:
         36:ac:af:29:0c:9d:54:43:19:e4:da:72:ba:3c:48:4c:04:6f:
         7c:8a:31:78:9d:75:3f:f8:98:a8:f6:f8:66:e8:66:1e:00:e9:
         d9:eb:76:ef:85:e9:b3:7a:e4:a2:31:d8:6a:ee:a8:2d:45:de:
         1f:bb:70:d7:81:a3:24:06:ba:9d:67:90:a6:63:8c:80:9e:67:
         ee:ed:c2:a8:26:ff:a1:be:de:ce:7f:5a:87:87:68:1c:24:3f:
         6b:57:03:ea:5b:eb:9b:9b:2d:0a:90:06:78:a4:2c:67:70:ea:
         69:fb:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:18:46 2025 by rpki-client