Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f31362d3136203d3e203233303734.roa
File:                     3136342e38352e302e302f31362d3136203d3e203233303734.roa (raw, json)
Hash identifier:          WEqZ3DbnVz7uOzfrdh3Fi6rIcSOFd+yvxvUkh2lsCUw=
Subject key identifier:   1A:69:65:E3:66:B6:56:9E:F7:78:61:72:A9:57:9B:CE:5D:19:6D:1B
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       10B86A7B50F4C6A0BA14AAEFCD8A9D5B033AF285
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f31362d3136203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:59:01 +0000
ROA not before:           Tue 02 Sep 2025 18:54:01 +0000
ROA not after:            Tue 01 Sep 2026 18:59:01 +0000
asID:                     23074
IP address blocks:        164.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b8:6a:7b:50:f4:c6:a0:ba:14:aa:ef:cd:8a:9d:5b:03:3a:f2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:54:01 2025 GMT
            Not After : Sep  1 18:59:01 2026 GMT
        Subject: CN=1A6965E366B6569EF7786172A9579BCE5D196D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:f0:3e:69:b1:f4:07:85:03:78:c1:41:b0:
                    c4:f9:7e:f9:f0:23:8e:5c:c7:92:36:09:a0:f7:99:
                    cb:d7:06:ea:79:76:57:93:27:a3:21:c2:08:82:40:
                    df:cb:92:b5:53:3f:37:c3:46:35:a7:8c:a4:4c:f5:
                    6a:45:a6:c1:cc:14:5f:1c:7e:71:7f:e3:08:1d:c1:
                    d9:0c:6d:16:d2:d8:ba:a5:7f:b4:9d:f0:00:87:bd:
                    70:e5:fc:a3:af:a7:ba:fd:6e:5f:2b:99:4e:39:96:
                    f7:b6:ba:f6:0a:48:74:d9:fd:5d:e7:88:db:9d:5a:
                    23:ea:21:0b:e4:64:b1:8b:3b:6f:e5:e0:ef:7a:a6:
                    87:08:9e:fd:cb:1d:f0:cf:3b:8a:ff:b4:72:e1:e8:
                    81:6c:4f:29:e5:d9:94:8f:40:70:81:fd:8c:68:64:
                    c7:44:7b:cc:65:22:1b:ce:90:67:69:20:5a:db:e6:
                    e1:47:60:17:84:51:37:cf:f6:5c:d7:64:1a:12:9b:
                    8b:55:73:3a:db:fc:86:b9:2d:2b:77:53:a9:e3:f3:
                    ef:9f:6a:65:71:2a:8e:b2:17:c6:83:a4:8c:7f:29:
                    45:ec:e2:cb:29:56:87:3d:be:05:c5:ec:b0:05:d5:
                    8a:48:d6:74:50:ae:9d:49:bc:6c:ed:f8:17:07:38:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:69:65:E3:66:B6:56:9E:F7:78:61:72:A9:57:9B:CE:5D:19:6D:1B
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f31362d3136203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:5e:95:e1:0b:d7:d0:8f:4b:98:1c:03:f6:af:4d:49:ec:
         a5:e0:d8:5d:c2:4e:bf:33:c7:1e:55:a3:9f:76:c9:3e:55:e0:
         03:1b:79:c1:a2:2c:85:60:d6:68:04:fc:a3:94:c1:af:41:ae:
         0a:cc:7c:9a:31:0e:68:7f:89:fb:4f:a4:70:2d:af:13:9a:5a:
         94:5b:e0:67:28:fa:04:3f:a4:ee:de:bb:c0:c1:8e:f2:3c:df:
         08:95:76:e3:36:55:e6:2e:0e:57:77:28:60:10:85:d1:89:1f:
         c1:c4:45:e0:12:dc:25:ad:76:75:f7:5c:1c:fd:df:1f:69:92:
         b8:8b:fc:c6:75:ca:18:06:13:d6:1c:54:69:b9:cf:ae:9c:3b:
         0a:58:7b:cf:e7:06:d8:fe:ce:94:c3:9f:da:27:54:39:f4:fa:
         64:be:16:18:25:11:88:cd:9c:1a:b7:c8:41:ea:6c:5c:3d:7b:
         60:12:ec:45:b3:d1:f7:50:22:35:47:78:28:8b:4b:4a:69:67:
         67:b3:de:cd:84:a8:2d:34:13:d3:bf:70:83:e9:78:c0:81:26:
         9e:02:7e:95:cd:b4:cc:b0:aa:12:21:99:e0:8a:d8:12:da:90:
         0f:e5:1f:29:ef:e1:3e:dc:6a:fa:3a:bd:f5:6a:16:d4:e5:d3:
         99:3d:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:46:27 2025 by rpki-client