Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31362e302f32322d3232203d3e203233303734.roa
File:                     3136342e38352e31362e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier:          kRwLUgMr8CZnI5tVuhzPVxdbvvEUnbHi+Vo1jqRTx78=
Subject key identifier:   21:9C:14:C4:7C:13:2B:A5:A6:7D:1E:48:4D:D8:4D:13:F5:DE:99:C3
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       6522C13E31F8CE00E15C5A6858FA33E5189167D5
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31362e302f32322d3232203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 19:00:20 +0000
ROA not before:           Tue 02 Sep 2025 18:55:20 +0000
ROA not after:            Tue 01 Sep 2026 19:00:20 +0000
asID:                     23074
IP address blocks:        164.85.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:22:c1:3e:31:f8:ce:00:e1:5c:5a:68:58:fa:33:e5:18:91:67:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:55:20 2025 GMT
            Not After : Sep  1 19:00:20 2026 GMT
        Subject: CN=219C14C47C132BA5A67D1E484DD84D13F5DE99C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:b7:2e:ed:33:fe:0b:8e:16:8e:e4:0c:e0:
                    ed:fa:2d:6e:a8:23:d6:aa:06:89:80:b8:24:f6:f1:
                    66:2e:38:48:a2:4f:c5:82:e3:ec:a7:4b:ee:7c:c2:
                    1c:01:ac:73:b5:2f:b3:b5:cd:4a:57:78:25:f3:70:
                    a8:af:cb:22:05:9d:fe:bc:9a:39:8f:d4:f9:32:4f:
                    b5:ad:e9:49:dd:1e:d8:b8:36:4d:00:b4:b0:1f:e6:
                    54:92:0a:cb:00:74:e8:78:01:5b:84:17:5c:a4:66:
                    f2:4e:56:69:ed:9c:62:cf:dc:74:57:f8:31:de:db:
                    4f:d4:a6:9a:7f:36:a0:76:b8:9e:25:3b:3c:e4:70:
                    d7:da:5c:ed:53:de:99:d4:cb:3e:8f:d6:cd:09:ca:
                    53:d8:b0:2f:b8:dd:49:16:6b:97:4b:d3:0e:2c:ea:
                    65:6d:7d:ca:72:eb:aa:1a:b4:04:46:82:9f:78:75:
                    22:24:ca:bc:26:0a:ac:f3:70:87:1b:e1:93:1c:fc:
                    ea:99:c3:90:78:4a:b4:d6:23:53:d9:51:6a:b9:77:
                    db:90:f1:06:d3:8d:57:3e:9b:30:cc:c9:dd:ad:c0:
                    47:97:66:75:cb:00:15:bc:c2:42:f6:6b:fd:9e:2b:
                    7b:86:1a:c3:55:2c:60:0d:48:2c:9c:41:f8:bd:eb:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9C:14:C4:7C:13:2B:A5:A6:7D:1E:48:4D:D8:4D:13:F5:DE:99:C3
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31362e302f32322d3232203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:37:8d:65:15:b3:74:6f:ae:22:fa:5c:cc:6a:ee:9a:1f:cf:
         e5:d2:02:17:86:dc:15:43:ce:4b:9b:54:68:e6:17:85:f1:88:
         49:9d:3b:a6:0f:c9:6c:21:b6:66:98:b6:3a:1d:7b:2a:d5:e4:
         6e:f7:00:e6:ab:4c:46:dc:af:3c:6d:78:25:74:02:7c:4d:7d:
         a4:bd:2b:c7:cb:82:2d:54:c4:19:c4:99:e1:be:9d:05:d3:09:
         27:d3:0d:b1:ba:7b:52:45:14:61:be:00:c5:87:a1:88:7f:e1:
         fb:2f:c1:38:4d:0b:a6:3f:08:a7:8e:eb:73:69:b7:27:93:49:
         fd:2c:11:02:d8:80:b2:71:50:6c:22:76:1d:25:14:74:0f:ff:
         65:e3:f8:b7:d1:98:6d:7c:36:ab:b5:f6:04:46:f0:e8:33:62:
         a1:86:f6:0c:79:84:d0:9a:8b:31:9f:75:61:74:38:d5:cf:cd:
         40:db:ef:35:4e:aa:79:79:08:80:5b:45:25:80:04:82:3c:aa:
         97:54:20:ee:29:67:28:87:55:69:52:f7:40:62:2d:80:04:31:
         09:c9:a6:f6:7f:71:8f:a7:00:ee:6b:f0:47:3e:af:dd:18:a9:
         34:18:19:61:35:9d:d2:7d:86:36:ee:bc:e8:63:7d:61:50:ba:
         3d:58:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:05:31 2025 by rpki-client