Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e32342e302f32322d3232203d3e203233303734.roa
File:                     3136342e38352e32342e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier:          AD8Zz+FA2K2/FjqszVCacsh6faCg+G3qH5QZhJdQy9c=
Subject key identifier:   53:C6:A4:AC:CF:85:82:B1:72:F3:70:EF:23:A6:6B:0A:B3:19:B5:B4
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       2414277E631C3E33AC7F82FD2A35C6F811E17A0D
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e32342e302f32322d3232203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 19:11:36 +0000
ROA not before:           Tue 04 Aug 2026 19:06:36 +0000
ROA not after:            Tue 03 Aug 2027 19:11:36 +0000
asID:                     23074
IP address blocks:        164.85.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:27:7e:63:1c:3e:33:ac:7f:82:fd:2a:35:c6:f8:11:e1:7a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 19:06:36 2026 GMT
            Not After : Aug  3 19:11:36 2027 GMT
        Subject: CN=53C6A4ACCF8582B172F370EF23A66B0AB319B5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:32:7e:77:cd:24:09:23:81:a9:de:d7:1f:42:
                    8a:00:1f:fb:d4:2f:57:fe:93:a4:9b:85:8e:92:2d:
                    c8:47:56:b4:03:af:f5:96:a7:dc:91:e3:9a:8c:f1:
                    7b:7c:36:31:c5:0e:c1:c2:23:db:07:a5:14:ac:b1:
                    06:db:f5:6c:ee:f9:99:8d:41:3b:24:ec:ce:5a:8e:
                    d1:a6:7c:ae:2c:23:67:84:e9:fa:70:b6:bb:25:20:
                    4f:9b:69:2c:de:5b:9a:13:b7:5c:ca:ce:c5:f3:d7:
                    ad:5e:fa:64:3a:7b:10:84:e8:62:8f:4c:99:e8:51:
                    23:8b:9b:74:4d:ef:db:40:ff:70:c7:70:9a:32:3e:
                    54:1e:77:99:7b:96:89:aa:c0:3a:72:2a:42:97:63:
                    30:06:88:7b:f6:ae:55:3a:23:8d:99:fa:b2:07:d8:
                    f6:5f:79:cf:f8:4d:bf:c9:99:79:1a:94:27:d4:e0:
                    5d:79:92:44:01:8b:6c:ff:45:9e:bb:fd:0b:1a:ed:
                    ab:38:07:87:ea:81:68:8c:0e:01:35:50:e1:27:f8:
                    bf:ff:b4:9c:61:98:46:42:52:e8:98:eb:57:f9:62:
                    4b:20:ae:79:ad:98:c0:71:6c:3a:63:d3:4d:6a:76:
                    57:98:1a:2a:37:e0:fc:86:da:61:2f:0a:38:de:65:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:A4:AC:CF:85:82:B1:72:F3:70:EF:23:A6:6B:0A:B3:19:B5:B4
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e32342e302f32322d3232203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:94:38:ab:44:56:d9:6e:db:cd:46:ab:f0:57:6d:c9:a0:b9:
         b4:b6:43:2b:91:7f:19:43:6d:0e:f6:f8:b8:88:ee:cd:ee:a0:
         9d:76:8a:7c:e5:1d:6c:e2:2a:7e:58:21:cd:5b:d2:1d:e4:19:
         46:d8:65:ef:d0:d9:05:98:6a:6b:3b:d7:67:ae:69:23:b6:b1:
         ab:d1:de:bc:d3:12:6f:a8:23:88:2e:4c:0d:44:d0:7d:75:7a:
         dc:e6:ab:2f:de:db:b5:66:9c:53:64:ab:e7:3d:5f:04:0c:4f:
         ac:85:ff:e6:e4:23:5d:66:9f:0b:c6:c9:ee:af:a8:2d:4d:bb:
         bc:27:33:5c:5d:55:4e:63:60:25:05:1b:5f:a0:e7:fb:82:7f:
         a2:dc:87:fb:ca:62:f9:8b:1a:9d:9f:01:14:13:fb:4a:92:09:
         3a:14:77:1d:05:fc:51:bd:f4:2f:57:5b:db:cf:21:eb:f3:66:
         49:71:47:56:8a:8c:18:30:60:40:b0:40:4c:ef:45:1e:20:fe:
         3d:85:6a:65:8e:1b:fb:da:8c:be:b8:0d:9a:58:b1:25:b9:76:
         ff:d0:b1:d1:4a:ee:b6:f0:78:31:3e:e7:73:c6:87:3d:5a:80:
         0a:fd:69:e9:73:99:5c:bb:8c:a8:7f:d2:17:63:88:85:b3:5b:
         7a:d1:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:47:59 2026 by rpki-client