Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e342e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e342e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          oDTBsW27+AN7sSqQMbu+MUNsSuIZwf+K2h/mz7UEsa0=
Subject key identifier:   9F:B6:4B:AC:CA:3A:B9:E9:C2:1D:A1:CE:3B:0F:D3:13:67:8C:0E:95
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       494F5029CE67CD3C50D5DEE4F7FEA05145059F17
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e342e302f32342d3234203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:10:06 +0000
ROA not before:           Tue 02 Sep 2025 18:05:06 +0000
ROA not after:            Tue 01 Sep 2026 18:10:06 +0000
asID:                     23074
IP address blocks:        164.85.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4f:50:29:ce:67:cd:3c:50:d5:de:e4:f7:fe:a0:51:45:05:9f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:05:06 2025 GMT
            Not After : Sep  1 18:10:06 2026 GMT
        Subject: CN=9FB64BACCA3AB9E9C21DA1CE3B0FD313678C0E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:76:30:de:fe:4f:29:77:f1:59:8f:bd:33:
                    32:cd:19:da:b0:2d:6b:7e:2d:0f:26:4b:88:c3:f6:
                    9a:35:26:0d:4c:92:6c:5a:47:8c:81:1f:3c:eb:79:
                    90:b5:9c:38:63:7e:91:9d:b7:88:40:41:2d:df:c8:
                    35:6b:c3:ce:18:60:b8:d4:ff:24:4d:34:c2:ba:d4:
                    df:d0:94:f5:41:79:91:d5:08:19:dd:3c:a9:a5:35:
                    ba:db:7e:7a:2d:9f:de:d4:8c:f3:a0:5c:2e:93:6a:
                    52:9c:51:2c:dc:ea:34:7f:58:b7:c0:89:78:52:16:
                    9f:6d:f5:43:7d:ed:5f:3c:db:7a:82:f5:1f:d7:52:
                    ce:5d:36:0f:32:e7:99:80:06:61:a6:88:47:44:58:
                    72:8a:96:c9:99:f2:4b:77:eb:b0:8a:8a:db:54:41:
                    50:14:c0:ce:45:2c:ab:85:6c:99:c9:48:ef:67:72:
                    00:4b:13:b6:c2:16:2d:08:d7:92:7f:b2:a7:17:38:
                    cc:8b:4b:ff:50:49:3a:a5:bf:ef:76:e3:60:f3:0a:
                    bb:20:65:70:80:50:0e:30:46:18:a3:71:94:6e:94:
                    30:29:90:cd:3f:1f:d3:aa:d7:28:d9:7c:f1:14:78:
                    8f:2f:f3:50:f8:60:b8:b0:9b:d1:ff:59:48:2d:20:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:4B:AC:CA:3A:B9:E9:C2:1D:A1:CE:3B:0F:D3:13:67:8C:0E:95
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e342e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9a:41:56:c1:bb:dc:e6:db:b2:57:4e:d0:34:f2:3f:91:38:
         af:b6:40:87:54:ad:db:eb:75:37:2a:80:9d:3a:55:30:a7:aa:
         b9:53:94:45:95:bc:b2:f3:9a:df:a1:95:88:d3:e2:d7:ab:48:
         08:b1:32:7d:cb:66:ae:e8:c1:4e:37:71:c1:1c:f5:68:21:f7:
         70:07:3d:c8:89:45:5e:c5:24:68:54:06:b9:51:1c:c3:b7:1f:
         65:ba:9b:99:27:5b:21:ec:3e:e2:0e:25:6f:43:61:4e:f9:30:
         cb:05:9c:47:8f:6d:9c:b7:8b:4e:f9:be:e4:67:05:2a:d5:bf:
         5f:10:03:96:a5:a3:67:5d:d4:3d:67:48:e4:0b:aa:bc:a6:a0:
         aa:de:8c:6b:79:37:da:14:15:b5:0b:ff:3e:3e:88:22:fd:fe:
         ad:c4:ff:78:64:fa:92:f9:4a:b4:13:84:88:b7:44:3c:b7:8b:
         81:48:c3:a2:66:0e:6e:a0:fb:65:5e:b2:91:d7:14:97:9d:e5:
         da:c9:aa:75:97:50:b8:ce:60:56:a9:2c:e4:38:d8:66:1a:3b:
         af:94:94:00:eb:1a:04:f0:c0:27:3a:de:14:7b:a6:33:61:1d:
         cf:c6:99:04:ea:f2:14:55:cd:31:3c:dd:81:62:25:6e:44:c5:
         73:8c:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:58:06 2025 by rpki-client