Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e34362e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          Xi1KSNZOhrWUni6SrG87DnDVl5EeImZ3WSMp/o92XXM=
Subject key identifier:   68:D2:2C:6F:09:DF:4E:31:C3:D5:7E:FD:17:E2:AD:C3:CF:90:93:75
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       27CE864DA1F0BEC02CACDF4383BD7E55AA1FDF34
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 18:11:34 +0000
ROA not before:           Tue 04 Aug 2026 18:06:34 +0000
ROA not after:            Tue 03 Aug 2027 18:11:34 +0000
asID:                     23074
IP address blocks:        164.85.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ce:86:4d:a1:f0:be:c0:2c:ac:df:43:83:bd:7e:55:aa:1f:df:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 18:06:34 2026 GMT
            Not After : Aug  3 18:11:34 2027 GMT
        Subject: CN=68D22C6F09DF4E31C3D57EFD17E2ADC3CF909375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:b7:eb:23:57:68:bf:86:6b:e5:a5:6f:67:
                    2c:aa:4b:30:6e:fc:47:4f:50:e1:13:a2:db:9c:16:
                    d7:99:82:36:46:38:38:0b:a4:6c:ad:81:30:6e:b7:
                    1f:51:92:54:f3:8b:0e:3b:3f:6e:83:a4:b5:dd:ad:
                    22:c9:e5:44:96:d1:50:3c:d1:52:a5:24:34:8b:45:
                    50:2e:39:0e:0f:7f:ce:5a:ff:7b:ac:c0:c2:05:d3:
                    24:83:23:3e:95:c7:e6:f2:12:2b:2f:5e:21:c2:64:
                    fb:ef:86:c2:79:19:66:b9:b0:f2:cd:5f:83:6a:52:
                    e8:c5:ce:27:2d:bc:d4:ea:c9:0d:f2:bb:ce:ee:e1:
                    96:e0:5a:3e:18:72:67:41:e3:06:fd:76:aa:25:c1:
                    dc:0b:33:3d:38:9e:ff:3f:e3:74:6a:25:f4:d3:e0:
                    db:71:dc:5c:9f:9e:1a:84:58:ae:5d:b6:15:a4:56:
                    e9:86:cd:5c:f3:9e:63:b5:84:41:f7:6e:32:e5:0b:
                    64:a6:dd:30:d3:e6:ae:dc:83:75:2a:78:54:b1:6a:
                    11:7a:4d:dd:e3:72:5b:bc:e7:ad:d9:8d:6c:27:c2:
                    3d:3f:05:e3:08:6a:f4:98:98:0b:a4:b9:b3:ce:64:
                    8d:23:65:c0:98:e4:1a:b6:ee:33:98:31:f5:59:21:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D2:2C:6F:09:DF:4E:31:C3:D5:7E:FD:17:E2:AD:C3:CF:90:93:75
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:e3:1e:fe:f9:3b:2e:bb:69:08:20:df:98:4f:ed:1d:cd:53:
         5d:62:49:39:e8:e4:0f:61:b4:3e:fb:e5:20:05:47:91:b4:5d:
         68:e1:a6:62:05:31:73:ea:c5:dd:4d:95:38:6f:2e:86:48:a5:
         b6:fb:a6:80:44:6e:b6:a2:7a:b3:26:dd:36:f8:f4:79:09:b1:
         c8:27:7d:27:ca:19:93:df:47:3b:44:63:5d:a8:8f:36:30:03:
         ac:f6:d1:f1:28:38:82:c7:7f:a6:13:be:d7:21:2e:e2:50:10:
         34:93:da:75:38:11:91:9b:0c:aa:cd:fe:28:a8:5e:d1:20:51:
         5d:e8:c5:c7:21:2c:73:67:e4:dc:c8:d3:ff:8c:08:9f:41:dc:
         23:0c:24:18:6a:45:b6:50:c1:12:73:9c:4a:61:89:49:51:3e:
         f8:c5:ad:9f:05:c2:9e:f3:49:e4:44:12:36:bb:04:5b:2f:b7:
         25:a5:97:91:0e:92:f6:de:26:89:a8:76:7c:38:da:65:db:6a:
         2b:4d:ea:ff:1d:ab:8c:ea:f3:fd:65:9e:b8:72:98:aa:d0:ef:
         b0:dc:af:3a:aa:d1:5d:ea:19:8a:03:43:48:9b:94:cf:4e:38:
         ea:12:4e:72:3a:29:e9:6c:54:f1:38:c7:2a:fa:a0:eb:3d:53:
         b5:8e:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:36 2026 by rpki-client