Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e34362e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          aqNMCworP82NuBWxNiVvu4ogygzd7pz3/RHNsz0HfXQ=
Subject key identifier:   88:84:58:FF:5B:DE:13:11:D0:02:31:06:46:9B:72:2C:60:41:7C:8E
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       0FF237A69801574C4DEC22B4AD242CBBD1E28BAD
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:08:32 +0000
ROA not before:           Tue 02 Sep 2025 18:03:32 +0000
ROA not after:            Tue 01 Sep 2026 18:08:32 +0000
asID:                     23074
IP address blocks:        164.85.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f2:37:a6:98:01:57:4c:4d:ec:22:b4:ad:24:2c:bb:d1:e2:8b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:03:32 2025 GMT
            Not After : Sep  1 18:08:32 2026 GMT
        Subject: CN=888458FF5BDE1311D0023106469B722C60417C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:cf:00:5a:25:a2:04:2d:8d:2f:a2:0e:81:
                    6f:62:c4:40:15:46:76:b5:06:9d:3b:d1:7a:6f:f4:
                    7d:a4:be:78:f2:0a:f2:f2:ca:f0:db:6b:3e:47:5d:
                    23:e7:23:fb:2e:2c:61:43:34:91:e5:f4:9d:12:ab:
                    85:b8:4d:50:0b:66:82:23:99:43:e0:aa:cc:a2:35:
                    62:87:0c:0c:61:c0:5f:ae:c6:15:bb:fa:ca:04:29:
                    40:f1:4b:80:4d:da:3a:a7:69:c6:73:e7:37:3d:b4:
                    d5:f8:9a:8b:51:10:88:cd:e7:33:0e:11:05:88:01:
                    c5:64:d3:3a:23:a0:e6:3f:26:8c:11:9b:97:50:f3:
                    b9:26:80:0b:6e:2a:a3:fe:57:a7:71:c6:2f:da:c1:
                    9b:19:2c:93:9d:1a:ab:83:04:51:73:e5:01:6f:df:
                    5f:b2:f9:e5:20:e6:f2:bb:e8:cf:36:0e:93:69:28:
                    eb:6e:6d:57:0a:bf:14:9d:dd:c1:bb:f6:32:73:d8:
                    71:4a:8d:0d:63:65:ad:b3:f2:9f:ff:34:8f:34:52:
                    4e:d0:f9:c3:98:ef:38:00:ec:88:62:3d:e2:95:ee:
                    93:5c:bf:ce:ab:bd:32:74:3a:af:58:1c:04:3a:e6:
                    6a:5d:0b:cb:60:90:d1:7d:2f:23:bf:44:94:00:e7:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:84:58:FF:5B:DE:13:11:D0:02:31:06:46:9B:72:2C:60:41:7C:8E
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:89:95:2d:d8:29:c4:f6:4b:24:0c:4a:3d:de:dc:85:ae:04:
         0e:69:f8:63:23:27:54:fd:6c:ff:1e:e3:cf:c2:3b:70:d3:63:
         02:02:30:2b:08:b5:51:8f:58:89:bc:f0:e4:37:b4:bc:09:f6:
         92:cc:d5:90:cd:91:57:04:4d:85:0a:a0:55:ce:1b:d1:3b:cf:
         af:dc:a0:bf:ca:73:83:ac:89:3d:c8:7b:03:52:98:f6:ae:9e:
         ac:03:32:86:47:ae:b0:0d:f7:2f:1d:7c:56:76:b7:3c:19:26:
         4f:a6:64:67:95:eb:04:a0:73:ee:be:d0:25:97:e2:74:ac:2b:
         ff:70:1d:60:0f:6a:1b:78:95:77:67:af:35:e1:5a:d5:8e:20:
         ee:d4:e7:7b:a1:8b:2e:72:fd:71:83:17:e0:d4:dc:0b:c0:c9:
         84:27:bf:f9:21:76:2c:c1:97:cc:06:d9:ac:ac:8f:dc:af:ba:
         e6:3f:1c:b1:20:88:85:8f:41:38:2e:65:6a:1a:ea:55:c2:2d:
         68:68:43:ef:a7:21:4c:bd:69:db:4d:e7:00:66:bb:f6:cb:f7:
         43:09:0b:c5:1b:fe:b5:e3:b6:28:75:43:d5:60:03:ea:78:d8:
         75:22:04:6c:7e:60:b3:4a:bd:1f:23:d6:02:4a:d3:9e:3a:d5:
         c3:e3:24:3f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUD/I3ppgBV0xN7CK0rSQsu9Hii60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRkIyNjIyNzU3RkU1RDkxMDdBREMxMTlEODhDODQz
OUE3NDJEOTAeFw0yNTA5MDIxODAzMzJaFw0yNjA5MDExODA4MzJaMDMxMTAvBgNV
BAMTKDg4ODQ1OEZGNUJERTEzMTFEMDAyMzEwNjQ2OUI3MjJDNjA0MTdDOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sc8AWiWiBC2NL6IOgW9ixEAV
Rna1Bp070Xpv9H2kvnjyCvLyyvDbaz5HXSPnI/suLGFDNJHl9J0Sq4W4TVALZoIj
mUPgqsyiNWKHDAxhwF+uxhW7+soEKUDxS4BN2jqnacZz5zc9tNX4motREIjN5zMO
EQWIAcVk0zojoOY/JowRm5dQ87kmgAtuKqP+V6dxxi/awZsZLJOdGquDBFFz5QFv
31+y+eUg5vK76M82DpNpKOtubVcKvxSd3cG79jJz2HFKjQ1jZa2z8p//NI80Uk7Q
+cOY7zgA7IhiPeKV7pNcv86rvTJ0Oq9YHAQ65mpdC8tgkNF9LyO/RJQA5/31AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiIRY/1veExHQAjEGRptyLGBBfI4wHwYDVR0j
BBgwFoAUFx+yYidX/l2RB63BGdiMhDmnQtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC8xNzFGQjI2MjI3NTdGRTVEOTEwN0FEQzExOUQ4OEM4NDM5QTc0MkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MUZCMjYyMjc1N0ZFNUQ5
MTA3QURDMTE5RDg4Qzg0MzlBNzQyRDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzNjM0MmUzODM1MmUzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzMzMw
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAaRVLjANBgkqhkiG9w0BAQsFAAOCAQEACImVLdgpxPZL
JAxKPd7cha4EDmn4YyMnVP1s/x7jz8I7cNNjAgIwKwi1UY9Yibzw5De0vAn2kszV
kM2RVwRNhQqgVc4b0TvPr9ygv8pzg6yJPch7A1KY9q6erAMyhkeusA33Lx18Vna3
PBkmT6ZkZ5XrBKBz7r7QJZfidKwr/3AdYA9qG3iVd2evNeFa1Y4g7tTne6GLLnL9
cYMX4NTcC8DJhCe/+SF2LMGXzAbZrKyP3K+65j8csSCIhY9BOC5lahrqVcItaGhD
76chTL1p203nAGa79sv3QwkLxRv+teO2KHVD1WAD6njYdSIEbH5gs0q9HyPWAkrT
njrVw+MkPw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:15 2025 by rpki-client