Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e352e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e352e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          rIX4Ksz6bLWuiPFgBCY4o8RLLfyURDvXjupwde8zP0k=
Subject key identifier:   C5:DA:1F:8E:40:80:22:0A:36:DB:9E:CB:52:7D:56:83:37:5A:43:89
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       073BC6888F68B56D1175590778A1DB0F3F4B452A
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e352e302f32342d3234203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 18:11:34 +0000
ROA not before:           Tue 04 Aug 2026 18:06:34 +0000
ROA not after:            Tue 03 Aug 2027 18:11:34 +0000
asID:                     23074
IP address blocks:        164.85.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3b:c6:88:8f:68:b5:6d:11:75:59:07:78:a1:db:0f:3f:4b:45:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 18:06:34 2026 GMT
            Not After : Aug  3 18:11:34 2027 GMT
        Subject: CN=C5DA1F8E4080220A36DB9ECB527D5683375A4389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:3d:12:70:5a:96:a9:3f:bf:6d:fa:e9:5c:
                    06:2a:53:eb:92:aa:ae:01:3e:67:fa:33:ef:6a:01:
                    6c:4c:12:8c:97:cb:2a:72:45:97:be:fe:cb:06:12:
                    fe:29:f9:bc:96:f5:fe:f8:06:3b:9b:4f:8c:d5:e5:
                    cb:24:58:00:9a:21:ea:c7:65:6b:3c:1d:1b:0e:97:
                    ba:d5:a8:28:22:33:64:2f:37:a8:76:b7:4d:95:69:
                    0e:fa:06:43:82:17:f9:97:92:0a:b9:c2:96:70:b0:
                    d2:99:d9:38:14:10:f3:56:8e:da:9b:26:73:fa:6e:
                    33:b4:04:a1:a9:30:48:8c:f3:b0:4a:7b:cc:22:21:
                    40:f7:c5:f4:b8:72:86:90:78:87:81:76:49:a1:1d:
                    f7:c3:9f:da:da:cb:da:74:2f:73:5a:65:f0:5f:8d:
                    a5:3f:51:c9:a5:13:b8:64:78:7e:7b:4b:97:5b:fd:
                    78:6f:f5:73:22:c3:c7:c7:38:5e:c8:09:4f:26:c4:
                    1a:23:a7:3a:30:a3:ed:9d:40:05:8d:43:6e:49:f5:
                    06:1b:1d:d9:0d:3f:c5:a6:30:b5:99:00:e6:d5:cd:
                    88:2d:8a:79:fe:86:10:10:ce:57:10:48:08:9c:41:
                    e8:d4:3a:6f:7b:8e:f1:b4:cd:92:b2:45:cf:77:2e:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:1F:8E:40:80:22:0A:36:DB:9E:CB:52:7D:56:83:37:5A:43:89
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e352e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:ce:64:8f:70:07:d4:ef:1e:3c:f2:18:2c:71:6f:44:76:
         76:f8:f7:37:bb:5c:d2:3d:f4:84:82:86:65:68:00:8e:69:7a:
         e3:a2:db:fb:ea:74:55:15:fb:d2:a7:57:9e:75:03:c3:28:ab:
         cd:e5:a5:48:06:70:11:9e:31:85:8a:65:6d:5e:9e:a2:16:05:
         b8:9e:60:72:0c:47:90:97:fc:95:63:ef:0a:f2:a7:bc:00:01:
         30:4a:d8:bb:cf:d4:d4:73:b2:ae:65:ce:50:ca:b5:5e:2c:b8:
         25:99:54:7e:0d:37:27:d3:ce:cc:f2:bf:40:40:0b:ed:02:cb:
         35:48:8c:5e:a2:d6:13:be:0c:bb:99:49:8c:6d:fa:2d:ab:ed:
         f1:5f:67:b6:df:06:4c:eb:bd:62:94:50:6b:a1:cd:6f:00:24:
         85:8e:59:9f:0e:43:ab:39:1c:9e:fe:4c:df:80:6a:3a:74:70:
         d0:ae:42:34:6b:9a:19:fa:1d:e9:32:9d:7a:9b:44:b3:4e:55:
         38:b6:42:09:07:02:a6:5f:07:ea:00:9d:6c:c6:96:8c:98:10:
         df:12:a2:a1:7c:b6:c3:01:11:fd:03:8b:1f:11:8c:95:6a:54:
         9f:5a:fb:df:36:15:93:b3:f5:4e:56:1c:56:f3:22:84:7c:00:
         a5:aa:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:50:32 2026 by rpki-client