Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e362e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e362e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          0FiiZNf16nwLgLpBn4jAA6Je2IADUO5nw3BZZDgQ9JY=
Subject key identifier:   90:03:93:78:46:0B:91:8C:E2:BF:B4:77:FE:18:F0:C6:79:85:39:57
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       3B45FE7E4C6D40008F97918458E50C6447814AC9
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e362e302f32342d3234203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 18:11:35 +0000
ROA not before:           Tue 04 Aug 2026 18:06:35 +0000
ROA not after:            Tue 03 Aug 2027 18:11:35 +0000
asID:                     23074
IP address blocks:        164.85.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:45:fe:7e:4c:6d:40:00:8f:97:91:84:58:e5:0c:64:47:81:4a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 18:06:35 2026 GMT
            Not After : Aug  3 18:11:35 2027 GMT
        Subject: CN=90039378460B918CE2BFB477FE18F0C679853957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:3f:da:6a:66:e1:99:5a:b0:a0:14:e3:b5:
                    66:ed:46:82:c1:1f:7d:4e:9f:dc:86:42:c3:65:eb:
                    a9:a0:38:56:83:5e:66:62:19:ca:a0:0d:09:46:12:
                    21:15:1e:9d:98:42:6f:aa:c1:61:88:22:f9:2d:55:
                    12:e9:07:97:35:9a:8a:56:f4:be:6f:dd:a1:c5:ae:
                    70:03:ac:f7:a1:9b:3c:c2:c0:5f:a4:4b:67:4a:91:
                    ee:9e:5f:4e:7f:ee:36:4d:1e:1e:90:c0:94:23:a2:
                    d7:48:60:ce:b2:0e:43:c6:42:b9:0b:07:0e:00:bd:
                    5d:2e:5d:a1:f3:cc:e9:83:10:d1:da:8e:35:09:a1:
                    b0:69:5e:bc:9b:ff:81:b3:2c:4e:5f:f1:fb:54:d9:
                    d2:44:51:63:55:a7:a6:f6:7b:86:50:8a:19:7b:b1:
                    ef:3a:1f:ae:bd:67:da:2d:da:13:a6:f7:98:72:58:
                    97:b4:8f:dc:ee:3a:52:ce:30:8c:22:bd:30:ad:35:
                    49:52:6a:5e:bc:4c:7c:74:bf:34:50:19:d4:39:ab:
                    f5:9f:e5:ec:98:5a:31:a6:df:c3:bd:c9:72:5a:59:
                    bd:c8:c2:2b:da:8d:39:e7:4c:27:7e:fd:70:fc:90:
                    ae:13:d3:0d:4f:75:a6:69:71:e3:63:60:dc:4c:73:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:03:93:78:46:0B:91:8C:E2:BF:B4:77:FE:18:F0:C6:79:85:39:57
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e362e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:55:a2:6e:ab:20:b6:3b:c6:63:ff:f6:85:70:54:31:83:45:
         56:a9:b6:64:d6:43:f0:1c:23:0c:17:f2:dd:d6:df:a3:0a:e3:
         5c:94:e0:e9:e6:19:ab:ca:88:00:35:dc:bc:d7:8b:b0:16:da:
         02:14:d7:b4:28:8f:ee:16:c3:81:cd:26:3f:db:73:1d:3a:06:
         9f:51:1b:8a:2b:cf:5d:bd:ec:12:86:31:a5:01:10:ca:48:66:
         a9:c4:b7:09:9a:6b:83:a6:20:4c:4b:e9:18:2b:86:d5:3b:de:
         7a:fe:d8:ec:60:65:d8:b8:d1:22:e8:bb:96:e3:dd:18:b6:57:
         b0:b6:56:96:ce:28:91:3c:0d:6d:ae:8c:95:3f:62:4c:5c:7a:
         23:26:8d:9f:2f:c1:af:8d:25:bb:0b:72:29:52:3a:e5:ed:68:
         4b:c6:4e:95:e9:f9:15:9b:1b:e1:86:5e:4e:9e:08:0d:b7:0a:
         45:1c:3b:e9:b7:a3:15:1a:ab:84:9c:d3:35:65:2a:b9:c2:a4:
         c5:60:5f:46:7a:e3:15:54:34:03:c1:84:7d:aa:bf:8f:2e:b1:
         ae:8c:53:f0:2a:8b:f3:70:3e:d5:d1:35:9b:1e:ac:18:79:18:
         8f:43:bb:97:46:0c:89:5b:33:6a:ad:36:f1:3c:bf:fa:52:66:
         a5:c9:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:26 2026 by rpki-client