Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36342e302f32302d3230203d3e203233303734.roa
File:                     3136342e38352e36342e302f32302d3230203d3e203233303734.roa (raw, json)
Hash identifier:          8idUAY1REs0+3RGorCWijtluPc4DCB0jlfUPxOWtkLg=
Subject key identifier:   FC:CC:4C:29:46:35:98:0B:2C:2E:95:7E:4C:A2:3A:0D:64:BE:15:F9
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       6BDE1DB6F47164D162FA31B08A723F713E5921EB
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36342e302f32302d3230203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 19:11:36 +0000
ROA not before:           Tue 04 Aug 2026 19:06:36 +0000
ROA not after:            Tue 03 Aug 2027 19:11:36 +0000
asID:                     23074
IP address blocks:        164.85.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:de:1d:b6:f4:71:64:d1:62:fa:31:b0:8a:72:3f:71:3e:59:21:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 19:06:36 2026 GMT
            Not After : Aug  3 19:11:36 2027 GMT
        Subject: CN=FCCC4C294635980B2C2E957E4CA23A0D64BE15F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:bd:e0:fe:6b:bd:88:c6:50:bd:63:a8:6a:
                    80:19:8c:d1:b5:7b:b7:72:21:ba:78:c8:38:cc:a2:
                    ba:e4:5e:d6:7a:12:4b:07:4b:b2:ad:ba:5f:13:ac:
                    7b:6f:ac:95:51:40:72:c1:95:7e:ea:76:07:39:d1:
                    c9:54:95:0c:33:95:7d:89:a3:77:81:27:2f:37:c2:
                    61:8d:fa:93:82:7e:27:11:0f:4b:cd:65:72:f1:3b:
                    96:22:34:4d:33:e2:cc:62:b9:8f:e9:6a:ae:f4:3a:
                    2d:b8:f8:50:0a:43:e8:76:c2:94:ca:65:7f:58:b3:
                    3f:a6:52:28:6f:cd:d4:d4:28:63:6d:0d:31:47:8f:
                    80:07:8e:38:79:37:3b:5b:84:70:95:d7:f7:3e:ed:
                    56:4e:b7:87:a3:cb:82:b6:6f:da:df:d7:71:78:cd:
                    7b:cb:e3:ed:02:2b:7b:8b:f7:39:c6:7c:26:1b:06:
                    90:d1:1d:d2:13:15:8c:b4:ff:d9:f1:23:c0:fd:63:
                    56:37:0c:71:49:9a:5c:80:5c:c9:f0:1d:15:d3:3f:
                    6a:82:c2:b0:17:39:6b:ef:fc:f9:02:b2:4c:71:f6:
                    64:96:81:99:5c:df:7e:a4:d4:0c:45:5f:50:67:fd:
                    09:fd:93:3a:b4:2c:aa:3a:4f:0e:79:a9:34:91:43:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CC:4C:29:46:35:98:0B:2C:2E:95:7E:4C:A2:3A:0D:64:BE:15:F9
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36342e302f32302d3230203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:19:b6:e6:cb:99:1d:40:cb:cc:d1:69:a5:c1:16:94:2b:f1:
         56:68:c8:95:7e:e4:73:a3:ac:29:dd:af:d0:6a:2f:ed:22:3c:
         3d:7a:33:ce:55:f6:c4:e8:67:25:52:a1:d6:a8:d2:60:ed:76:
         32:20:e1:9f:9d:1e:f1:7a:fe:1f:e5:48:ee:44:5c:fe:c0:3a:
         ce:2c:c0:64:3b:2a:ea:83:24:f7:48:36:1d:ca:86:1e:65:f6:
         2a:94:50:5a:eb:32:61:01:30:19:01:2e:a5:39:99:a1:28:b8:
         62:44:f3:d7:d1:35:0d:11:8e:b2:60:9b:b5:2d:6d:78:03:1b:
         d0:7d:35:3a:04:f2:9c:c3:b8:af:2c:af:d1:d4:ad:1a:7c:21:
         27:b3:47:85:b0:33:05:e5:d1:50:cc:0e:f6:93:ae:f3:95:25:
         25:44:87:54:69:44:f3:8b:45:15:37:a6:42:75:2e:af:3b:20:
         2e:8a:cf:39:d0:fe:41:f2:b0:19:11:43:b4:5f:26:2a:79:b8:
         a2:43:67:aa:ad:35:ae:3d:bb:91:ca:34:5f:5e:58:e6:03:e0:
         a8:73:b9:c8:b1:bc:17:75:67:5d:ab:23:e8:72:50:0a:bf:ca:
         6c:0c:29:b2:3f:b9:3f:24:54:2e:f8:0d:cc:97:61:d5:46:c0:
         39:73:55:41
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUa94dtvRxZNFi+jGwinI/cT5ZIeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRkIyNjIyNzU3RkU1RDkxMDdBREMxMTlEODhDODQz
OUE3NDJEOTAeFw0yNjA4MDQxOTA2MzZaFw0yNzA4MDMxOTExMzZaMDMxMTAvBgNV
BAMTKEZDQ0M0QzI5NDYzNTk4MEIyQzJFOTU3RTRDQTIzQTBENjRCRTE1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2b3g/mu9iMZQvWOoaoAZjNG1
e7dyIbp4yDjMorrkXtZ6EksHS7Ktul8TrHtvrJVRQHLBlX7qdgc50clUlQwzlX2J
o3eBJy83wmGN+pOCficRD0vNZXLxO5YiNE0z4sxiuY/paq70Oi24+FAKQ+h2wpTK
ZX9Ysz+mUihvzdTUKGNtDTFHj4AHjjh5NztbhHCV1/c+7VZOt4ejy4K2b9rf13F4
zXvL4+0CK3uL9znGfCYbBpDRHdITFYy0/9nxI8D9Y1Y3DHFJmlyAXMnwHRXTP2qC
wrAXOWvv/PkCskxx9mSWgZlc336k1AxFX1Bn/Qn9kzq0LKo6Tw55qTSRQ27fAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/MxMKUY1mAssLpV+TKI6DWS+FfkwHwYDVR0j
BBgwFoAUFx+yYidX/l2RB63BGdiMhDmnQtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC8xNzFGQjI2MjI3NTdGRTVEOTEwN0FEQzExOUQ4OEM4NDM5QTc0MkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MUZCMjYyMjc1N0ZFNUQ5
MTA3QURDMTE5RDg4Qzg0MzlBNzQyRDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzNjM0MmUzODM1MmUzNjM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzMzMw
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBKRVQDANBgkqhkiG9w0BAQsFAAOCAQEAGBm25suZHUDL
zNFppcEWlCvxVmjIlX7kc6OsKd2v0Gov7SI8PXozzlX2xOhnJVKh1qjSYO12MiDh
n50e8Xr+H+VI7kRc/sA6zizAZDsq6oMk90g2HcqGHmX2KpRQWusyYQEwGQEupTmZ
oSi4YkTz19E1DRGOsmCbtS1teAMb0H01OgTynMO4ryyv0dStGnwhJ7NHhbAzBeXR
UMwO9pOu85UlJUSHVGlE84tFFTemQnUurzsgLorPOdD+QfKwGRFDtF8mKnm4okNn
qq01rj27kco0X15Y5gPgqHO5yLG8F3VnXasj6HJQCr/KbAwpsj+5PyRULvgNzJdh
1UbAOXNVQQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:46 2026 by rpki-client