Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36352e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e36352e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          f8ojAr1CauRD1L3Z3BL3T2Ef4KXwvjrP2mUnoy6tKLQ=
Subject key identifier:   06:18:D1:FC:4B:D6:20:79:AD:59:C2:95:E9:9B:18:96:B2:6D:C3:01
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       3D13CE11BA45C3CD96F32B3F9A8E83B67D7D36F7
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36352e302f32342d3234203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:03:16 +0000
ROA not before:           Tue 02 Sep 2025 17:58:16 +0000
ROA not after:            Tue 01 Sep 2026 18:03:16 +0000
asID:                     23074
IP address blocks:        164.85.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:13:ce:11:ba:45:c3:cd:96:f3:2b:3f:9a:8e:83:b6:7d:7d:36:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 17:58:16 2025 GMT
            Not After : Sep  1 18:03:16 2026 GMT
        Subject: CN=0618D1FC4BD62079AD59C295E99B1896B26DC301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:c6:60:3c:b1:8b:47:5c:dd:e0:8d:53:c7:
                    f5:f6:80:a5:3f:e5:f1:77:c6:ef:d2:f1:06:1b:c2:
                    1b:54:17:2b:44:fd:31:9f:09:9a:bb:85:7a:ac:c7:
                    dc:23:0b:db:b8:f4:57:f9:a3:a5:88:35:09:73:38:
                    6c:2d:fa:ed:83:87:d2:42:2d:c3:fd:68:36:7e:7e:
                    0d:3b:44:93:3f:14:83:26:d2:ab:23:b8:86:2d:db:
                    c8:3a:34:6d:fa:c1:22:3f:a0:2f:4d:2a:1f:d9:f3:
                    4b:93:dd:c2:ab:23:13:90:95:25:86:96:27:29:60:
                    ba:f2:96:af:92:71:50:c7:98:0a:38:1f:f3:40:dc:
                    fe:46:c0:3e:e2:3c:61:7a:8c:c0:f4:30:c4:17:04:
                    8e:28:99:2f:64:1e:ec:2a:3f:52:f0:51:dd:e4:68:
                    52:a4:5a:a0:b4:d7:9b:08:f0:ab:5c:f6:d7:5f:d0:
                    ce:99:ca:cc:64:0b:21:6b:ca:fb:07:01:75:c3:f0:
                    e0:e5:6f:92:47:17:f0:86:b8:52:f0:19:08:4e:57:
                    71:ef:cf:a8:b4:81:1f:bf:31:41:27:de:39:c6:bd:
                    5f:bf:73:94:a6:85:8f:64:d8:59:f1:d1:1a:e4:48:
                    bb:2a:6f:ab:af:28:25:96:a9:b0:53:d1:2a:66:db:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:18:D1:FC:4B:D6:20:79:AD:59:C2:95:E9:9B:18:96:B2:6D:C3:01
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36352e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:6f:42:23:8c:e0:d7:60:23:f2:70:db:9c:77:85:d8:67:cd:
         62:2f:39:93:78:05:e8:41:de:e3:6a:50:1d:29:fc:23:cd:26:
         87:c8:78:49:53:2e:11:95:4b:79:07:ab:67:9e:e9:23:d0:83:
         d4:53:86:e0:0b:f0:98:a4:84:d0:46:dd:6c:14:34:5f:3b:72:
         9c:b7:7b:e5:92:ed:f8:03:ab:46:ee:8a:d0:07:ab:2b:2f:83:
         dc:8c:7e:6e:89:2e:a5:3e:c7:e4:e5:68:c1:be:3f:09:21:27:
         f2:a0:24:5a:d8:f4:ec:84:77:42:44:74:75:f5:2a:88:c9:6b:
         d1:13:16:0b:e2:78:16:f4:23:7c:69:e1:08:cd:e8:06:df:e7:
         b6:f7:d9:70:c1:66:ef:f0:63:79:bf:3a:2f:8a:96:09:0a:1c:
         3c:8e:ba:cf:f0:89:4e:fc:d6:72:e5:a8:23:c8:76:73:5e:01:
         a0:2e:a4:7c:f6:8d:1e:f5:ab:f5:2a:b5:82:34:d8:c7:03:f0:
         5a:25:ed:3c:54:e8:e6:90:92:7a:62:e9:1a:24:15:f4:9b:c3:
         31:f7:82:57:88:0b:ac:76:fe:96:ad:7a:f5:59:00:66:a8:d2:
         38:af:a1:d4:0d:49:e4:57:1e:d3:23:b6:a9:52:dd:aa:60:66:
         92:54:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:28:36 2025 by rpki-client