Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36362e302f32342d3234203d3e203233303734.roa
File:                     3136342e38352e36362e302f32342d3234203d3e203233303734.roa (raw, json)
Hash identifier:          TJaXCT2zFzVvsHflb7YIYrctNiU4TxNsP6rkBiOd4As=
Subject key identifier:   86:50:69:FE:88:34:3D:B5:76:35:60:EC:55:31:C0:5E:8A:B3:EE:3B
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       43BA984A9CA9045AC403281F12392DC66395CF6F
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36362e302f32342d3234203d3e203233303734.roa
Signing time:             Fri 07 Feb 2025 01:45:56 +0000
ROA not before:           Fri 07 Feb 2025 01:40:56 +0000
ROA not after:            Fri 06 Feb 2026 01:45:56 +0000
asID:                     23074
IP address blocks:        164.85.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ba:98:4a:9c:a9:04:5a:c4:03:28:1f:12:39:2d:c6:63:95:cf:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Feb  7 01:40:56 2025 GMT
            Not After : Feb  6 01:45:56 2026 GMT
        Subject: CN=865069FE88343DB5763560EC5531C05E8AB3EE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:b0:7d:54:d4:bf:c6:b7:06:74:c8:aa:7c:
                    05:d1:34:5f:e0:00:6f:b2:1e:f7:60:2b:25:1b:93:
                    6b:8a:be:35:d1:06:b2:8e:f4:4b:b5:6e:54:83:47:
                    cf:be:79:b4:2e:dd:4e:f8:ed:29:52:af:08:20:bd:
                    5d:44:3b:2a:41:33:29:d7:f0:4c:ec:e7:20:5e:73:
                    57:ca:63:d2:12:bd:b3:22:64:8e:5f:78:3b:f2:7d:
                    cf:bb:a6:73:c5:54:96:40:b9:b0:54:9e:19:b6:3f:
                    2f:af:05:0b:e8:07:c1:7b:77:4a:b0:3b:f5:76:77:
                    e5:ee:a1:e3:ac:54:af:f2:40:03:da:fb:0f:c9:b1:
                    fd:32:78:c5:9c:3f:62:b5:df:76:57:65:7a:dc:da:
                    18:32:a7:85:06:b9:6d:46:a2:1e:c2:06:8f:14:ab:
                    7f:69:7e:3f:0e:73:b1:62:e1:fb:9e:a4:eb:8b:e0:
                    ee:4b:f3:73:82:bd:25:94:21:b5:25:d4:46:48:ca:
                    1c:30:1b:06:1f:fe:cb:4d:35:12:e4:1f:e9:c2:79:
                    44:87:40:a5:b6:29:29:02:2f:2b:fa:f2:6b:7b:5b:
                    dc:e4:b8:73:21:cd:e0:6c:b3:59:c7:c5:fe:05:2c:
                    be:93:98:c4:93:90:50:f8:e2:ac:ba:66:6f:75:e2:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:50:69:FE:88:34:3D:B5:76:35:60:EC:55:31:C0:5E:8A:B3:EE:3B
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e36362e302f32342d3234203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:3f:1c:51:2d:ea:97:0a:80:39:7e:de:b4:cb:03:9e:f2:
         de:80:8b:b3:e3:a7:d2:44:68:54:bb:f4:39:19:25:06:b7:6f:
         98:c1:62:49:76:82:f5:6e:57:95:ef:f9:df:33:c5:0e:68:d2:
         ba:e9:ee:bb:f5:dc:44:69:5f:de:29:b0:cc:cd:a9:04:74:ca:
         6f:70:3e:04:6a:0b:49:e5:cd:8d:19:20:e0:a0:4f:97:3d:34:
         23:f6:cc:be:34:d3:20:9d:2c:f0:0d:2e:cd:21:c6:c4:55:c1:
         86:36:fb:ab:61:91:fb:7f:f3:9a:68:4a:89:b5:86:ce:cb:d8:
         11:65:e7:1c:36:b0:d2:13:6f:ab:73:84:75:c2:49:e0:ae:c1:
         4d:a6:19:2c:b3:91:fb:df:fb:c9:c8:0c:63:19:da:49:38:e2:
         9f:6d:e4:e9:80:a0:0f:17:8b:ec:14:c1:d1:c4:bf:fb:6d:3e:
         a1:82:fb:36:5c:e4:04:f4:cd:90:b5:be:0f:5a:11:3c:4e:95:
         4f:12:f5:8a:3d:ea:f7:66:e9:70:c9:c8:13:7f:ac:d0:97:37:
         ee:4a:3c:ad:8c:f8:25:df:81:11:fd:58:67:61:6b:93:74:0f:
         9d:da:df:99:bd:e1:df:ac:2c:ed:fa:99:bf:dc:81:38:10:d5:
         d8:a5:c6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:49:06 2025 by rpki-client