Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32302d3230203d3e203233303734.roa
File:                     3136342e38352e38302e302f32302d3230203d3e203233303734.roa (raw, json)
Hash identifier:          Np9YZhi5jEVy4+/1vvw4NqtHzyIf3PO3KGrPIh435Xk=
Subject key identifier:   1C:94:FA:EE:8B:A8:B2:CF:16:3C:5E:97:95:25:93:4B:0B:53:17:19
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       59F9C1631283D7149346B073291A632E587B8025
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32302d3230203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 19:00:51 +0000
ROA not before:           Tue 02 Sep 2025 18:55:51 +0000
ROA not after:            Tue 01 Sep 2026 19:00:51 +0000
asID:                     23074
IP address blocks:        164.85.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f9:c1:63:12:83:d7:14:93:46:b0:73:29:1a:63:2e:58:7b:80:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:55:51 2025 GMT
            Not After : Sep  1 19:00:51 2026 GMT
        Subject: CN=1C94FAEE8BA8B2CF163C5E979525934B0B531719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:09:fd:a7:ea:a4:14:c6:d3:d0:01:e0:90:
                    18:70:14:b3:39:82:b8:82:23:60:5b:09:07:ab:98:
                    56:98:1d:d0:43:1c:8b:89:6c:c4:db:db:43:23:5b:
                    b4:94:88:8c:91:b4:84:0f:1a:52:c0:75:a6:9f:e6:
                    63:a6:ff:30:0e:3e:9f:2e:c6:f6:0d:19:b4:1c:83:
                    38:10:28:68:90:d8:fc:c1:98:cf:7c:27:3f:c4:5e:
                    23:a2:fa:82:f4:65:73:0c:f4:32:e0:99:f0:18:44:
                    b5:1f:06:3a:a0:c2:0a:bd:57:df:d2:af:62:03:7a:
                    a3:47:03:12:91:84:c6:03:d8:c9:b1:8d:74:bb:59:
                    ff:6f:21:71:77:e0:eb:81:1d:d5:37:61:c6:54:96:
                    9c:1e:a6:c3:af:7e:25:4b:ab:15:15:cb:6f:df:5a:
                    8d:2d:8c:5c:b4:69:86:52:13:7d:c3:8f:9e:29:7f:
                    99:81:63:eb:48:c8:3b:56:78:54:b6:e3:91:43:37:
                    c7:92:4a:e4:fe:6f:69:07:6c:ed:ea:2f:3d:ef:95:
                    83:6f:91:e3:2c:7a:d7:e6:4d:9d:5c:4c:71:b4:56:
                    ef:f5:d5:98:f7:e2:29:77:9c:5d:a1:f1:85:69:d4:
                    69:32:94:f9:24:8f:5b:63:3a:16:c8:ee:c8:35:3b:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:94:FA:EE:8B:A8:B2:CF:16:3C:5E:97:95:25:93:4B:0B:53:17:19
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32302d3230203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:df:46:a5:f6:6e:5d:8f:d7:5d:ec:ac:a1:57:25:1b:f8:ae:
         e0:f6:b2:ba:ef:99:49:d1:e5:76:4f:e0:03:7b:af:0f:eb:e2:
         8d:97:60:93:2f:13:fe:89:74:b4:bf:ce:a8:a0:70:1d:da:41:
         93:03:6a:f6:2f:5f:98:12:14:95:f9:db:bc:30:e7:d0:1d:f5:
         7a:62:86:dd:8a:f7:2a:e6:0a:9b:e2:4e:c5:fb:e0:f3:51:f0:
         c6:24:96:b5:a1:8e:03:41:18:34:15:34:9a:9f:14:d6:d6:0c:
         bc:b2:7b:41:5f:b9:d7:34:39:ae:cd:5c:6e:5f:3f:59:ed:58:
         27:3d:95:e8:48:8a:5d:66:d6:d9:1b:2c:b1:ef:0c:51:91:46:
         24:a2:02:d6:91:27:37:8d:62:82:ad:2a:2b:2a:dc:b4:1b:b8:
         75:ea:f6:0d:70:56:05:5b:8f:a4:38:e8:b4:fb:aa:02:01:d6:
         45:54:04:42:56:0a:e2:c1:8d:34:50:9a:90:55:ff:ea:21:1d:
         93:30:40:a7:22:b8:10:ae:bf:7e:49:ca:22:65:68:63:d0:c2:
         d4:10:78:65:1f:55:06:df:6a:21:ac:48:d0:9a:db:6a:a7:c3:
         be:86:2f:ff:dd:eb:c6:89:50:5b:c7:bd:ce:7d:59:18:41:8a:
         77:65:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:00:57 2025 by rpki-client