Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa
File:                     3136342e38352e38342e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier:          06zxjjorpv8MBEQcU5s0INGkKCSL49tTNJ1Hih8uUP4=
Subject key identifier:   8F:A3:23:A4:20:7A:47:EC:90:F6:2B:AA:9C:08:BC:D5:14:81:10:31
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       75CF2D7BE1166B53B0F2ACEFD379570FF1A737DB
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 19:11:35 +0000
ROA not before:           Tue 04 Aug 2026 19:06:35 +0000
ROA not after:            Tue 03 Aug 2027 19:11:35 +0000
asID:                     23074
IP address blocks:        164.85.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:cf:2d:7b:e1:16:6b:53:b0:f2:ac:ef:d3:79:57:0f:f1:a7:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 19:06:35 2026 GMT
            Not After : Aug  3 19:11:35 2027 GMT
        Subject: CN=8FA323A4207A47EC90F62BAA9C08BCD514811031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ab:c3:5d:4f:9e:29:c9:94:9f:e8:cf:23:35:
                    48:65:98:4f:38:a5:be:37:a7:4e:e8:59:58:57:69:
                    df:f3:28:86:eb:77:87:b2:3a:39:cd:00:93:98:23:
                    9b:32:68:2c:ff:15:ce:00:01:45:53:39:ba:e6:de:
                    f7:1f:fa:c2:c6:4f:9c:4f:29:49:4f:41:44:26:05:
                    c0:1a:2e:f8:dc:b5:44:0f:ac:ec:b4:d9:8c:3d:19:
                    ed:34:13:61:c2:39:db:47:4d:b3:70:22:d4:2e:a9:
                    68:b7:9e:fb:c9:ec:7d:86:84:5f:52:18:8f:2a:c7:
                    86:fd:df:ff:17:a6:88:89:e9:57:4b:77:05:6d:9e:
                    1e:1a:42:eb:cf:41:e1:b5:58:ff:5b:dc:f1:32:6a:
                    44:c1:2e:4b:e0:a4:96:0b:4d:7c:2e:de:f5:51:e5:
                    b0:d6:03:9a:3e:fc:46:d2:e1:69:6b:82:70:b6:5c:
                    6d:ba:78:d0:7a:a3:91:7a:98:4d:5e:30:56:fa:b8:
                    48:91:55:54:33:05:e6:85:a0:94:42:5e:f9:95:37:
                    6d:c6:b7:1b:90:27:13:4e:39:03:b7:ab:6e:83:2a:
                    c9:63:d7:ce:08:8e:0e:12:2e:16:c1:7f:6f:f2:ac:
                    9f:82:73:d3:17:cc:8c:84:67:c1:3c:a2:8b:2d:50:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:23:A4:20:7A:47:EC:90:F6:2B:AA:9C:08:BC:D5:14:81:10:31
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:c2:0a:ff:9f:9b:ee:f0:04:b9:39:ab:aa:7f:9d:99:b6:97:
         4b:b7:6c:c4:ad:4a:6e:8a:8e:5f:51:5d:d7:b6:17:da:3e:ed:
         a7:f4:c8:0f:8b:1b:ca:f8:7c:5a:cb:53:50:63:89:2f:8e:6e:
         b5:a3:e2:97:d7:82:bd:2a:c1:d4:93:f3:cd:11:b8:fe:b5:60:
         96:e6:62:46:e6:99:51:7b:06:6b:78:1d:d6:b6:7c:d1:ea:71:
         d8:1b:39:3b:cb:55:9f:49:b2:88:cf:09:44:bb:24:b8:17:c6:
         2e:8e:26:31:7f:28:76:1f:42:bf:e0:3e:36:7e:ee:55:72:36:
         65:27:61:41:f1:8f:0b:0b:91:bb:ef:84:3e:fa:54:84:51:9d:
         29:ca:44:79:ae:35:4e:0e:85:3a:8f:da:0f:14:dc:56:01:31:
         1e:34:49:30:23:5d:d3:fe:63:3d:e5:d4:e1:a6:7f:fb:6a:99:
         4b:85:9e:9a:8f:e9:e0:66:68:3a:03:28:c1:f6:4d:0d:0e:33:
         f7:f8:76:98:5d:03:32:fa:16:df:9e:4d:f2:71:e1:a2:2c:53:
         33:e6:6f:9e:28:22:30:37:a8:58:20:fe:68:3a:57:84:d9:b7:
         48:f4:ec:d2:8f:a2:2e:57:06:6f:7d:93:3f:0b:e4:ab:06:19:
         02:89:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:21 2026 by rpki-client