Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa
File:                     3136342e38352e38342e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier:          S9mTDbcoSzB1IBe+1SRwg9jP8UnouzhU/W4JWRnR1Z8=
Subject key identifier:   11:2A:65:71:A6:ED:85:8A:31:53:5F:44:A7:4D:33:CE:59:FE:3B:AF
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       5825E3540EA64238603CC0CCEE23420DE4589C9D
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 19:00:50 +0000
ROA not before:           Tue 02 Sep 2025 18:55:50 +0000
ROA not after:            Tue 01 Sep 2026 19:00:50 +0000
asID:                     23074
IP address blocks:        164.85.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:25:e3:54:0e:a6:42:38:60:3c:c0:cc:ee:23:42:0d:e4:58:9c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:55:50 2025 GMT
            Not After : Sep  1 19:00:50 2026 GMT
        Subject: CN=112A6571A6ED858A31535F44A74D33CE59FE3BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:d7:a6:3b:41:7b:bc:28:bc:ad:3d:eb:09:
                    81:cb:d6:43:4c:94:a4:a3:81:38:1a:b3:34:b5:d3:
                    50:31:36:de:b0:2f:8a:fa:d4:e1:68:67:f3:f0:ba:
                    7b:0a:b4:c7:ac:89:a2:7b:eb:04:43:d1:bf:fd:54:
                    fa:75:37:82:98:44:28:f7:11:6c:44:4e:02:87:71:
                    e3:d2:bf:bc:66:81:8c:25:ee:0f:65:49:c4:12:06:
                    2e:f8:44:7a:dc:46:2f:1e:04:2b:ac:87:0c:e7:74:
                    6c:b2:51:91:65:83:32:df:ee:aa:6f:54:41:8b:cf:
                    84:f4:92:84:d5:de:72:db:14:be:f0:5b:b5:ef:6f:
                    ad:31:bf:57:c1:e8:48:11:66:d3:3c:c1:f6:27:1e:
                    c4:d8:97:f9:90:90:f6:6b:e9:5a:ab:18:89:1b:7f:
                    7f:b8:8b:6a:67:7a:48:e4:a1:45:35:50:8f:14:3d:
                    8e:3d:12:5b:f0:19:0e:47:42:5c:45:bb:f0:e2:94:
                    0a:35:b6:13:78:a0:e5:63:f5:3b:4d:68:75:f7:49:
                    4b:23:a7:18:c5:ba:8b:d3:d1:f0:1b:97:21:d2:16:
                    47:d1:ca:55:8e:13:b3:c2:79:b2:23:95:2d:03:fd:
                    a0:82:d9:4e:40:cb:cc:6b:f9:79:24:a1:c6:b6:b3:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2A:65:71:A6:ED:85:8A:31:53:5F:44:A7:4D:33:CE:59:FE:3B:AF
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:e5:d1:f2:98:64:80:e9:c8:69:c1:5f:1a:da:de:d6:d2:
         2e:b2:f3:20:35:05:f6:87:76:53:fb:e5:88:50:37:c5:d3:96:
         50:6e:32:8d:ee:ae:3a:b2:d7:77:24:52:66:a3:bb:bb:ab:61:
         cd:6a:6f:2e:1e:c0:e6:70:eb:da:0f:22:6e:b3:cd:d4:44:a3:
         c2:cc:cb:ef:79:d8:84:78:d3:78:88:a9:e2:a0:90:4b:fe:16:
         38:e1:6f:d2:cf:1f:82:7c:ad:8b:81:89:f3:43:43:3d:c1:d7:
         9d:1e:28:35:b6:ef:3a:a1:b4:ab:95:a7:36:fd:d9:b8:82:97:
         4a:8e:03:19:44:cd:e2:6a:2e:21:2c:3f:1e:75:e7:32:94:6b:
         25:a4:79:05:7e:08:17:ae:a6:16:a0:38:2b:b6:e9:55:ba:ec:
         20:f9:e5:67:90:61:57:fb:25:d2:49:b0:0c:43:da:ea:28:b4:
         73:5c:ae:40:f6:b0:cf:af:b8:5a:68:0c:f4:a8:ec:9f:e9:a2:
         a4:70:cb:2f:a1:d8:e4:59:7a:bb:31:7e:c6:a6:84:6b:7c:2f:
         98:94:cb:fd:be:df:36:3d:5b:72:cc:b3:b8:42:0b:2e:67:f7:
         31:1c:d4:da:de:53:04:f2:fc:12:96:da:b1:14:f5:27:d4:7a:
         ce:7c:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:04:48 2025 by rpki-client