Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38362e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e38362e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          d+t+WnGmbPRZbSVcwGFvKCGxiDQiVd6OasCSp0soORo=
Subject key identifier:   D1:D0:FA:22:FD:C9:35:03:45:73:D1:0D:E1:78:9C:E1:84:B7:E3:53
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       6FEC3174E1CA7C1F72BC75501D0922BA8CA36CD3
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38362e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:11:51 +0000
ROA not before:           Tue 02 Sep 2025 18:06:51 +0000
ROA not after:            Tue 01 Sep 2026 18:11:51 +0000
asID:                     23074
IP address blocks:        164.85.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ec:31:74:e1:ca:7c:1f:72:bc:75:50:1d:09:22:ba:8c:a3:6c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:06:51 2025 GMT
            Not After : Sep  1 18:11:51 2026 GMT
        Subject: CN=D1D0FA22FDC935034573D10DE1789CE184B7E353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:8a:a0:f6:1b:95:8c:04:bc:cb:0e:9c:6c:
                    9f:c2:a7:13:71:fb:6f:dc:5a:49:72:88:e9:3a:43:
                    49:f4:d1:3a:9f:4c:47:b8:d5:01:0e:ba:42:73:a9:
                    e8:01:5c:f0:a1:ba:01:4e:9b:7d:f3:1f:d4:b3:d5:
                    e6:b5:75:c3:47:de:7d:b9:33:29:33:c1:fd:97:1e:
                    60:8e:27:b1:42:68:96:c3:6c:b0:e3:50:f8:b5:c7:
                    83:62:8e:04:3a:49:f5:eb:de:8f:4e:75:61:53:42:
                    a9:93:75:f0:5c:85:36:9c:b1:f0:2b:c2:f3:bf:28:
                    94:94:58:d5:c0:c0:eb:fd:24:f2:b4:3b:ae:74:79:
                    b2:55:02:28:3e:48:73:ed:c3:e3:87:23:c4:76:17:
                    d8:02:76:92:1f:81:68:81:3a:e2:fc:50:70:4c:a5:
                    6a:2a:6f:c9:19:2e:a5:3a:8b:bd:fb:a4:5f:0b:ca:
                    b5:e2:33:a1:8b:04:d3:59:ff:24:a0:0c:41:77:42:
                    6b:18:ea:bf:73:f5:ec:fa:8e:ca:ed:d0:8e:4d:d7:
                    53:ea:b5:b3:a8:56:ed:f5:04:d6:be:c4:3b:fc:00:
                    6e:e7:57:2a:1f:6a:38:53:f1:31:ad:1e:a6:4a:d8:
                    72:d8:e5:da:12:d4:0f:73:e2:94:e8:85:d4:9d:40:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D0:FA:22:FD:C9:35:03:45:73:D1:0D:E1:78:9C:E1:84:B7:E3:53
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38362e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:9f:8a:8e:f0:3d:f6:f5:03:8b:dd:38:a9:7f:fa:f3:77:d8:
         fa:47:39:69:57:ff:31:6a:e4:03:e5:ee:67:85:69:5a:f8:3e:
         b9:fc:48:50:29:fc:6e:8b:17:c4:07:5f:ac:c8:d6:ad:00:4b:
         9f:d7:37:24:9f:13:30:07:c0:23:c5:51:67:f0:0c:0f:52:94:
         5d:33:fa:d2:9f:44:83:29:cf:c4:69:7c:a9:d9:99:94:f7:ee:
         6f:a6:9a:0a:27:04:ae:15:8f:84:c7:7a:5a:be:8d:b4:b5:b0:
         32:97:02:d7:e7:1e:c0:63:e9:86:b7:27:0e:eb:49:43:59:60:
         4f:dd:6e:ef:63:a1:ec:87:68:1d:c0:f8:0a:e3:2b:db:7d:4c:
         78:83:3b:e2:81:b5:16:de:c4:1c:03:0d:b0:10:98:2b:aa:25:
         7b:71:48:d1:bb:68:73:5d:fd:2d:12:10:c9:7e:3a:3e:ff:ce:
         fa:36:41:ee:22:65:0b:09:36:6d:23:9e:75:3a:38:9a:9a:2e:
         ca:58:0f:61:0e:95:e6:96:1d:bf:81:3e:38:98:83:d5:0b:cf:
         c5:01:61:83:7b:ba:de:2f:59:85:95:4c:10:c1:c9:91:dd:8e:
         82:47:aa:62:16:5e:ca:c4:1b:b0:f0:68:e0:57:64:72:42:20:
         54:f2:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:36 2025 by rpki-client