Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38382e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e38382e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          zqh2upy2bcKXsP+zbqU/EL+OSLW075fvUuj7FEdTtKY=
Subject key identifier:   FE:F0:FE:5A:9C:71:EF:8E:72:82:8E:57:4E:11:AE:10:6A:F0:73:77
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       774F5DF53C79216D36ECDD86EEE6AE18B6DF9462
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38382e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:07:55 +0000
ROA not before:           Tue 02 Sep 2025 18:02:55 +0000
ROA not after:            Tue 01 Sep 2026 18:07:55 +0000
asID:                     23074
IP address blocks:        164.85.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4f:5d:f5:3c:79:21:6d:36:ec:dd:86:ee:e6:ae:18:b6:df:94:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:02:55 2025 GMT
            Not After : Sep  1 18:07:55 2026 GMT
        Subject: CN=FEF0FE5A9C71EF8E72828E574E11AE106AF07377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:e7:c5:af:f5:e0:40:81:c7:14:bd:8f:a6:
                    30:43:46:d1:87:78:e0:68:0c:f0:fb:f6:48:aa:b2:
                    a6:7a:81:5c:c8:63:74:d7:45:81:20:52:26:05:44:
                    ff:49:e8:73:88:cb:70:9f:1e:84:f2:a7:84:67:f5:
                    f0:9e:68:d7:a4:7f:33:db:f9:e3:aa:2e:18:83:a2:
                    b7:86:f3:25:30:85:fd:26:e3:ee:04:da:ef:21:13:
                    d0:b3:75:5d:90:3e:15:5b:91:2a:23:10:57:87:6c:
                    06:c0:1d:fb:0e:63:e0:c9:8b:e5:9f:97:d7:74:f9:
                    27:93:49:fe:03:e0:7e:91:ce:78:90:ac:5e:74:05:
                    1a:40:c3:6e:b1:9f:1b:f1:03:da:f5:9f:bf:e4:10:
                    30:b3:74:84:84:7a:18:4f:ea:f2:ad:7b:bd:14:4f:
                    b6:08:46:dc:ad:a6:4a:49:fb:8b:fb:e6:36:bc:01:
                    b0:d8:ca:b9:96:14:d9:5f:1f:07:a5:de:56:41:7c:
                    f0:59:be:ee:e4:b5:7d:e3:b9:e6:8a:96:b8:bc:5b:
                    ec:74:8d:f9:30:70:64:38:8e:44:6f:38:d1:19:31:
                    f7:80:ac:9c:34:c5:42:58:01:13:8b:dd:43:19:d1:
                    e0:24:45:00:0c:4f:c6:3e:f8:07:28:ab:21:77:a4:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:FE:5A:9C:71:EF:8E:72:82:8E:57:4E:11:AE:10:6A:F0:73:77
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38382e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:3d:70:26:16:44:3c:ff:cd:34:60:77:95:15:82:d6:5e:
         da:66:ca:b8:59:d1:69:ab:72:4a:53:10:d6:26:64:14:62:4a:
         f6:d9:84:07:9d:99:dc:ff:d5:b6:f3:53:82:29:af:9e:af:a0:
         31:6d:2f:46:e2:75:94:5c:95:de:06:79:b5:ea:9f:da:0f:4b:
         22:47:dd:a3:a1:17:a3:85:23:3b:85:f1:ca:e7:f0:5a:c5:df:
         23:68:ca:fc:39:93:9e:33:9f:ff:64:d2:be:75:35:b8:e6:48:
         3c:cf:10:b0:bc:8d:b9:ce:44:a0:da:43:63:32:f4:17:28:23:
         58:58:72:f3:35:08:e9:68:8f:61:73:6e:6c:5c:1c:3c:b8:c2:
         84:ee:9b:ff:03:15:75:0c:b2:d9:34:2a:b5:25:16:33:05:08:
         13:89:27:c2:44:e6:69:41:eb:fd:e9:fc:b9:60:a5:d9:e3:12:
         c9:af:b3:5a:be:44:ab:41:38:39:b2:65:1c:40:d2:50:6f:1d:
         d1:ea:d5:36:0b:42:71:2d:95:11:9c:fb:c9:35:cd:bb:a2:b6:
         e3:cc:14:cc:eb:4f:77:66:12:d0:a0:d3:99:19:bb:a3:72:f6:
         1e:ba:8f:c4:7f:e1:41:d0:09:df:d2:12:e7:85:b2:eb:49:60:
         2a:7f:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:39:01 2025 by rpki-client