Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39302e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e39302e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          AUvvOEEZI/fVoGqWbT32T94rnXtHtBJb5b6n+Anbmj4=
Subject key identifier:   18:10:F4:59:AF:8C:E4:E0:C7:E4:20:43:1D:64:AE:63:67:4D:61:37
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       61C5C4369932F85977E4FD3396C1DB061CFEB553
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39302e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 19:00:50 +0000
ROA not before:           Tue 02 Sep 2025 18:55:50 +0000
ROA not after:            Tue 01 Sep 2026 19:00:50 +0000
asID:                     23074
IP address blocks:        164.85.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c5:c4:36:99:32:f8:59:77:e4:fd:33:96:c1:db:06:1c:fe:b5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:55:50 2025 GMT
            Not After : Sep  1 19:00:50 2026 GMT
        Subject: CN=1810F459AF8CE4E0C7E420431D64AE63674D6137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:1f:bd:48:2d:4a:da:0c:a9:e2:0a:d7:bc:
                    68:a9:e1:0e:33:9c:3b:fa:95:5e:b9:6c:f1:35:4d:
                    19:0f:1e:55:40:46:a8:0d:3a:4a:06:51:e8:a8:7d:
                    4d:63:6c:90:99:b1:9e:da:e6:30:29:ed:66:0b:39:
                    4c:e6:fa:c6:c8:8d:f5:50:92:c0:65:53:f1:f5:f3:
                    c6:02:df:bb:00:be:9e:95:5b:4d:34:86:b2:74:07:
                    6a:b9:c9:b1:6e:77:c8:16:f6:1d:4d:68:d8:83:fc:
                    41:da:22:26:09:4b:d5:e0:c3:3c:48:42:cf:90:b1:
                    b7:81:27:01:ba:3c:b7:3e:bb:05:d3:56:6e:c3:90:
                    8a:d2:db:6b:d5:af:54:a8:82:4e:9a:ab:2c:a6:1b:
                    06:38:a7:3e:63:55:58:1a:47:39:7c:0e:79:ff:a9:
                    15:9c:cd:40:67:1f:c6:4a:bf:24:8d:f2:14:d5:04:
                    ab:14:28:e7:8e:35:74:55:5f:32:af:43:71:dd:ee:
                    96:fa:54:92:52:a2:37:5e:fe:6f:f1:67:59:0c:ff:
                    bb:35:95:80:a5:0a:4d:9b:fd:ac:36:b7:54:b2:7a:
                    1b:2c:4f:66:91:3f:89:19:93:f4:53:60:91:9e:12:
                    46:8a:af:af:08:c1:74:02:3a:8c:d4:f2:ac:46:19:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:F4:59:AF:8C:E4:E0:C7:E4:20:43:1D:64:AE:63:67:4D:61:37
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39302e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:dd:68:60:ea:79:15:51:18:7d:85:55:4d:96:c8:57:1f:
         38:55:fa:62:af:97:6f:96:bc:08:d5:06:89:d6:11:1f:a9:e1:
         ed:30:6f:88:15:d6:47:57:89:ff:98:ed:b8:a0:f0:84:ec:93:
         04:87:ce:b7:fd:b4:8a:ea:2d:14:b0:ac:ae:ae:d0:a4:95:16:
         40:a6:c4:4d:20:71:78:42:f6:e1:40:b6:04:f2:23:06:d4:5a:
         a6:35:ee:32:2c:4f:96:05:70:d4:48:65:f2:12:2f:c0:90:13:
         44:2b:73:0c:f3:7c:27:34:a0:16:f9:d1:cb:9b:96:37:d3:44:
         be:4e:55:e6:c4:12:ef:da:b8:ab:59:95:f5:69:27:68:f7:19:
         60:b9:02:27:19:d1:c1:8c:9d:9b:78:5f:32:13:54:a5:38:fb:
         1e:2c:d4:05:0c:38:45:69:5a:01:68:b1:20:57:fe:f0:8a:79:
         e2:9b:ce:39:dd:8b:48:57:9d:8f:fd:35:0f:59:4a:9c:84:24:
         a9:e7:ea:2d:05:e5:47:e6:3a:22:04:4f:d9:a7:00:a8:06:a2:
         38:be:79:a7:a0:5c:67:18:8f:37:a7:40:cc:ce:54:00:1d:7d:
         e8:6a:0e:5b:bb:88:62:00:22:66:55:77:20:c1:98:e2:04:0d:
         a2:27:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:35:08 2025 by rpki-client