Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39302e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e39302e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          Wszq0qJ33cFrlCk71S5jbOdOOsZITlCJ+ccfIfqGo28=
Subject key identifier:   D4:05:77:83:D0:2D:11:BC:A1:30:AB:D4:95:BB:08:F9:83:6C:B4:BA
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       61ADEEFF91B292FC0B6FC70CE53A29C68731B0F0
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39302e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 19:11:36 +0000
ROA not before:           Tue 04 Aug 2026 19:06:36 +0000
ROA not after:            Tue 03 Aug 2027 19:11:36 +0000
asID:                     23074
IP address blocks:        164.85.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ad:ee:ff:91:b2:92:fc:0b:6f:c7:0c:e5:3a:29:c6:87:31:b0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 19:06:36 2026 GMT
            Not After : Aug  3 19:11:36 2027 GMT
        Subject: CN=D4057783D02D11BCA130ABD495BB08F9836CB4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:3a:81:df:39:01:66:eb:51:7b:e5:c1:8a:
                    be:41:1f:35:53:30:87:1f:3d:aa:25:4d:68:56:20:
                    3c:3d:35:35:e7:f8:3e:2b:3f:c5:17:df:2a:d1:6a:
                    f0:ab:90:7d:47:32:73:5f:63:03:60:10:17:ca:9f:
                    44:22:69:f8:b6:ac:b6:c7:cf:a7:59:ff:84:94:42:
                    83:ef:bf:99:ce:23:15:85:45:31:c3:87:20:6c:91:
                    67:07:79:9d:38:06:4b:9e:89:d7:cc:45:83:b0:cf:
                    4c:3e:7a:b3:ab:a2:9f:32:dc:71:6f:b7:21:64:60:
                    14:bc:61:09:d2:59:63:9a:ee:84:f1:11:88:dd:82:
                    3c:75:ce:1c:27:27:0f:63:6c:51:af:13:91:87:73:
                    4b:df:21:c1:cd:e9:65:f0:59:90:76:72:00:c9:d5:
                    f8:c1:de:9c:a1:56:f3:95:7a:69:95:41:ce:30:6c:
                    23:cc:53:ba:a1:fb:02:35:12:f7:41:da:42:7a:b9:
                    18:b5:0f:19:8b:82:71:e3:49:6a:db:7d:9e:b1:a0:
                    24:0b:1c:eb:82:d3:fe:c1:c9:d4:4a:ec:60:32:8e:
                    45:21:e1:fb:33:72:19:5d:05:ad:fd:2c:9c:30:bc:
                    3e:4d:d8:fa:1f:f1:1c:a2:41:4a:e5:35:7b:eb:e6:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:77:83:D0:2D:11:BC:A1:30:AB:D4:95:BB:08:F9:83:6C:B4:BA
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39302e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:7e:87:a7:b6:e0:df:db:29:87:ca:c5:33:06:71:74:d6:
         9f:67:68:b9:5c:36:e1:df:b6:de:84:80:a5:b4:54:c0:31:47:
         a2:ce:43:9e:04:8e:f8:2e:d3:9c:e8:ad:e5:7d:fa:08:e8:cb:
         5d:d8:cf:d1:f6:27:52:f8:65:3c:a9:14:c1:ed:d7:ef:05:3d:
         41:41:27:2a:c9:a3:53:a4:ed:17:8b:38:bd:e3:1b:09:9d:e9:
         c0:b0:05:5e:41:8f:64:2a:bf:c6:e7:2d:ee:2c:7b:5c:55:c5:
         be:c1:c0:97:96:d1:13:b7:27:1a:9e:af:73:dc:a1:23:a1:ed:
         d5:35:63:c2:7e:99:26:91:9b:a0:8a:74:ca:12:32:bb:68:3c:
         fe:bd:ee:4f:af:e7:30:34:3b:83:82:09:9b:0c:f2:c0:c5:ed:
         73:5a:46:35:26:34:e1:e0:4b:fa:ae:35:fe:6b:a3:9d:eb:1a:
         70:03:89:4f:37:ed:fa:9b:6d:54:3c:fc:d0:2f:2f:19:37:62:
         93:e2:3a:ec:cf:93:60:27:d4:64:9a:a7:f1:6a:e9:9c:6a:13:
         62:00:5e:70:94:3c:7b:3d:b7:38:76:60:a0:f3:2b:fc:d0:de:
         e4:89:28:1a:5f:0b:f0:e1:95:61:24:ad:7f:ab:55:9d:b2:31:
         e9:11:f2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:37 2026 by rpki-client