Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39362e302f32302d3230203d3e203233303734.roa
File:                     3136342e38352e39362e302f32302d3230203d3e203233303734.roa (raw, json)
Hash identifier:          EfrrZbKw93VdGj+cWWDDN7dOGdZOrlXy7HXzMlUg8ZI=
Subject key identifier:   9D:89:EA:6A:A3:7E:8D:A8:41:88:7D:56:8A:F9:26:CE:80:F7:C7:D8
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       312AC5A7D8CE16326639AD787DD8E32F66ED4D73
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39362e302f32302d3230203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 19:11:36 +0000
ROA not before:           Tue 04 Aug 2026 19:06:36 +0000
ROA not after:            Tue 03 Aug 2027 19:11:36 +0000
asID:                     23074
IP address blocks:        164.85.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2a:c5:a7:d8:ce:16:32:66:39:ad:78:7d:d8:e3:2f:66:ed:4d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 19:06:36 2026 GMT
            Not After : Aug  3 19:11:36 2027 GMT
        Subject: CN=9D89EA6AA37E8DA841887D568AF926CE80F7C7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:0d:c4:22:bc:8c:b7:f6:bd:cf:e2:a8:dc:
                    14:64:d8:db:e1:50:3c:7f:d0:29:d8:f8:49:90:34:
                    d3:11:de:a7:37:05:5e:61:16:16:26:1f:7c:93:13:
                    d5:14:b0:d8:d7:d9:4a:a5:27:e5:aa:fd:33:52:36:
                    d2:d5:ea:fa:e2:45:9a:13:6e:08:35:28:8b:77:1a:
                    e6:c8:8b:5c:f4:18:24:49:e4:d6:d3:5a:6a:6a:16:
                    c2:28:94:a8:b9:14:56:41:22:3e:29:22:b4:c7:12:
                    09:56:42:17:35:41:b6:e9:aa:d9:f8:c1:29:95:fb:
                    39:e6:66:60:3e:a3:6a:48:cd:66:ce:3e:f1:c5:1a:
                    c4:e6:24:1e:ed:07:2b:17:7e:77:7e:c6:d1:1c:e5:
                    bb:93:85:6f:a1:fa:da:42:ef:06:63:4a:aa:ce:6c:
                    54:bf:4c:2e:a6:4c:68:27:d5:ce:f6:27:04:ad:2f:
                    cc:8e:f4:95:98:35:f3:80:aa:9e:e4:bc:fa:28:d6:
                    4a:67:2c:2d:df:5f:9d:a4:20:6c:ff:8d:c4:e8:24:
                    23:64:0b:be:1b:be:e4:16:16:fc:11:03:56:a8:cb:
                    5d:5e:f1:42:5c:d1:f8:f7:5c:93:47:5b:39:88:8f:
                    d2:d1:2f:82:f0:7f:5c:a0:fe:94:cf:68:d4:6d:b8:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:89:EA:6A:A3:7E:8D:A8:41:88:7D:56:8A:F9:26:CE:80:F7:C7:D8
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39362e302f32302d3230203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:30:42:39:56:c0:87:18:24:5c:bf:61:51:e7:be:5f:d6:
         9f:14:71:77:32:e9:9d:d2:96:34:2e:4b:72:81:18:5b:3a:81:
         02:fc:75:53:70:40:ed:ff:04:6f:bc:86:db:15:70:72:1c:ec:
         76:e5:06:0c:4e:30:7f:7d:37:71:dc:5e:a6:73:1d:7a:12:e7:
         8d:d6:8a:05:6b:0c:91:5b:92:1e:71:dd:b9:e8:2d:5e:50:b2:
         7e:71:03:eb:0d:7f:d7:be:c2:f2:3f:41:3d:2b:d0:a0:e1:5b:
         05:dc:49:12:87:a1:28:e6:a9:2a:1f:6d:de:fa:86:ec:19:05:
         9e:73:f2:b5:7a:fb:58:0d:18:fc:b4:ed:38:97:a1:1d:c7:b2:
         27:29:94:5e:51:c2:a2:40:69:82:8d:e9:1f:60:0e:4f:e0:ec:
         d6:b6:b4:d0:d4:fe:07:97:2f:97:70:fe:33:76:8a:eb:95:77:
         e5:63:02:1e:2c:a0:34:3f:36:c6:07:45:c2:3c:a4:2b:ad:e3:
         21:3a:47:8e:35:33:83:5a:45:0d:81:5a:4b:88:28:82:77:8b:
         4a:5b:80:12:a0:4d:52:54:2c:69:ee:71:52:61:d7:57:62:88:
         df:19:3b:a2:9c:dd:ad:e7:88:a1:7a:94:53:ac:af:01:22:25:
         57:6d:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:39 2026 by rpki-client