Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e39382e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          N9TDHhUHzGrH435Ag0bhoYWel9x9FWXyFLTFs9ceE20=
Subject key identifier:   E9:6D:1B:1B:74:16:E0:6E:B7:09:9D:A5:5B:C6:31:54:61:9D:AE:C7
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       1BF56F1916A2C3097021ED2438498056EC6AD5AC
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 02 Sep 2025 18:07:09 +0000
ROA not before:           Tue 02 Sep 2025 18:02:09 +0000
ROA not after:            Tue 01 Sep 2026 18:07:09 +0000
asID:                     23074
IP address blocks:        164.85.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f5:6f:19:16:a2:c3:09:70:21:ed:24:38:49:80:56:ec:6a:d5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:02:09 2025 GMT
            Not After : Sep  1 18:07:09 2026 GMT
        Subject: CN=E96D1B1B7416E06EB7099DA55BC63154619DAEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:af:a3:87:7e:6e:ad:9d:2c:9d:6d:8a:d4:
                    a9:52:76:6f:d3:a0:8f:36:34:95:c2:a2:8f:2a:9d:
                    5d:fc:39:03:94:cc:60:5f:02:76:4f:72:61:ec:e1:
                    21:a7:21:6a:d9:de:f0:d5:d5:47:ff:06:9a:02:3c:
                    b1:30:ae:94:df:dc:7f:ca:e9:3d:a9:d0:da:20:f2:
                    3b:20:b1:30:e0:00:58:12:b2:2c:55:b9:b5:8d:d2:
                    d7:38:27:17:37:ec:49:56:cd:ff:98:04:3a:9f:f0:
                    af:61:04:d1:ab:cf:27:a1:8e:1f:83:60:73:8f:e2:
                    fb:d2:b8:47:8f:29:fc:ad:37:9d:1b:8c:0a:8b:5c:
                    d3:45:19:c9:96:e3:e8:60:46:72:6f:7d:d5:15:94:
                    bb:cf:64:80:44:ae:e6:b9:45:0f:92:80:cf:a6:f4:
                    1c:c9:ca:0a:70:19:f6:43:40:cd:8d:0c:a6:94:92:
                    54:5a:23:aa:b5:38:3c:af:db:72:44:b9:da:34:97:
                    03:5d:5f:aa:3f:d1:5a:12:5e:cf:df:ce:23:34:d5:
                    6f:de:60:49:99:19:70:6e:7b:eb:d8:24:78:f7:51:
                    5b:28:dd:5e:86:0f:ce:0e:7d:1d:bc:76:40:5a:40:
                    3a:74:f8:a8:e1:f5:06:58:4c:1f:5d:8c:ba:43:a6:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6D:1B:1B:74:16:E0:6E:B7:09:9D:A5:5B:C6:31:54:61:9D:AE:C7
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:18:88:1f:25:74:5e:90:a4:d9:16:de:45:76:5b:7b:a4:
         f5:8c:67:20:35:12:a9:73:51:30:40:1e:cd:dd:81:2f:7b:aa:
         50:ce:d2:fb:04:e6:73:ea:80:47:98:00:34:3d:e1:98:9d:43:
         b6:c2:41:d8:e1:82:4e:18:b0:4d:ec:21:dc:cd:b0:0d:84:7d:
         c1:93:2c:08:13:4d:41:f1:a1:54:48:48:bb:53:6a:f5:d9:73:
         8b:7c:6a:6a:9f:80:7b:df:f5:d3:4c:07:d2:e7:f2:11:1a:a7:
         da:98:8b:47:03:3b:c6:df:eb:05:24:35:d2:d1:b0:bb:44:64:
         23:c5:0f:2d:34:c3:57:27:82:54:63:29:a0:09:5b:6c:ee:a7:
         4b:b1:dc:33:c1:80:e6:51:49:6e:43:84:a1:c4:a6:ba:eb:fb:
         8c:66:be:dd:ec:18:6e:5b:5d:fe:cd:37:35:14:98:e6:d8:ea:
         ba:47:46:ba:bf:3d:39:e8:6f:48:dd:d7:d5:b7:24:0e:b1:3a:
         c0:81:69:fb:60:9c:d4:b2:97:df:db:17:b4:f8:6f:1c:e9:67:
         e9:76:c7:65:9f:e1:8d:b6:ec:1d:72:8e:24:80:4a:12:e8:2c:
         da:35:a6:a7:f8:28:a8:f9:76:25:b3:2b:c4:d4:35:a8:29:4c:
         99:ba:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:49:22 2025 by rpki-client