Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e39382e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          Ae4RqkxDW8IpDVfm1qKJlo50cw/OKWn1uTzvYSYnS7E=
Subject key identifier:   12:EF:D8:0E:C9:54:A5:91:86:3E:D9:9B:5A:6A:3F:E3:77:E9:89:E0
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       7AC6F92D245E11AAA2FC211E5B662508DD16814D
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa
Signing time:             Tue 04 Aug 2026 18:11:34 +0000
ROA not before:           Tue 04 Aug 2026 18:06:34 +0000
ROA not after:            Tue 03 Aug 2027 18:11:34 +0000
asID:                     23074
IP address blocks:        164.85.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 03:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c6:f9:2d:24:5e:11:aa:a2:fc:21:1e:5b:66:25:08:dd:16:81:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 18:06:34 2026 GMT
            Not After : Aug  3 18:11:34 2027 GMT
        Subject: CN=12EFD80EC954A591863ED99B5A6A3FE377E989E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:5e:ed:47:50:98:40:ad:d0:c7:7a:64:70:
                    4d:27:4c:f0:f8:d7:10:b3:7f:31:5f:21:8d:10:46:
                    0f:e2:0c:7a:9d:49:3b:34:e1:31:72:f7:2f:27:a8:
                    ed:a8:b4:2b:12:3b:66:a9:40:b6:aa:d6:92:2a:d9:
                    2c:ad:f0:c8:38:0e:bd:27:95:39:05:53:6a:ce:e4:
                    c5:a7:23:2a:17:42:39:9f:59:97:f0:d1:2a:d8:b2:
                    26:0b:a9:20:2d:fd:f7:b6:30:94:18:b7:eb:1f:34:
                    84:5c:37:66:1e:22:1d:f8:9e:df:02:3e:b6:06:cf:
                    60:8e:22:2e:31:84:94:28:2d:6a:27:02:95:92:bb:
                    4c:10:38:1c:49:f5:d4:9c:6f:40:fe:4a:18:43:2f:
                    cf:8c:28:78:04:46:58:95:17:dd:6f:77:a4:ac:0b:
                    2c:f1:af:9a:24:f0:ef:39:40:d5:b3:1d:61:b4:d7:
                    95:b9:65:0c:89:23:f3:0f:70:e5:2b:f5:6c:b2:03:
                    4e:52:b7:39:c5:c4:5d:9d:3f:8f:a4:25:4a:a2:eb:
                    cd:50:61:b6:d6:c0:60:e0:6a:24:53:5b:25:02:ee:
                    bb:cc:a3:4a:7b:d9:96:ec:e4:16:96:15:7d:11:f1:
                    1c:1c:de:bd:60:f3:59:98:7e:25:c3:86:d1:71:63:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EF:D8:0E:C9:54:A5:91:86:3E:D9:9B:5A:6A:3F:E3:77:E9:89:E0
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:fa:a7:85:c4:72:32:3e:c3:70:eb:a7:b6:17:b7:61:fb:
         96:91:28:71:0f:5a:af:82:64:19:38:da:7c:a5:33:18:94:5e:
         63:35:0d:f3:2c:4f:b7:e1:e2:5a:96:65:76:c0:47:d9:13:35:
         4e:8b:4b:01:71:75:3d:16:96:e8:7d:a5:07:91:ba:08:8d:b1:
         26:83:6c:d5:66:7a:49:a9:35:c2:e4:de:00:31:32:2c:84:f4:
         b8:1f:20:6d:f9:85:2f:98:be:7e:57:82:ed:a9:2d:a8:58:bc:
         e5:fe:06:41:ce:1b:e6:66:47:fe:69:af:a6:fb:8d:42:f7:43:
         18:13:5b:27:f8:2d:25:e2:d0:c6:a3:8d:77:be:5e:19:ea:a3:
         3f:13:f4:3f:47:5f:f0:69:a0:d7:a0:c1:c9:ca:36:0f:ea:8e:
         af:4d:5f:cc:3d:79:34:75:13:9e:30:ae:22:64:72:75:5d:c6:
         05:ce:63:05:97:07:97:68:93:17:23:3e:8f:6c:48:aa:b5:12:
         ed:17:8b:4b:56:33:31:56:e2:d5:e3:51:64:fe:37:0d:82:3c:
         e7:55:13:fd:e8:7e:e7:27:ee:c5:b8:fb:5d:a2:9e:fc:f3:78:
         20:a1:65:40:88:08:03:95:73:61:ae:e7:a1:9f:d5:cc:5f:9e:
         ed:29:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:30 2026 by rpki-client