Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa
File:                     3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa (raw, json)
Hash identifier:          nQOejk51muCDqxEN0AUBxZa4V5M9wo5r4z0ThbAGlcA=
Subject key identifier:   04:D4:AA:79:31:92:0B:7C:6F:2E:29:40:C4:36:97:0A:65:5B:1B:FD
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       164DCE92E63ECEA9B6AC4B3F456F3AE133A82699
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa
Signing time:             Tue 04 Aug 2026 18:11:34 +0000
ROA not before:           Tue 04 Aug 2026 18:06:34 +0000
ROA not after:            Tue 03 Aug 2027 18:11:34 +0000
asID:                     61721
IP address blocks:        192.111.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 20:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4d:ce:92:e6:3e:ce:a9:b6:ac:4b:3f:45:6f:3a:e1:33:a8:26:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Aug  4 18:06:34 2026 GMT
            Not After : Aug  3 18:11:34 2027 GMT
        Subject: CN=04D4AA7931920B7C6F2E2940C436970A655B1BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ed:8a:6f:82:d8:dd:59:a7:7e:0e:35:a7:40:
                    15:76:f2:76:b2:25:fa:6e:61:b9:2c:ce:5e:79:fa:
                    70:84:9a:77:09:87:25:fb:9e:38:2e:9f:2e:56:4b:
                    b4:1b:88:da:54:aa:a0:3a:c7:22:fd:2a:c1:df:9e:
                    b5:05:79:d0:01:32:bc:14:0d:15:de:3c:72:1a:02:
                    ac:31:4a:f8:1b:fc:c2:59:0a:a0:e4:18:63:79:b5:
                    ae:05:1c:26:2f:c7:db:84:d4:bf:66:0b:bb:20:04:
                    8b:f2:4b:f7:c3:01:32:83:a1:61:90:0e:7a:a2:d8:
                    9e:3b:4d:08:f1:55:87:87:af:df:5b:a0:b6:1e:dc:
                    fa:37:fe:6f:87:a1:fd:85:e8:8c:b3:58:e9:ea:5c:
                    9b:59:e2:d4:b6:0b:92:b6:c0:ab:d4:7e:1c:8c:df:
                    b7:5a:35:aa:9f:8a:be:0f:7d:cb:02:22:6c:0c:9c:
                    a7:2e:2c:db:b3:38:07:89:f0:66:ef:43:1a:89:36:
                    b9:26:a4:e9:c5:92:98:84:4b:fb:f8:26:f1:19:23:
                    9a:2a:c6:33:aa:74:4b:42:e1:0b:8e:d7:f9:db:13:
                    4a:ca:73:3e:66:51:79:d0:7e:65:6f:40:56:c2:14:
                    20:65:30:e9:a9:4b:a5:f5:04:98:17:a4:c8:7d:63:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D4:AA:79:31:92:0B:7C:6F:2E:29:40:C4:36:97:0A:65:5B:1B:FD
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:9c:79:bb:32:66:ae:f1:7a:90:fc:3a:71:5c:53:31:bb:
         80:1e:1c:56:a5:19:89:06:39:9c:0a:76:e9:9f:ff:f9:71:2a:
         35:d7:0e:71:0f:c9:e8:4e:07:54:b1:55:10:08:b3:70:94:1d:
         64:02:5a:01:5b:b1:ec:3b:f9:3f:8d:e7:ea:fd:57:1b:ef:34:
         94:05:4a:08:56:dc:7c:d2:8b:7f:ea:37:a0:30:4f:45:c2:0f:
         06:d0:c6:a5:93:5f:b3:8d:88:61:b4:53:ee:31:46:36:fc:de:
         75:3e:08:c1:7c:45:68:ee:95:51:3c:2f:5f:3e:c7:aa:0f:e3:
         7b:94:1b:15:1d:f0:9e:94:e1:33:4f:e9:cf:c8:1f:2b:0b:df:
         b3:4f:82:ba:c4:e9:2b:a6:26:60:d6:73:a0:9e:95:59:c6:9e:
         d7:23:26:5a:b2:11:f6:43:0a:dd:e8:5b:d1:33:75:4f:b2:ff:
         bf:44:e2:91:fc:a2:1e:f3:9e:bb:12:2e:3d:c1:26:1b:4e:e1:
         fd:68:c6:32:d6:dc:9d:ca:92:62:a1:4c:ad:51:d5:a6:07:f8:
         81:21:c3:37:35:1e:ca:38:81:5a:8f:f8:1c:59:7e:a4:f1:5a:
         26:f7:ff:f4:02:bc:57:27:7f:9f:3b:c8:9d:55:95:99:2a:6b:
         f5:a7:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:15:18 2026 by rpki-client