Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f31362d3136203d3e203233303734.roa
File:                     3136342e38352e302e302f31362d3136203d3e203233303734.roa (raw, json)
Hash identifier:          KdUm9FQR4Ot+yPjs8vpq/RNPFLknSld6AcKO8qqXDEA=
Subject key identifier:   F5:38:B4:0B:7C:97:4A:04:B2:62:B6:57:7C:F3:94:95:81:14:0F:B3
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       52960B237A0A131CEC2BFB9F0CE96FA1237796CC
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f31362d3136203d3e203233303734.roa
Signing time:             Tue 22 Jul 2025 14:52:45 +0000
ROA not before:           Tue 22 Jul 2025 14:47:45 +0000
ROA not after:            Tue 21 Jul 2026 14:52:45 +0000
asID:                     23074
IP address blocks:        164.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:96:0b:23:7a:0a:13:1c:ec:2b:fb:9f:0c:e9:6f:a1:23:77:96:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 22 14:47:45 2025 GMT
            Not After : Jul 21 14:52:45 2026 GMT
        Subject: CN=F538B40B7C974A04B262B6577CF3949581140FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:4c:43:0b:d3:63:bc:28:0c:55:ae:e6:10:
                    a1:a2:ec:ba:9b:bc:56:dc:58:b1:4a:69:9d:85:03:
                    e5:47:c1:c3:1d:f3:ad:19:dd:ae:a9:fd:af:77:d0:
                    01:82:38:a8:00:e5:3e:55:f9:b9:ed:89:ed:22:48:
                    b7:d1:4c:4b:ad:2c:93:5d:3b:82:ac:e0:8d:b3:b6:
                    b0:77:73:d0:db:7b:61:ff:70:18:02:01:12:d4:54:
                    fa:3d:37:58:36:66:1c:bb:13:be:64:2e:ed:9b:ec:
                    67:05:48:24:f5:65:ed:b1:78:ae:e0:fd:be:aa:af:
                    30:b4:4f:eb:f9:fb:1d:50:71:29:ad:2e:0a:54:d2:
                    42:35:5f:26:30:b7:3f:94:d1:f8:8a:01:ab:c3:51:
                    8a:1d:82:84:23:4c:f2:96:4d:90:f6:a4:66:76:32:
                    0c:7f:18:9c:02:f9:42:b6:00:5d:84:8f:91:a2:42:
                    5e:a5:b9:15:66:68:83:0f:24:93:8e:95:7c:d9:4b:
                    32:75:bd:2b:db:4d:08:8d:71:28:5f:07:b9:e0:38:
                    b8:60:ea:b4:03:85:f0:26:68:09:59:bc:20:b7:13:
                    10:63:20:f4:50:21:b3:2b:36:86:ee:41:13:37:e4:
                    77:f9:d7:ba:8e:d7:d4:a4:12:a1:f4:8f:61:ac:82:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:38:B4:0B:7C:97:4A:04:B2:62:B6:57:7C:F3:94:95:81:14:0F:B3
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f31362d3136203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:76:cc:f2:77:89:b0:e2:69:dd:85:a3:dd:d0:8e:cd:f2:cc:
         12:99:9e:c7:a3:e8:16:aa:c8:ac:55:3f:18:a9:f4:e6:24:5c:
         32:fa:8f:8f:02:91:f0:c8:b3:51:52:10:e1:78:71:d1:cb:88:
         d2:55:c6:99:5b:aa:38:a8:22:d6:8e:1b:9e:e8:3a:ce:66:8c:
         fa:e8:c7:84:ef:d2:3b:07:8b:e7:e4:e1:69:7b:13:84:56:b1:
         67:48:b7:93:5d:e5:01:56:4b:ce:e7:10:ec:c5:0c:31:69:85:
         88:85:93:bd:95:a2:e3:0b:dc:01:83:78:80:47:ca:43:b0:b9:
         60:89:de:88:fb:d2:a0:68:01:33:39:91:07:02:35:48:5c:75:
         28:fb:96:23:9f:f9:32:3c:a3:5b:4d:27:ea:22:d3:ca:c0:06:
         22:1e:4c:9a:cb:9f:78:2a:6f:6d:12:bc:97:25:c2:2e:25:4c:
         8a:cd:6b:b0:08:e1:bc:78:cc:8e:26:15:2c:d1:c6:45:d6:54:
         0e:4b:21:9a:96:e6:b5:66:e0:b4:9d:06:5a:9b:a8:a6:23:f1:
         88:52:bc:e1:8c:f3:a2:a9:62:40:35:e0:e5:1b:09:ed:41:04:
         fd:dd:0c:5f:72:a8:d0:24:28:8e:a9:fe:58:84:0f:5b:29:9f:
         5e:0b:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:45:13 2025 by rpki-client