Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f32302d3230203d3e203233303734.roa
File:                     3136342e38352e302e302f32302d3230203d3e203233303734.roa (raw, json)
Hash identifier:          jvU3TvMmlrbrOJHVFaaIR9Wefcc1vY4d+qOsQYogwvI=
Subject key identifier:   37:AC:79:FB:C1:A8:69:85:2F:A4:B7:64:6E:1E:73:86:20:AD:34:C2
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       2C1B818FE96DB9C46223B7CE4E8E5443F9838F4C
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f32302d3230203d3e203233303734.roa
Signing time:             Tue 22 Jul 2025 14:53:02 +0000
ROA not before:           Tue 22 Jul 2025 14:48:02 +0000
ROA not after:            Tue 21 Jul 2026 14:53:02 +0000
asID:                     23074
IP address blocks:        164.85.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1b:81:8f:e9:6d:b9:c4:62:23:b7:ce:4e:8e:54:43:f9:83:8f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 22 14:48:02 2025 GMT
            Not After : Jul 21 14:53:02 2026 GMT
        Subject: CN=37AC79FBC1A869852FA4B7646E1E738620AD34C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:e7:88:08:9d:20:72:40:76:c1:7e:87:a1:
                    fd:fd:54:aa:2b:b9:54:76:3d:0f:be:1a:60:ea:65:
                    3c:01:ef:df:ac:e1:a9:87:e6:9e:3f:c5:5a:be:62:
                    ee:6e:06:17:25:85:ac:1f:de:54:14:1f:73:50:1b:
                    d5:82:cc:e4:0c:bd:9d:43:26:b8:9e:64:74:75:02:
                    66:94:b5:74:19:2b:7e:d3:d2:dc:83:a5:58:ae:d3:
                    99:c1:20:be:c4:53:1a:a8:47:35:af:e2:b0:e7:4f:
                    54:d6:62:d9:81:cd:71:7e:88:f3:b8:47:59:10:8a:
                    f1:74:3a:b7:5b:4c:8a:5c:b1:14:e9:5d:14:db:4e:
                    02:e3:68:0f:cd:39:31:da:a3:9f:9e:19:d6:d0:4d:
                    4b:c7:33:d0:39:19:f9:a0:bd:5b:04:32:57:ab:c8:
                    12:62:28:56:c6:39:a0:f8:b6:0b:fd:9f:ce:62:b0:
                    89:1d:5c:bc:70:22:c7:7e:5b:5a:02:b6:8f:64:e4:
                    56:4d:ec:1e:31:80:69:65:99:60:dc:41:16:ae:d9:
                    1f:4c:9a:3a:8a:8a:2d:b1:09:d0:33:06:31:24:fa:
                    c8:98:94:ec:9a:0a:4d:58:a7:79:34:e6:c4:15:46:
                    f9:e9:76:4b:3f:e2:52:98:7d:62:55:92:c4:cb:0f:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:79:FB:C1:A8:69:85:2F:A4:B7:64:6E:1E:73:86:20:AD:34:C2
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e302e302f32302d3230203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:b2:88:0a:b1:33:4b:fd:d4:e6:47:7a:9b:b8:3d:8b:37:
         3b:15:ad:0b:d5:a4:fb:c6:77:99:77:44:59:10:cc:d9:a5:00:
         8f:d7:ae:e9:0e:88:71:35:71:db:3f:02:d9:4a:c0:4d:cb:d8:
         a3:04:6c:f5:db:20:8b:9b:2d:57:91:b8:ce:5d:04:21:77:9e:
         97:e1:b3:c7:dd:51:53:80:0a:2b:0b:cd:ac:7e:4d:1b:3a:7e:
         51:91:81:2c:21:94:92:35:9f:e8:4e:a9:40:b0:c6:1e:91:28:
         7f:68:5c:c8:1d:a2:53:34:7f:17:dc:23:0b:88:58:42:76:6b:
         c6:cf:65:f2:10:7d:58:78:74:3e:b3:72:01:69:87:30:bc:8d:
         34:ab:8b:af:33:99:38:81:96:3b:74:37:74:fd:e6:f5:85:55:
         d8:72:46:a9:2b:6b:ba:3f:19:2f:92:20:a8:42:9a:13:e2:bb:
         58:71:69:bc:d0:b6:a3:52:7a:fa:3f:37:d7:e1:cb:ef:1f:5b:
         a0:3f:5c:f2:aa:f0:32:08:82:be:b1:80:1c:0b:2b:39:cf:5b:
         9f:6a:b6:32:80:7d:e3:f7:d5:6e:d0:e7:83:9e:06:2f:aa:e0:
         46:ac:90:75:66:1b:be:26:21:68:40:9f:f6:5e:54:cb:03:4b:
         13:b7:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:50:11 2025 by rpki-client