Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31362e302f32322d3232203d3e203233303734.roa
File:                     3136342e38352e31362e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier:          mtIL6ZBgahMQ0PpUlbtPA6+NH3bSqhynbY8ggunhKgY=
Subject key identifier:   90:BA:D8:33:FB:14:FA:EE:64:00:4B:59:00:06:B8:CC:C7:B7:EF:37
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       6926713052248D76E22EE88ADE47C77A659C6B71
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31362e302f32322d3232203d3e203233303734.roa
Signing time:             Tue 22 Jul 2025 14:53:31 +0000
ROA not before:           Tue 22 Jul 2025 14:48:31 +0000
ROA not after:            Tue 21 Jul 2026 14:53:31 +0000
asID:                     23074
IP address blocks:        164.85.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:26:71:30:52:24:8d:76:e2:2e:e8:8a:de:47:c7:7a:65:9c:6b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 22 14:48:31 2025 GMT
            Not After : Jul 21 14:53:31 2026 GMT
        Subject: CN=90BAD833FB14FAEE64004B590006B8CCC7B7EF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:64:97:bd:c6:a7:f4:c4:9f:83:30:dc:32:
                    d8:ec:9c:76:0d:61:64:c4:bc:87:75:5a:6c:06:52:
                    f0:1b:67:c6:46:d3:06:48:cf:e0:5c:73:fc:3c:d3:
                    9b:e0:bc:a0:d8:f1:f6:67:81:cd:6f:53:cf:3f:a2:
                    21:91:2a:f7:fc:ad:6a:99:f9:24:3e:aa:cd:29:ec:
                    92:f4:dc:01:f6:45:29:6a:6f:94:f6:2e:ce:55:9d:
                    c6:68:1a:7c:2f:b5:1c:80:c4:0c:72:2c:48:9f:99:
                    b0:34:9a:22:c9:45:08:d3:56:80:71:22:21:12:08:
                    24:d9:a3:a5:e8:54:78:47:3e:03:c6:7a:b6:5c:2c:
                    4e:42:2b:f2:b7:2a:14:c9:32:11:f3:c1:a8:5a:13:
                    03:82:9c:21:a0:22:27:29:b1:53:46:b1:b4:8d:4f:
                    15:54:db:c0:24:5b:dc:49:f5:1f:35:dd:4b:b7:03:
                    03:92:ff:e4:a5:72:0e:d7:b6:19:8e:cc:41:a7:59:
                    5a:34:99:56:1e:a6:15:16:ba:b2:24:e9:34:48:be:
                    79:d6:91:c8:be:4b:92:c2:93:9a:6f:65:0f:14:55:
                    4c:6f:db:50:71:12:b9:e1:f4:2f:9b:84:32:9e:13:
                    e4:37:74:23:8f:d0:58:4d:45:2b:15:96:02:34:a2:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BA:D8:33:FB:14:FA:EE:64:00:4B:59:00:06:B8:CC:C7:B7:EF:37
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e31362e302f32322d3232203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:c9:59:1a:3e:f1:12:d1:9d:7c:55:86:b6:72:59:18:20:
         a5:ad:1d:db:f7:b4:ea:26:74:48:70:f2:59:d2:d5:54:06:4d:
         36:71:90:3c:2a:14:be:23:56:92:a7:83:b4:35:26:cd:c8:80:
         fa:bd:cb:cd:0c:6e:34:e0:86:7a:05:f3:08:5a:86:22:2b:eb:
         01:05:14:55:f5:80:53:e0:3e:d6:a0:48:d0:41:37:f3:1c:43:
         79:d6:93:7c:e8:13:2c:f4:92:8f:8f:5a:b6:8e:d6:eb:5a:4f:
         50:e6:a6:df:d4:e1:df:fd:e5:ac:6d:5f:a4:e5:9e:f4:e6:56:
         88:9d:c3:f5:99:96:96:3c:80:c4:4e:7d:9b:fa:45:d6:01:e7:
         e9:8e:4c:5e:4d:94:9d:31:78:cc:89:82:0a:31:d1:77:01:68:
         d1:02:28:7c:63:6f:4b:2b:3d:79:c1:05:8f:61:cc:db:5c:a5:
         76:3e:ab:20:5c:80:f1:05:64:ed:d4:8d:bc:47:03:0a:1c:ca:
         e7:34:32:84:34:9f:66:56:ee:9e:81:f0:7f:5d:37:96:67:1e:
         ee:8f:fc:2e:d3:43:d2:e5:db:1b:20:24:a0:20:2d:d1:e4:e2:
         07:53:8e:99:a7:cb:83:05:0a:1f:f7:ab:b9:6a:b2:10:ce:76:
         ea:ff:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:02 2025 by rpki-client