Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e32302e302f32322d3232203d3e203233303734.roa
File:                     3136342e38352e32302e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier:          VWFBw/vznfjwrO5siPawFVWJBlnGOGlPP4xySmvGFDs=
Subject key identifier:   D5:A1:65:3D:49:11:B0:BF:5A:19:B7:7E:97:C4:20:5F:E4:21:19:F8
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       3AE422406A617B9E5D2EED828A85ACBAE34EF00A
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e32302e302f32322d3232203d3e203233303734.roa
Signing time:             Tue 22 Jul 2025 14:53:41 +0000
ROA not before:           Tue 22 Jul 2025 14:48:41 +0000
ROA not after:            Tue 21 Jul 2026 14:53:41 +0000
asID:                     23074
IP address blocks:        164.85.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e4:22:40:6a:61:7b:9e:5d:2e:ed:82:8a:85:ac:ba:e3:4e:f0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 22 14:48:41 2025 GMT
            Not After : Jul 21 14:53:41 2026 GMT
        Subject: CN=D5A1653D4911B0BF5A19B77E97C4205FE42119F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:6c:bf:3e:40:19:a6:a3:ed:b4:07:62:a0:
                    2c:03:ed:7e:78:54:6a:14:12:93:42:83:3b:41:01:
                    4e:72:e6:38:e3:fd:d0:67:00:78:36:23:21:8f:94:
                    e2:ab:d2:5c:46:9c:c1:61:f9:ef:ff:e3:2c:5b:6c:
                    c8:24:d8:36:37:18:5c:f0:67:86:24:a9:54:b0:c4:
                    cd:b7:c7:3b:63:2e:bf:bb:0f:90:8c:37:da:e6:4f:
                    be:0c:8f:44:02:02:1c:ef:f1:37:59:b5:1f:03:15:
                    2a:89:fd:af:51:52:8d:cb:07:de:0e:1d:71:93:a2:
                    64:52:25:89:d9:5a:7b:51:45:68:a8:f8:93:50:cb:
                    bb:a3:06:f4:74:82:76:af:2e:ee:86:0c:a8:b4:ea:
                    0f:24:54:42:d0:cf:a7:50:34:0f:0e:bf:74:ae:b4:
                    da:66:da:57:33:d3:3f:27:9c:1f:aa:dd:5e:1c:65:
                    80:af:dc:b6:a0:67:52:d1:d6:88:64:60:d4:d3:eb:
                    7b:ed:b4:a5:46:cc:37:bd:f2:e4:0e:b9:43:bc:15:
                    fe:17:9a:88:99:df:93:5e:64:5a:ab:c3:6c:9d:23:
                    4c:07:3b:11:80:67:6b:78:ce:1c:ef:f2:65:ac:ee:
                    a6:67:67:71:9e:bd:2d:2e:49:d0:2d:e9:4f:e6:2e:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A1:65:3D:49:11:B0:BF:5A:19:B7:7E:97:C4:20:5F:E4:21:19:F8
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e32302e302f32322d3232203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:5b:0b:99:92:99:de:9d:a8:ff:ab:a6:bc:38:98:de:91:
         f6:ef:69:a0:0c:8b:fb:d5:36:a6:1d:04:40:5c:a7:58:72:c3:
         98:6f:58:16:8a:53:1e:a5:6e:e9:37:38:6c:26:70:f0:07:2b:
         7a:04:39:d7:8e:00:e8:bc:37:b8:f3:bd:41:17:9f:25:c7:62:
         b2:8c:3d:6d:9d:9f:09:74:57:92:ae:7f:36:fb:8e:66:32:0b:
         f3:8a:78:a4:b1:15:06:c8:47:d0:65:b6:fb:44:ff:61:d8:7f:
         1a:02:62:29:35:af:2f:b1:8a:e8:ab:2c:4e:81:1f:c7:02:df:
         d0:bd:f0:c6:8b:79:4b:5d:bd:76:96:92:8a:9e:1b:9b:d7:b3:
         62:aa:b1:2c:9c:a9:7e:57:d6:c1:04:87:6e:a4:74:c4:a6:ed:
         11:3b:34:4b:86:14:d8:6f:02:1e:22:e0:7a:20:1c:8a:8a:47:
         ad:c6:e6:45:f8:c2:43:a7:2f:fb:b6:a7:ef:b2:c3:4b:83:e3:
         a4:7a:0d:a1:94:b0:8f:8b:1c:27:65:5f:a0:57:64:71:4c:29:
         4a:09:7f:71:5e:e3:4c:7b:1e:7d:d3:56:5d:e0:60:6f:b0:b1:
         4e:18:b4:c1:dd:e1:40:28:84:90:6c:92:70:32:b7:26:b9:e1:
         50:ab:6f:c2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOuQiQGphe55dLu2CioWsuuNO8AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNjE0RTNGQUEyNUYzMUE1NkU5Q0YyRkVBNDc5QjFD
RjA4MDk1RDAeFw0yNTA3MjIxNDQ4NDFaFw0yNjA3MjExNDUzNDFaMDMxMTAvBgNV
BAMTKEQ1QTE2NTNENDkxMUIwQkY1QTE5Qjc3RTk3QzQyMDVGRTQyMTE5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa42y/PkAZpqPttAdioCwD7X54
VGoUEpNCgztBAU5y5jjj/dBnAHg2IyGPlOKr0lxGnMFh+e//4yxbbMgk2DY3GFzw
Z4YkqVSwxM23xztjLr+7D5CMN9rmT74Mj0QCAhzv8TdZtR8DFSqJ/a9RUo3LB94O
HXGTomRSJYnZWntRRWio+JNQy7ujBvR0gnavLu6GDKi06g8kVELQz6dQNA8Ov3Su
tNpm2lcz0z8nnB+q3V4cZYCv3LagZ1LR1ohkYNTT63vttKVGzDe98uQOuUO8Ff4X
moiZ35NeZFqrw2ydI0wHOxGAZ2t4zhzv8mWs7qZnZ3GevS0uSdAt6U/mLn49AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU1aFlPUkRsL9aGbd+l8QgX+QhGfgwHwYDVR0j
BBgwFoAU0MYU4/qiXzGlbpzy/qR5sc8ICV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC9EMEM2MTRFM0ZBQTI1RjMxQTU2RTlDRjJGRUE0NzlCMUNGMDgwOTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzYxNEUzRkFBMjVGMzFB
NTZFOUNGMkZFQTQ3OUIxQ0YwODA5NUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzNjM0MmUzODM1MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzMw
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqRVFDANBgkqhkiG9w0BAQsFAAOCAQEAMOZbC5mSmd6d
qP+rprw4mN6R9u9poAyL+9U2ph0EQFynWHLDmG9YFopTHqVu6Tc4bCZw8AcregQ5
144A6Lw3uPO9QRefJcdisow9bZ2fCXRXkq5/NvuOZjIL84p4pLEVBshH0GW2+0T/
Ydh/GgJiKTWvL7GK6KssToEfxwLf0L3wxot5S129dpaSip4bm9ezYqqxLJypflfW
wQSHbqR0xKbtETs0S4YU2G8CHiLgeiAciopHrcbmRfjCQ6cv+7an77LDS4PjpHoN
oZSwj4scJ2VfoFdkcUwpSgl/cV7jTHsefdNWXeBgb7CxThi0wd3hQCiEkGyScDK3
JrnhUKtvwg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:58 2025 by rpki-client