Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e34362e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          HTqfOFyNK6Fwf6DsiJWdF0wlBwgsuYoVY+dx9+qgGt0=
Subject key identifier:   85:9E:92:C1:0F:D2:21:14:CC:39:1C:91:77:29:E2:B8:08:2F:56:96
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       10D507E45B5F3F7DCA99A509922B04A51D0251AA
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa
Signing time:             Thu 24 Jul 2025 18:37:37 +0000
ROA not before:           Thu 24 Jul 2025 18:32:37 +0000
ROA not after:            Thu 23 Jul 2026 18:37:37 +0000
asID:                     23074
IP address blocks:        164.85.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d5:07:e4:5b:5f:3f:7d:ca:99:a5:09:92:2b:04:a5:1d:02:51:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 24 18:32:37 2025 GMT
            Not After : Jul 23 18:37:37 2026 GMT
        Subject: CN=859E92C10FD22114CC391C917729E2B8082F5696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:eb:2e:c1:39:b8:95:78:a0:80:6e:82:94:
                    f1:bf:96:0d:d4:5d:d8:d7:80:a6:92:32:ab:b0:b6:
                    db:ca:fb:22:af:06:ee:da:97:9f:f8:6a:06:e0:6e:
                    79:3c:14:ca:1f:ee:0c:0c:f6:25:40:ed:6d:1f:1c:
                    2f:be:5d:19:b3:1b:ff:48:11:a5:dc:c8:e0:4d:18:
                    2f:78:ec:96:49:54:30:24:0c:7e:c2:c0:47:6d:8f:
                    a9:08:13:f3:d8:89:d3:ac:c1:4b:4b:38:35:1b:f6:
                    3a:3e:bd:e6:15:28:d5:23:41:a5:da:5c:1b:d0:8b:
                    d4:0f:66:eb:a2:20:b9:e9:3c:d5:1b:27:bd:46:30:
                    9d:b0:cd:2f:1e:3f:2c:d5:2b:65:a5:fb:02:ec:46:
                    1b:d4:d3:15:68:3b:ca:c2:34:2d:0d:8c:b1:4d:48:
                    0d:e4:c4:ee:d1:d3:53:f4:e6:ef:d2:21:df:32:08:
                    38:2d:11:d2:86:4e:84:c4:5a:8e:bb:a8:40:9b:3f:
                    86:1c:ed:a9:f8:be:f5:fd:af:49:c2:b7:a5:45:b8:
                    22:fe:55:f8:78:e3:76:39:4e:a8:9e:96:4b:3c:bd:
                    73:70:9d:ee:15:37:1c:2f:53:7b:51:65:45:91:5a:
                    2f:59:e9:e6:b9:fe:cd:d5:43:35:2e:a9:97:d6:8b:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9E:92:C1:0F:D2:21:14:CC:39:1C:91:77:29:E2:B8:08:2F:56:96
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e34362e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:aa:58:cf:fa:51:4c:58:ec:0d:e7:5f:54:16:29:8a:d4:
         33:26:c3:f8:4d:76:a6:35:56:19:bd:b3:25:82:a3:13:12:b4:
         c1:06:85:62:7f:68:00:b5:68:b3:03:dc:51:cd:c5:e5:96:b4:
         69:07:34:bd:60:f9:7e:80:27:f2:f6:06:6e:29:a0:83:8a:44:
         84:88:a3:ef:df:70:c4:c3:a2:09:c2:a6:62:10:b4:7c:7d:ca:
         f8:e4:45:b5:fc:df:a5:9f:26:59:f2:9d:fd:dd:2f:35:ed:dc:
         00:7e:3d:41:1d:f4:b8:3e:ee:43:cf:c5:0e:da:7c:6b:8d:6d:
         dc:3a:94:f8:cb:95:9d:e6:0e:28:dc:18:63:af:41:a7:e6:1b:
         bd:74:f4:5a:e5:1d:cc:cc:7b:67:62:19:d9:b7:71:32:aa:20:
         50:c7:a7:3d:54:7e:79:d3:ef:4c:89:30:cb:e7:9a:c1:80:55:
         ff:dd:a9:f5:2f:b1:17:3d:2b:6c:cc:94:d1:e2:70:54:9d:6f:
         20:e4:d4:b9:6d:05:59:1c:bd:c3:6b:6e:eb:6a:22:c9:e8:a9:
         b5:a9:81:ad:68:06:d3:e2:86:e8:d5:01:db:25:1d:9d:c2:5c:
         4b:60:4a:a5:85:15:17:c1:dc:e3:09:4c:6f:24:a1:e8:58:3b:
         bb:d9:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:00 2025 by rpki-client