Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e37382e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e37382e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          q5jEsYMO1GKL2bvDY0qz7poVLkzZlGCj9sYQFkz+ljs=
Subject key identifier:   46:D6:39:45:B1:DE:5D:06:48:57:2A:04:59:B9:8F:E8:0D:5E:7B:31
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       3D563690A8351D114F9DC0A904B3A03DCDF6518B
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e37382e302f32332d3233203d3e203233303734.roa
Signing time:             Thu 24 Jul 2025 18:38:24 +0000
ROA not before:           Thu 24 Jul 2025 18:33:24 +0000
ROA not after:            Thu 23 Jul 2026 18:38:24 +0000
asID:                     23074
IP address blocks:        164.85.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:56:36:90:a8:35:1d:11:4f:9d:c0:a9:04:b3:a0:3d:cd:f6:51:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 24 18:33:24 2025 GMT
            Not After : Jul 23 18:38:24 2026 GMT
        Subject: CN=46D63945B1DE5D0648572A0459B98FE80D5E7B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:ca:b4:6f:9d:fd:ef:2c:9e:86:ab:74:63:
                    8d:b8:37:be:bf:e4:d7:fb:eb:1d:2c:1f:cb:be:a3:
                    0a:1e:c5:da:ef:62:0a:13:d4:87:5e:a4:26:9f:0c:
                    70:24:6a:8c:29:2a:fe:c1:19:7c:fd:b6:f4:51:ba:
                    72:70:f4:03:7a:27:4a:2f:35:86:f8:95:6a:a5:51:
                    e0:89:8f:8d:79:55:be:cd:07:a1:a1:d5:23:2a:53:
                    82:de:81:d6:58:7a:c4:72:6a:04:42:e6:a6:42:d5:
                    45:0b:da:d6:4e:ac:f5:b4:27:25:ae:a7:31:a5:09:
                    f7:52:ba:86:1b:8c:7d:e4:59:f9:af:5e:c3:3b:cc:
                    af:7a:2d:01:a9:8b:5c:52:d2:e1:50:23:36:48:78:
                    f9:32:df:c2:6e:23:f2:e9:fc:c3:f5:aa:52:02:bf:
                    8f:88:02:4f:95:a7:53:13:c1:20:ca:4c:6d:19:e3:
                    54:4e:52:1e:f3:62:39:ce:66:6e:7a:62:a9:d8:28:
                    91:1d:ad:aa:32:54:0f:ef:d1:ce:c0:63:71:91:6e:
                    46:19:d1:84:b5:9f:07:ed:67:cb:fb:64:67:3b:42:
                    ba:d7:f3:33:8d:d2:38:f7:9b:eb:a8:3e:d8:e5:d7:
                    bc:24:d1:0d:cd:2d:22:3d:5b:1b:b8:fd:02:16:02:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D6:39:45:B1:DE:5D:06:48:57:2A:04:59:B9:8F:E8:0D:5E:7B:31
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e37382e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:c5:b6:ec:cb:ed:a3:ad:50:37:09:15:dc:53:c2:0b:93:0d:
         45:60:75:41:59:74:6f:c7:55:e6:b4:b7:df:d6:63:7b:3e:90:
         ef:3f:a7:1f:a2:b3:cc:d6:bc:64:5e:90:90:c4:c6:9e:f5:38:
         7f:01:56:8b:a8:da:74:4c:19:9f:91:90:11:1e:44:0c:90:9c:
         5e:2c:dd:0b:38:76:44:20:a9:35:ba:ff:08:28:d4:57:ec:9b:
         f7:08:29:4c:c0:e6:b6:7a:60:3b:8b:10:aa:7e:a7:6b:0d:1f:
         ff:c2:99:7e:0d:16:bf:55:f1:fd:e0:92:74:e9:13:f8:ee:f3:
         d2:d4:20:1a:1c:18:d5:9c:04:6d:1e:e0:27:1a:af:2e:c0:ea:
         0a:bc:20:92:24:8e:22:04:0c:af:3b:8c:7f:84:66:b6:94:ba:
         c5:3f:80:01:a7:80:ee:b7:83:38:bf:a0:ac:0e:de:19:c9:76:
         01:cf:c1:bb:98:b2:7e:62:60:7a:a0:03:6a:09:17:69:97:fb:
         6e:b3:9a:6f:0b:f8:26:0d:ea:12:5a:72:89:87:7b:41:87:27:
         5e:2d:22:7e:c4:7b:f6:2c:2a:5d:c5:9e:62:2d:91:b1:6f:80:
         94:1e:aa:13:c8:4c:8f:bc:a3:fd:e5:0d:40:99:29:dd:b8:e9:
         e9:77:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:46:58 2025 by rpki-client