Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32302d3230203d3e203233303734.roa
File:                     3136342e38352e38302e302f32302d3230203d3e203233303734.roa (raw, json)
Hash identifier:          p6vpA0dangXz+k7MNexgSQvIq6OpexOz7UPmRSfNPoI=
Subject key identifier:   ED:6A:58:58:1C:4A:54:DE:59:4D:73:9C:1A:8E:2C:BD:00:47:6D:48
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       2498905D3F16764554C7BBDB5C636EDD60AE24F8
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32302d3230203d3e203233303734.roa
Signing time:             Tue 22 Jul 2025 14:54:01 +0000
ROA not before:           Tue 22 Jul 2025 14:49:01 +0000
ROA not after:            Tue 21 Jul 2026 14:54:01 +0000
asID:                     23074
IP address blocks:        164.85.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:98:90:5d:3f:16:76:45:54:c7:bb:db:5c:63:6e:dd:60:ae:24:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 22 14:49:01 2025 GMT
            Not After : Jul 21 14:54:01 2026 GMT
        Subject: CN=ED6A58581C4A54DE594D739C1A8E2CBD00476D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:f3:b1:45:c6:7e:3b:ec:3d:7e:3a:9d:7e:
                    22:63:9d:6e:80:00:46:fa:fe:cd:72:be:fc:58:cf:
                    c1:b6:13:b1:df:8c:4d:35:de:a6:6f:d4:62:f1:85:
                    34:60:96:14:c5:dd:b9:36:cc:93:00:de:6c:a0:0d:
                    b3:13:3e:0a:9e:f1:2e:a0:a2:00:4d:23:3e:ff:c8:
                    3d:38:8c:d4:3b:5a:e2:db:ae:f7:52:a2:bf:1d:86:
                    46:c0:d6:e7:44:5e:12:73:79:16:60:c9:57:37:a1:
                    a2:95:51:57:54:3a:ef:47:dc:e8:b0:c5:c4:83:cd:
                    50:0c:de:3c:79:5f:c4:8c:a8:9e:5f:83:3d:22:85:
                    dc:10:31:a1:09:d6:93:62:a9:11:c1:cb:50:06:88:
                    4f:35:50:32:b3:c8:79:b9:43:74:17:c7:1c:b7:47:
                    e9:75:6d:07:1d:47:54:6c:ab:5d:e2:a6:77:96:10:
                    36:d8:4c:63:68:4b:45:67:59:a0:3b:b2:75:f2:5c:
                    3b:54:8f:0e:31:af:5e:72:a8:b4:13:4a:75:e7:ff:
                    ea:3c:6e:d6:3e:22:af:0c:5f:53:f2:bd:36:bd:dd:
                    5e:22:62:7c:4f:cb:09:28:74:b6:e3:f9:94:13:24:
                    70:a5:62:28:b5:13:db:18:26:41:ff:49:15:ad:c3:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:58:58:1C:4A:54:DE:59:4D:73:9C:1A:8E:2C:BD:00:47:6D:48
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32302d3230203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:c7:bd:de:4d:93:93:d4:17:3a:a7:16:5d:e9:55:16:f8:
         39:14:d0:11:2d:a9:5d:39:74:f5:8d:1e:e7:59:f6:9f:52:1e:
         d5:b9:14:12:9d:1b:4c:01:57:9a:de:af:f7:57:85:30:03:1b:
         a9:9f:51:c1:6e:62:ac:11:0a:3d:80:56:d2:67:11:3d:3d:03:
         7b:2e:96:d5:de:4b:41:1b:a4:da:86:b0:28:01:c3:1f:b2:4c:
         a7:0d:71:82:99:11:3b:b7:c2:b4:07:27:b1:6b:c2:c1:e1:1f:
         ce:b2:c8:7b:c4:b7:95:63:b4:cf:a9:83:f2:e0:f0:b7:70:55:
         f6:88:60:c5:d6:ad:06:82:b0:fc:27:e5:db:6f:88:71:b7:87:
         e4:dc:09:2a:57:63:49:6e:81:4c:7e:88:ad:26:05:dd:fc:96:
         02:4a:08:d3:d9:e7:0f:fe:06:83:90:b9:35:20:9e:4b:d4:90:
         24:30:64:c5:39:de:3f:f1:1e:dc:cf:8d:af:b7:09:82:f8:14:
         27:86:91:7e:b9:03:c5:32:70:25:e1:80:03:44:da:bd:6c:3f:
         23:85:57:ef:ae:f1:9e:55:38:c8:65:29:03:df:d8:ed:65:0c:
         6b:02:0a:77:76:c8:f0:79:4b:ca:bc:90:fe:1b:19:c6:ad:40:
         58:a1:c0:14
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJJiQXT8WdkVUx7vbXGNu3WCuJPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNjE0RTNGQUEyNUYzMUE1NkU5Q0YyRkVBNDc5QjFD
RjA4MDk1RDAeFw0yNTA3MjIxNDQ5MDFaFw0yNjA3MjExNDU0MDFaMDMxMTAvBgNV
BAMTKEVENkE1ODU4MUM0QTU0REU1OTRENzM5QzFBOEUyQ0JEMDA0NzZENDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeK/OxRcZ+O+w9fjqdfiJjnW6A
AEb6/s1yvvxYz8G2E7HfjE013qZv1GLxhTRglhTF3bk2zJMA3mygDbMTPgqe8S6g
ogBNIz7/yD04jNQ7WuLbrvdSor8dhkbA1udEXhJzeRZgyVc3oaKVUVdUOu9H3Oiw
xcSDzVAM3jx5X8SMqJ5fgz0ihdwQMaEJ1pNiqRHBy1AGiE81UDKzyHm5Q3QXxxy3
R+l1bQcdR1Rsq13ipneWEDbYTGNoS0VnWaA7snXyXDtUjw4xr15yqLQTSnXn/+o8
btY+Iq8MX1PyvTa93V4iYnxPywkodLbj+ZQTJHClYii1E9sYJkH/SRWtw1fZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7WpYWBxKVN5ZTXOcGo4svQBHbUgwHwYDVR0j
BBgwFoAU0MYU4/qiXzGlbpzy/qR5sc8ICV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC9EMEM2MTRFM0ZBQTI1RjMxQTU2RTlDRjJGRUE0NzlCMUNGMDgwOTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzYxNEUzRkFBMjVGMzFB
NTZFOUNGMkZFQTQ3OUIxQ0YwODA5NUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzNjM0MmUzODM1MmUzODMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzMzMw
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBKRVUDANBgkqhkiG9w0BAQsFAAOCAQEAqBTHvd5Nk5PU
FzqnFl3pVRb4ORTQES2pXTl09Y0e51n2n1Ie1bkUEp0bTAFXmt6v91eFMAMbqZ9R
wW5irBEKPYBW0mcRPT0Dey6W1d5LQRuk2oawKAHDH7JMpw1xgpkRO7fCtAcnsWvC
weEfzrLIe8S3lWO0z6mD8uDwt3BV9ohgxdatBoKw/Cfl22+IcbeH5NwJKldjSW6B
TH6IrSYF3fyWAkoI09nnD/4Gg5C5NSCeS9SQJDBkxTneP/Ee3M+Nr7cJgvgUJ4aR
frkDxTJwJeGAA0TavWw/I4VX767xnlU4yGUpA9/Y7WUMawIKd3bI8HlLyryQ/hsZ
xq1AWKHAFA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:56 2025 by rpki-client