Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38322e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e38322e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          Nkl46X2Da00SQQA+de63V6KNsOA3xzL7nSVEpGUK/6s=
Subject key identifier:   FC:EE:A1:17:89:5C:21:12:D6:D9:EA:AE:DE:95:F2:B7:C4:C5:E0:BC
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       51F90073AA85C3B68A60EF57008F9BFD4216E40E
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38322e302f32332d3233203d3e203233303734.roa
Signing time:             Thu 24 Jul 2025 18:39:02 +0000
ROA not before:           Thu 24 Jul 2025 18:34:02 +0000
ROA not after:            Thu 23 Jul 2026 18:39:02 +0000
asID:                     23074
IP address blocks:        164.85.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f9:00:73:aa:85:c3:b6:8a:60:ef:57:00:8f:9b:fd:42:16:e4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 24 18:34:02 2025 GMT
            Not After : Jul 23 18:39:02 2026 GMT
        Subject: CN=FCEEA117895C2112D6D9EAAEDE95F2B7C4C5E0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:5a:76:f5:d3:a1:ea:af:c6:ac:6e:5e:5c:
                    3b:52:8e:4a:e4:8b:fd:2e:28:1b:7a:98:c6:2e:90:
                    c7:b8:a8:ec:e7:57:ab:70:6a:b6:28:e9:37:c4:f6:
                    eb:b1:ae:53:c7:a9:a3:dc:d8:5d:68:df:db:c1:f8:
                    db:5b:3c:22:bf:48:16:0e:da:20:c3:7c:32:99:81:
                    1b:67:e1:c6:de:22:de:a0:f8:3b:cd:05:1d:b7:85:
                    e7:96:fd:d3:bd:7f:9f:90:ff:25:ff:b1:48:12:51:
                    2a:03:ac:dc:4e:eb:20:ee:82:47:b3:4d:89:b4:09:
                    9a:22:82:f4:f6:9d:e2:6d:c4:6e:89:56:60:af:59:
                    e3:6b:a8:6d:c5:a1:7a:e0:70:1a:50:3d:48:d7:40:
                    1e:89:b9:7b:ba:1d:59:83:93:5a:14:65:39:37:25:
                    68:dd:a8:ce:ae:97:bd:a6:a0:44:ce:5e:02:13:75:
                    7f:f7:05:4b:d4:11:bb:05:e3:35:52:b0:d8:93:d9:
                    60:32:db:e0:a7:82:ee:95:a3:45:ab:a7:4d:b8:78:
                    01:57:fd:d4:d2:0e:ed:97:64:a9:7e:aa:5b:56:12:
                    f4:51:9c:1f:68:11:26:12:32:58:bc:bf:49:fa:09:
                    15:1d:71:ef:95:04:8f:c6:9e:a4:2b:70:f3:8b:66:
                    b0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:A1:17:89:5C:21:12:D6:D9:EA:AE:DE:95:F2:B7:C4:C5:E0:BC
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38322e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:7f:80:52:ba:3c:8b:d5:8c:90:29:4c:6d:a3:5c:2c:03:95:
         34:57:c1:d2:1f:dd:1b:8a:cb:0a:6d:75:59:95:9f:4d:49:7a:
         62:79:94:7a:8a:14:6f:e9:3d:2f:91:a9:8f:0f:11:19:fb:3c:
         f5:27:a1:5d:66:fb:80:81:a6:2c:ca:0e:8b:c6:d6:e3:64:88:
         7f:2c:de:be:0e:71:17:24:e8:0c:f6:46:ca:31:96:27:99:56:
         2a:b5:24:17:f6:50:d3:bb:fb:d7:e3:fb:b1:fb:a4:5d:96:47:
         f7:cf:a3:41:1b:c8:74:58:81:cf:95:27:32:83:67:e5:7d:f0:
         f3:5e:39:fb:4e:32:6e:b8:3a:f3:e5:fd:7b:c4:16:3b:a7:10:
         fc:f5:0e:b3:37:3e:76:5b:f8:02:7e:5b:95:f0:4e:3e:e6:71:
         27:85:bb:42:af:1c:99:41:2a:43:2e:30:10:97:98:5b:04:ff:
         2f:98:cb:b0:ad:51:69:9b:31:42:81:2b:68:be:c9:50:56:58:
         0d:f5:60:fd:13:90:15:6e:a8:3b:e5:6c:31:c5:72:64:e8:7b:
         6f:e8:11:98:d5:2c:4c:39:d5:1d:84:39:39:09:1f:cf:bb:d8:
         94:44:de:3e:0e:9c:51:08:a6:25:47:49:a7:4a:0b:a1:15:0b:
         91:69:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:54 2025 by rpki-client