Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e38342e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          ysmaHgoDntPzsn0nStUBAG5gl3M8Rqb1WqNrAGIrw9M=
Subject key identifier:   07:44:88:3F:FE:EE:84:F9:E7:55:72:4B:E6:0B:D3:52:A5:00:49:A1
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       47041007A14A84ABCE4018B056A5B116DC88607F
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32332d3233203d3e203233303734.roa
Signing time:             Thu 24 Jul 2025 18:40:53 +0000
ROA not before:           Thu 24 Jul 2025 18:35:53 +0000
ROA not after:            Thu 23 Jul 2026 18:40:53 +0000
asID:                     23074
IP address blocks:        164.85.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:04:10:07:a1:4a:84:ab:ce:40:18:b0:56:a5:b1:16:dc:88:60:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 24 18:35:53 2025 GMT
            Not After : Jul 23 18:40:53 2026 GMT
        Subject: CN=0744883FFEEE84F9E755724BE60BD352A50049A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:6b:14:84:35:6a:6b:f9:79:ad:74:dc:25:
                    6a:79:c0:5b:56:7f:f9:58:63:ea:98:f9:a2:66:9c:
                    d3:3c:ff:8e:90:bc:b3:06:2e:5e:18:f3:ec:15:bd:
                    3d:6e:56:6a:05:a8:49:bf:0e:2c:60:a5:45:a3:2a:
                    8a:14:14:98:27:72:0a:64:cf:00:67:e6:bc:a9:6e:
                    3a:a0:cb:af:3c:1e:de:74:95:57:76:87:0e:ca:f2:
                    44:ad:0a:84:87:e4:18:e0:fe:07:1b:ac:47:d9:13:
                    13:de:aa:a3:85:3f:2b:81:fe:76:bc:66:72:7c:5c:
                    37:84:b3:37:a8:6e:07:fe:b5:87:28:55:ce:2f:dd:
                    03:41:6b:6a:88:2e:9c:8b:73:42:b1:ac:7b:ba:c5:
                    d1:d8:fb:d2:6d:f7:f0:42:6c:ab:86:3f:f6:01:f5:
                    00:22:2d:cb:e2:67:ad:02:3a:ed:f6:37:08:ee:2a:
                    a0:be:f8:3e:06:e6:73:a9:44:ec:87:bd:2a:2d:12:
                    ac:14:4e:f1:35:29:e9:bb:87:10:db:e0:d3:a3:98:
                    ee:25:2e:27:df:18:d7:68:c8:8e:67:48:5c:8b:b2:
                    1f:d3:a6:dc:75:20:9e:68:53:9e:20:6f:18:da:d2:
                    32:3e:2a:80:0c:e4:8f:52:93:a2:85:2e:c6:b3:de:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:44:88:3F:FE:EE:84:F9:E7:55:72:4B:E6:0B:D3:52:A5:00:49:A1
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:e1:81:a2:d2:ea:2c:5e:64:69:f7:99:74:da:86:1a:b4:cb:
         24:d3:e6:e5:e4:85:a4:0f:3b:03:56:87:1f:10:e9:3f:3c:b0:
         1e:86:48:26:0d:9b:f2:ba:91:c7:f9:5c:a0:d3:62:a2:5d:fa:
         14:9c:01:ff:f5:33:39:88:56:aa:72:93:47:f1:bc:e7:49:86:
         25:6d:1c:d3:45:2a:f0:4d:e5:1f:80:e7:73:71:e1:c4:26:0c:
         86:26:e3:8f:26:ad:52:99:89:b4:48:de:27:43:eb:07:26:00:
         a3:0e:fa:dd:d9:f1:a0:77:71:86:2e:0b:03:83:3a:3d:ea:5e:
         e6:08:6b:d2:31:14:5e:a5:af:de:ba:b2:bd:ee:f8:c2:b0:bd:
         91:89:97:e6:6f:eb:5d:d1:74:20:19:f9:2f:2a:8c:ed:ed:ec:
         c4:3b:64:bf:78:20:9b:07:5e:31:ac:f2:c0:48:78:e2:4b:0a:
         4e:b6:0e:d7:19:04:c7:4c:3c:e7:bd:ac:6d:65:27:29:f9:52:
         41:4c:2e:1a:92:f5:a5:fe:a2:71:0e:c5:f7:0f:a8:fd:d5:d6:
         d7:33:04:7e:60:ed:bc:27:c0:7f:64:a3:b0:e7:7d:c1:59:45:
         72:03:d4:dd:62:22:5a:d0:f0:db:b8:97:d9:c9:08:36:d4:a0:
         8d:b3:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:08 2025 by rpki-client