Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38382e302f32322d3232203d3e203233303734.roa
File:                     3136342e38352e38382e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier:          eGiu05AOzRKdRHFcsEHBFIbDMI9i81oi/IOghOlX7MQ=
Subject key identifier:   85:D9:7E:C1:44:F2:EF:3B:C6:77:9A:C9:69:EC:FD:D9:E5:81:B8:EE
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       38ABCB3728CB5D09BE10A54CA6F8B0269FF4D5D7
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38382e302f32322d3232203d3e203233303734.roa
Signing time:             Tue 22 Jul 2025 14:54:25 +0000
ROA not before:           Tue 22 Jul 2025 14:49:25 +0000
ROA not after:            Tue 21 Jul 2026 14:54:25 +0000
asID:                     23074
IP address blocks:        164.85.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ab:cb:37:28:cb:5d:09:be:10:a5:4c:a6:f8:b0:26:9f:f4:d5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 22 14:49:25 2025 GMT
            Not After : Jul 21 14:54:25 2026 GMT
        Subject: CN=85D97EC144F2EF3BC6779AC969ECFDD9E581B8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:71:87:9a:60:60:00:58:15:b8:64:f6:c9:
                    3f:6a:24:6b:e7:8f:7f:ca:18:ba:d0:d0:90:0a:08:
                    c2:aa:e4:96:20:1b:ad:be:ed:bb:0d:8b:f6:61:32:
                    a0:3f:fb:13:3b:4a:2d:7f:61:1a:4b:74:e6:bf:62:
                    e1:64:2b:33:d9:78:e3:d3:b3:46:9f:cd:38:3d:9c:
                    c0:e9:2d:d0:d4:4c:de:a3:3f:45:64:3e:bd:c7:4d:
                    4f:5b:6f:be:4e:2d:df:42:06:8c:53:dc:cd:9c:cb:
                    1c:af:a1:71:3a:1e:1f:48:bd:bd:20:17:11:8d:b3:
                    e2:e1:0d:b0:e0:4e:ed:a3:85:a1:9c:a5:ed:6f:76:
                    d1:70:ff:af:af:cb:18:e4:f6:9b:97:7b:94:22:4e:
                    8a:08:00:01:2f:f4:3f:06:be:9f:f0:dc:fb:19:bc:
                    1f:8c:2d:08:58:8a:98:80:67:fe:77:16:b6:05:ef:
                    f1:de:ff:f4:d3:f2:fe:8f:f2:4c:7c:35:98:d1:aa:
                    08:e4:94:03:3f:04:57:d3:42:22:b5:03:1b:ed:7c:
                    8f:37:e0:28:c5:68:da:96:a4:6e:5d:04:eb:f2:d0:
                    3a:32:f5:ab:29:3e:07:3c:c7:d3:90:a9:be:c9:8b:
                    5b:38:72:cf:fc:b9:cb:8e:49:1f:b8:b4:a6:71:6a:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D9:7E:C1:44:F2:EF:3B:C6:77:9A:C9:69:EC:FD:D9:E5:81:B8:EE
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38382e302f32322d3232203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:db:e2:4f:51:4e:94:8d:0b:48:3f:5f:e0:be:b6:a3:36:6f:
         ef:14:72:53:6b:98:fe:1e:4e:4c:49:f9:db:9b:1b:17:ab:a3:
         e0:4f:d1:25:5d:5f:dc:d5:7d:0a:e5:8b:57:6b:57:1b:c0:d8:
         5e:7a:f4:45:25:ff:24:6f:f6:32:d1:04:31:07:83:e0:40:65:
         86:7f:ad:89:22:c6:48:73:8d:52:17:82:06:5e:0f:7a:71:3f:
         c1:56:81:12:a0:78:6c:ef:e0:e4:b1:83:ae:93:07:07:f3:ec:
         3c:c7:5a:6e:ef:82:09:a2:90:9d:96:8d:2c:e7:f9:23:3e:f2:
         32:ae:6a:ac:76:f9:40:6f:9c:fd:db:b3:48:62:99:d1:b9:f4:
         6e:22:d9:63:9b:8d:d5:f7:2e:1a:3f:8d:6d:e2:b5:e1:bb:b0:
         31:93:60:31:a7:5b:07:f9:a6:91:8b:fe:2e:06:9b:cc:71:b6:
         ca:e7:d8:45:21:80:24:7a:0d:50:b1:04:53:0c:6c:8c:61:6b:
         60:81:81:44:ab:b4:89:72:16:6a:94:af:84:0d:80:bf:3d:cb:
         ee:3f:37:af:fa:ca:2a:1a:cf:53:a3:11:a5:87:a6:d0:b7:22:
         c0:5f:40:ec:d2:60:8e:d5:ea:c1:ed:f4:e4:7e:5d:c7:ca:ea:
         76:09:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:46:59 2025 by rpki-client