Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39362e302f32302d3230203d3e203233303734.roa
File:                     3136342e38352e39362e302f32302d3230203d3e203233303734.roa (raw, json)
Hash identifier:          lH8Uidiiequ/xzpEQU4wM1Nz3BSfLg5ln3hL17NTAcc=
Subject key identifier:   FB:B2:18:04:54:C6:6C:C8:93:A9:95:0C:2F:B4:57:76:97:35:B9:D6
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       208CC153169649B6959FA04FFFB4A5C7210E948D
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39362e302f32302d3230203d3e203233303734.roa
Signing time:             Tue 22 Jul 2025 14:54:35 +0000
ROA not before:           Tue 22 Jul 2025 14:49:35 +0000
ROA not after:            Tue 21 Jul 2026 14:54:35 +0000
asID:                     23074
IP address blocks:        164.85.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8c:c1:53:16:96:49:b6:95:9f:a0:4f:ff:b4:a5:c7:21:0e:94:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 22 14:49:35 2025 GMT
            Not After : Jul 21 14:54:35 2026 GMT
        Subject: CN=FBB2180454C66CC893A9950C2FB457769735B9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e1:4a:d8:28:f6:ae:de:39:97:de:35:30:4c:
                    c0:80:71:65:53:81:a3:e0:85:39:05:76:01:68:7b:
                    7b:46:42:54:4d:f7:74:0c:ef:f3:f5:27:be:d3:ce:
                    a5:20:34:c0:2a:a3:62:0e:c2:60:b5:33:82:2d:03:
                    65:5d:86:3e:5d:9f:71:22:2d:9c:00:1f:80:f5:f7:
                    a8:42:43:32:0f:56:1b:04:e5:93:c5:c0:09:e1:e6:
                    c3:19:ab:05:b3:46:83:34:0c:03:8d:e7:1d:52:ea:
                    e3:90:83:af:92:3f:21:10:ed:22:ff:9d:f3:1c:ff:
                    0c:85:ef:b3:22:41:6e:33:0e:09:77:65:35:f5:f9:
                    af:4c:f1:e6:3e:e0:a1:3a:fe:4e:fb:e0:d6:6e:f5:
                    e3:da:71:73:30:4b:25:4f:15:aa:aa:77:c2:3e:b5:
                    a0:fb:cb:f2:84:19:af:20:f0:34:54:dc:b3:fa:05:
                    fb:7d:48:b4:e2:7f:1f:e6:b4:82:31:13:2e:98:a2:
                    66:0f:79:14:91:9c:0f:6a:86:52:cf:57:05:a3:65:
                    49:0d:4e:a6:ef:43:6a:d2:79:61:98:a1:63:91:a7:
                    62:86:47:d2:c8:e9:ec:30:18:6e:7c:f3:ca:6a:87:
                    09:1a:cc:34:81:b2:18:fb:9a:4c:0f:ff:f2:d0:d1:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B2:18:04:54:C6:6C:C8:93:A9:95:0C:2F:B4:57:76:97:35:B9:D6
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39362e302f32302d3230203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:71:d1:57:6e:c5:4b:01:78:c0:c0:4f:66:b7:70:11:31:f0:
         6c:2f:89:d5:a8:2c:6c:2e:8e:13:ef:d8:13:a2:4d:ce:62:42:
         6a:66:19:dc:bc:f3:f2:e8:a0:8c:3f:37:c6:74:76:24:fe:26:
         08:83:ac:95:ed:de:db:b6:22:bd:d3:05:54:77:a1:b5:77:0d:
         a8:e5:f3:f7:ac:b6:19:c7:13:ad:da:5a:b4:fe:47:bf:57:73:
         91:c9:a9:5a:62:f5:0f:a1:00:3e:fe:d4:09:fc:59:3e:70:63:
         5f:2e:05:b9:c0:22:0e:e5:30:6d:f8:15:a6:d7:b5:a3:e3:31:
         07:7c:05:68:b8:f4:13:22:32:76:42:d6:12:15:5a:61:ac:44:
         e8:f1:30:72:36:eb:59:ca:a1:7e:2a:51:7d:71:35:57:35:22:
         d2:5c:9a:71:4f:8e:e8:0f:2d:9a:ef:5a:ba:43:53:19:65:f8:
         33:bb:ca:a4:fb:9c:a8:f0:d4:53:9d:98:2e:99:cc:7c:e1:cc:
         c0:b1:6e:23:06:a5:1e:6f:57:a6:e0:7a:ce:61:6d:8c:50:b6:
         6e:06:59:a1:21:83:54:01:4e:dd:6a:c3:44:5c:62:4e:2e:b4:
         81:13:d0:d8:4d:0b:fd:1f:ec:0f:d0:f7:42:1a:55:e8:cf:9c:
         cb:03:61:7a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIIzBUxaWSbaVn6BP/7SlxyEOlI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDNjE0RTNGQUEyNUYzMUE1NkU5Q0YyRkVBNDc5QjFD
RjA4MDk1RDAeFw0yNTA3MjIxNDQ5MzVaFw0yNjA3MjExNDU0MzVaMDMxMTAvBgNV
BAMTKEZCQjIxODA0NTRDNjZDQzg5M0E5OTUwQzJGQjQ1Nzc2OTczNUI5RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw4UrYKPau3jmX3jUwTMCAcWVT
gaPghTkFdgFoe3tGQlRN93QM7/P1J77TzqUgNMAqo2IOwmC1M4ItA2Vdhj5dn3Ei
LZwAH4D196hCQzIPVhsE5ZPFwAnh5sMZqwWzRoM0DAON5x1S6uOQg6+SPyEQ7SL/
nfMc/wyF77MiQW4zDgl3ZTX1+a9M8eY+4KE6/k774NZu9ePacXMwSyVPFaqqd8I+
taD7y/KEGa8g8DRU3LP6Bft9SLTifx/mtIIxEy6YomYPeRSRnA9qhlLPVwWjZUkN
TqbvQ2rSeWGYoWORp2KGR9LI6ewwGG5888pqhwkazDSBshj7mkwP//LQ0cQVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+7IYBFTGbMiTqZUML7RXdpc1udYwHwYDVR0j
BBgwFoAU0MYU4/qiXzGlbpzy/qR5sc8ICV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0t4ODhOZjN0TFBFcFpFSzYzUTdTa1hRU1BOYnpmdzdSSE44bUtHSmdn
MVcvMC9EMEM2MTRFM0ZBQTI1RjMxQTU2RTlDRjJGRUE0NzlCMUNGMDgwOTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzYxNEUzRkFBMjVGMzFB
NTZFOUNGMkZFQTQ3OUIxQ0YwODA5NUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLeDg4TmYzdExQRXBaRUs2M1E3U2tYUVNQTmJ6Znc3UkhOOG1LR0pnZzFXLzAv
MzEzNjM0MmUzODM1MmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzMzMw
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBKRVYDANBgkqhkiG9w0BAQsFAAOCAQEAE3HRV27FSwF4
wMBPZrdwETHwbC+J1agsbC6OE+/YE6JNzmJCamYZ3Lzz8uigjD83xnR2JP4mCIOs
le3e27YivdMFVHehtXcNqOXz96y2GccTrdpatP5Hv1dzkcmpWmL1D6EAPv7UCfxZ
PnBjXy4FucAiDuUwbfgVpte1o+MxB3wFaLj0EyIydkLWEhVaYaxE6PEwcjbrWcqh
fipRfXE1VzUi0lyacU+O6A8tmu9aukNTGWX4M7vKpPucqPDUU52YLpnMfOHMwLFu
IwalHm9XpuB6zmFtjFC2bgZZoSGDVAFO3WrDRFxiTi60gRPQ2E0L/R/sD9D3QhpV
6M+cywNheg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:50 2025 by rpki-client