Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa
File:                     3136342e38352e39382e302f32332d3233203d3e203233303734.roa (raw, json)
Hash identifier:          OCnbbJ49maUG2Sn0qtyZLjHVpSiRKJ8LUmYuLntajZk=
Subject key identifier:   7F:DC:A0:FE:C0:B2:8F:91:8A:C5:A1:F9:60:CE:9B:17:F4:11:75:E6
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       19B94FC0E88B872695CD7FD5054F8B0363BC57EA
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa
Signing time:             Thu 24 Jul 2025 18:42:48 +0000
ROA not before:           Thu 24 Jul 2025 18:37:48 +0000
ROA not after:            Thu 23 Jul 2026 18:42:48 +0000
asID:                     23074
IP address blocks:        164.85.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b9:4f:c0:e8:8b:87:26:95:cd:7f:d5:05:4f:8b:03:63:bc:57:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul 24 18:37:48 2025 GMT
            Not After : Jul 23 18:42:48 2026 GMT
        Subject: CN=7FDCA0FEC0B28F918AC5A1F960CE9B17F41175E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:9b:58:73:10:51:19:ad:c3:92:31:08:53:
                    50:47:ad:9d:1c:a0:db:36:43:59:6f:73:88:4e:71:
                    9b:ac:10:a8:48:b7:94:ae:f6:4b:91:77:bb:d7:ac:
                    b1:d2:fa:9e:32:6a:79:e3:d7:b2:80:18:b3:2b:42:
                    eb:12:54:c0:e7:4b:4f:94:34:45:b4:1c:2e:4e:df:
                    dd:e4:35:75:89:d2:13:db:34:15:f5:bb:96:a2:22:
                    18:4a:86:ed:87:9a:b3:03:a4:3d:7d:b4:18:c5:2a:
                    84:5f:c3:05:41:e1:b0:22:6c:32:3c:6f:5d:66:75:
                    1c:4e:c1:38:78:72:49:39:1d:b4:12:0f:63:f0:c2:
                    fe:b5:7e:a6:3f:f5:4d:da:b8:ed:78:a4:92:e1:4c:
                    2e:16:a4:26:bb:0a:b4:19:fe:99:25:a4:25:15:da:
                    22:54:f7:76:e1:e6:d2:3a:76:fe:47:d5:dd:e4:4c:
                    cf:2b:db:2e:44:02:ef:cf:e9:ec:29:49:5e:ee:c2:
                    55:79:69:eb:90:fc:59:64:82:41:56:a2:67:52:6b:
                    70:78:e7:13:41:06:eb:b4:90:81:93:7e:2e:29:2f:
                    eb:ff:bf:b1:32:b1:fb:f3:0d:a0:0d:21:84:78:bb:
                    93:01:4e:f8:37:1c:19:71:ed:3a:d0:a5:64:29:dd:
                    20:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:A0:FE:C0:B2:8F:91:8A:C5:A1:F9:60:CE:9B:17:F4:11:75:E6
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e39382e302f32332d3233203d3e203233303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:a5:77:d6:4f:cd:24:c8:94:3e:f0:a9:bb:14:25:87:83:67:
         56:99:03:5e:b4:a6:f6:65:c0:87:c4:c8:49:26:ae:63:ff:fe:
         d7:31:f7:11:58:a3:07:da:4d:bd:47:7f:18:cc:78:08:09:05:
         11:0d:a2:8d:eb:3d:a5:cf:cd:08:f6:c0:5d:eb:2c:20:d2:d8:
         cd:28:a8:49:4f:0a:9d:22:cc:66:6f:92:82:60:db:43:ee:9d:
         cb:8b:76:27:b1:01:38:2d:a1:a9:ff:b4:c1:65:16:32:2a:db:
         15:af:e3:63:df:da:7d:4a:63:12:28:c4:85:0d:83:6e:8e:34:
         74:33:aa:a7:6e:39:3d:ce:71:d7:db:6c:5a:7e:7b:5a:3d:eb:
         20:8e:75:94:f2:d4:05:2d:e5:79:00:a0:0b:75:b0:a2:2b:90:
         d5:21:22:19:0b:0c:b0:7a:31:77:ba:2f:7b:29:83:28:04:e3:
         b8:99:ad:d8:04:a1:af:d9:42:2c:be:dc:e3:00:07:ff:48:8d:
         5c:1a:9b:48:e2:6e:32:09:78:3c:10:ee:be:a6:28:11:c4:d2:
         7c:94:58:7d:f0:5d:e4:63:4f:76:61:2a:36:4c:b7:c9:6b:20:
         e1:7d:7e:7c:e5:39:58:42:2a:e7:6a:93:84:19:89:16:47:41:
         6b:92:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:57 2025 by rpki-client