Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa
File:                     3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa (raw, json)
Hash identifier:          d+jtaxyjVGUxeWzlF66WXvIfwyagoYUkdF/zQ/bE3qo=
Subject key identifier:   5D:A4:47:AD:E7:23:95:B1:2C:4B:43:13:2E:8C:81:76:5D:00:19:FD
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       08263C40933397AC13E25DCE9ECF69AFF677CA31
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa
Signing time:             Mon 23 Sep 2024 18:15:00 +0000
ROA not before:           Mon 23 Sep 2024 18:10:00 +0000
ROA not after:            Mon 22 Sep 2025 18:15:00 +0000
asID:                     264359
IP address blocks:        131.161.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl
                          rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:26:3c:40:93:33:97:ac:13:e2:5d:ce:9e:cf:69:af:f6:77:ca:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Sep 23 18:10:00 2024 GMT
            Not After : Sep 22 18:15:00 2025 GMT
        Subject: CN=5DA447ADE72395B12C4B43132E8C81765D0019FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:1e:90:9e:c8:48:4d:62:27:5c:1c:9c:3d:
                    39:f9:18:b3:b5:25:0e:0e:c8:46:85:63:e3:ab:b7:
                    b1:c0:26:53:6d:5b:86:85:56:f3:81:e8:d7:65:b4:
                    f5:b2:b6:5d:8e:b5:26:ca:c8:14:d6:b7:5e:fd:78:
                    ea:e8:b9:3a:0c:a8:6c:e9:f8:b3:22:a5:85:eb:da:
                    ac:89:73:1a:c0:12:93:e3:a1:11:48:18:2e:33:8b:
                    ea:f3:df:57:27:cb:ef:4b:8e:4b:8f:20:f4:2f:c2:
                    59:12:5c:68:78:4b:8c:9a:a5:42:c3:9a:95:ad:79:
                    73:8d:70:29:81:88:cc:d0:76:e6:e4:93:51:4f:36:
                    38:94:66:9c:23:51:87:f3:b2:63:ed:5e:ab:5f:09:
                    d0:d9:9c:e5:5e:7a:22:8a:48:f0:6c:d6:44:05:72:
                    a9:e8:33:38:85:2a:82:e8:1d:c9:a7:1d:b5:5f:d0:
                    3a:3e:2a:7f:a2:a1:13:98:75:23:9b:90:3c:bc:32:
                    36:b4:2d:64:6b:47:83:9e:af:6d:d6:98:1f:a5:67:
                    b1:c2:95:e5:48:16:9d:dc:d9:43:fb:b7:e5:6e:48:
                    8a:f1:5a:b4:3a:22:4a:ef:f5:15:3f:08:57:2a:d3:
                    bd:87:c8:7c:2e:9e:22:bd:7c:24:e0:6a:cf:f6:38:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A4:47:AD:E7:23:95:B1:2C:4B:43:13:2E:8C:81:76:5D:00:19:FD
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:95:57:1c:47:f6:f3:33:55:14:8c:fa:7c:c6:17:24:a8:68:
         aa:f5:fa:8b:13:fc:f7:86:b2:ea:b9:7c:11:12:20:76:c8:ac:
         66:40:24:bf:0f:12:7a:4e:78:21:83:27:80:99:61:82:c9:51:
         37:0e:57:cc:c6:7a:7f:70:a4:0f:3f:ab:d3:ed:0c:30:42:1c:
         7a:b6:7e:a9:0f:02:21:87:0a:bf:2a:73:b7:f1:3f:c4:e0:a3:
         ba:f7:96:9d:cc:14:c6:a5:f2:fd:4f:5a:b6:a3:b8:59:28:b7:
         a4:c0:1f:6d:ac:fc:bb:71:e3:f0:0d:1b:89:77:4a:10:d6:14:
         69:f5:d9:11:a0:ec:aa:84:48:5d:20:d8:f5:3c:1b:67:b8:d9:
         f6:95:7c:43:b7:85:e6:2b:99:bf:69:6d:06:0e:30:f9:36:50:
         a8:18:c9:64:ae:be:42:d2:1d:0f:87:bf:84:61:ee:fe:ad:97:
         79:71:c4:75:57:d7:16:3a:d2:39:c3:4f:83:83:21:70:92:48:
         cc:7a:b9:14:68:71:a8:1c:cd:2c:10:7b:83:ba:6c:b7:ee:ca:
         ce:84:49:d9:cf:9f:a1:2d:03:36:9a:97:35:b9:0c:c1:c2:58:
         18:b3:55:63:00:07:27:05:a9:de:71:79:9b:84:ed:62:fa:d0:
         e6:35:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:38 2024 by rpki-client on console-fra.rpki-client.org