Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32322d3332203d3e20323634333539.roa
File:                     3136382e302e3139322e302f32322d3332203d3e20323634333539.roa (raw, json)
Hash identifier:          wtXkjtet4oSkB+ELzqDyI/Y6P7Znfe2i1IZ/Ux4ye04=
Subject key identifier:   6C:6F:03:68:C3:41:EF:9B:2C:0E:46:8B:B1:58:DD:1C:B7:AE:F0:AB
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       4E1DCED97E6FC2C7B5CAC2B58BAED4E1D665B1C9
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32322d3332203d3e20323634333539.roa
Signing time:             Mon 23 Sep 2024 18:16:12 +0000
ROA not before:           Mon 23 Sep 2024 18:11:12 +0000
ROA not after:            Mon 22 Sep 2025 18:16:12 +0000
asID:                     264359
IP address blocks:        168.0.192.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl
                          rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1d:ce:d9:7e:6f:c2:c7:b5:ca:c2:b5:8b:ae:d4:e1:d6:65:b1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Sep 23 18:11:12 2024 GMT
            Not After : Sep 22 18:16:12 2025 GMT
        Subject: CN=6C6F0368C341EF9B2C0E468BB158DD1CB7AEF0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:38:1d:3c:46:2a:59:b3:f7:02:17:a8:26:
                    94:f5:b1:99:eb:25:7c:b0:68:05:bf:a7:e1:aa:97:
                    c1:f4:ad:02:f3:c8:e9:cf:1f:23:8e:6c:95:37:cd:
                    ba:a9:2c:8e:69:d3:8b:e8:93:eb:07:11:97:40:e7:
                    e3:41:29:87:fe:04:12:69:0e:f3:b1:a6:2c:b2:00:
                    25:d1:c9:2c:9e:09:2e:dc:71:c6:b1:8b:fe:2f:d5:
                    07:22:c3:10:63:2a:d6:93:c0:36:e1:e6:dc:9b:90:
                    5f:2e:1c:a0:c8:92:0b:80:b2:56:f9:fa:0c:36:0a:
                    d1:e4:d1:2c:31:2a:c5:ec:13:0b:b1:80:02:15:f9:
                    31:9c:e2:d5:bf:05:a5:d9:77:73:28:71:f0:7f:fb:
                    f9:54:86:ef:4f:b3:ea:43:6b:56:53:50:ac:d9:6b:
                    0e:fc:a1:e4:18:d9:f8:6f:00:25:79:56:d3:fc:69:
                    a5:09:6c:fe:dd:c8:4b:3a:a6:20:7c:e7:bb:3b:9e:
                    03:ba:80:d4:99:76:74:90:da:89:3b:75:1e:6e:19:
                    92:ff:97:ac:44:b7:7f:c4:aa:d3:b8:b1:d4:52:15:
                    0a:68:50:13:13:58:ce:1b:52:7c:f1:44:35:84:c2:
                    c6:da:7b:2d:1e:b2:13:02:13:fe:00:31:2c:a0:45:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:03:68:C3:41:EF:9B:2C:0E:46:8B:B1:58:DD:1C:B7:AE:F0:AB
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3136382e302e3139322e302f32322d3332203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:c9:92:63:34:05:4b:ff:7a:d8:97:94:68:8b:29:8f:8c:
         5f:33:1f:48:85:99:f7:7a:9e:08:51:49:2e:50:89:10:9d:e4:
         47:fe:64:b2:23:e9:a2:75:eb:e2:8c:18:8c:53:aa:20:8e:a7:
         1e:d4:09:d0:65:cc:78:84:5c:7c:d3:4f:fe:03:f5:0d:96:2f:
         f8:64:90:3a:54:d7:2d:e7:34:a7:90:b9:ac:fa:1d:c4:11:0a:
         a2:cc:87:8a:66:e5:ea:b5:03:9a:a7:df:c1:12:ea:01:a7:66:
         a0:d9:ec:9c:1e:2c:3c:8e:36:a5:64:9c:43:9e:0f:84:61:41:
         80:a8:fd:f4:76:2c:af:53:44:b7:6d:2f:78:2a:21:73:87:02:
         6f:4d:65:24:8b:ff:2d:dc:33:b6:4c:24:45:31:19:93:0d:03:
         31:bd:10:fd:d7:fd:04:fd:25:62:51:5b:18:4f:1c:5b:ce:02:
         2d:8a:77:21:95:84:a5:db:14:45:0b:42:f6:ab:2a:2d:30:3e:
         45:bf:37:3c:33:89:b4:eb:b2:df:7b:28:ba:66:14:70:78:b6:
         84:f4:f3:4f:8e:07:d1:d5:1a:0b:9e:4b:26:dc:69:ec:ed:72:
         e9:24:41:61:42:cb:d6:44:e6:24:17:17:ab:d3:52:71:e3:49:
         fa:d6:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:57 2024 by rpki-client on console-ams.rpki-client.org