Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa
File:                     3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa (raw, json)
Hash identifier:          So1i6kOihUkWhi9hgFl2EnZzGl83+LoEMg9tjgzuGf4=
Subject key identifier:   8C:06:F2:0A:97:8E:12:D1:49:50:16:4D:C7:75:AC:43:70:7A:68:13
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       3146FF873767C9F70F475FA5927EFE5FF9FFC8AE
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa
Signing time:             Mon 25 Aug 2025 18:53:08 +0000
ROA not before:           Mon 25 Aug 2025 18:48:08 +0000
ROA not after:            Mon 24 Aug 2026 18:53:08 +0000
asID:                     264359
IP address blocks:        131.161.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl
                          rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:46:ff:87:37:67:c9:f7:0f:47:5f:a5:92:7e:fe:5f:f9:ff:c8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 25 18:48:08 2025 GMT
            Not After : Aug 24 18:53:08 2026 GMT
        Subject: CN=8C06F20A978E12D14950164DC775AC43707A6813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:48:f1:03:30:93:fd:02:8e:82:48:2c:25:
                    ab:eb:43:79:bd:91:1e:90:f2:c3:e1:76:1f:4e:ff:
                    ae:d5:54:51:19:8f:aa:02:57:b2:02:6d:df:bb:74:
                    36:d4:48:2a:6e:97:3e:64:dc:e5:6e:9f:37:1a:f3:
                    a5:37:47:3b:e3:11:a2:42:2b:04:40:02:75:76:36:
                    26:4b:a0:e8:fa:0b:65:33:16:58:7d:ad:6d:f1:47:
                    5b:33:56:e1:1f:b3:17:2f:c0:41:ad:be:d6:8e:79:
                    d5:80:10:ea:e3:98:23:79:31:46:27:5c:7b:ba:22:
                    e8:6e:c5:39:b5:03:07:13:25:be:c5:7d:1f:d4:46:
                    f6:df:5e:e0:74:9f:7e:6d:af:66:c8:16:af:57:e0:
                    48:6d:e9:70:af:48:7a:ea:60:8f:4c:03:5f:66:36:
                    49:72:b9:73:d0:46:df:ab:6c:af:09:ce:bf:48:a2:
                    cf:f9:7c:91:4e:38:65:11:ff:4c:aa:2e:ca:d5:d0:
                    b9:8f:c0:d0:91:5c:b8:22:15:5c:51:3f:83:a6:63:
                    67:87:99:1e:a8:d8:8a:dd:48:dc:d6:d4:a9:d4:01:
                    a4:f1:7a:43:6e:f2:5a:41:29:f3:e5:d3:20:ac:a2:
                    c1:37:e7:44:0b:12:e9:64:31:55:e6:67:17:ef:91:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:06:F2:0A:97:8E:12:D1:49:50:16:4D:C7:75:AC:43:70:7A:68:13
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3332203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:42:d3:29:4f:9e:23:c7:bc:cf:83:92:06:fe:a7:5f:da:40:
         20:d4:85:5c:1e:66:f4:b4:53:c0:3a:21:53:70:ab:32:13:9d:
         5b:31:85:9d:5e:3d:ec:07:f9:0d:8d:7c:b1:ba:c1:af:8a:75:
         a4:62:7d:94:ea:a5:f6:73:a8:7c:4d:2a:6e:38:27:88:1d:a6:
         d8:4e:e8:57:21:60:31:da:02:25:02:56:f1:87:56:5d:e8:a4:
         a8:09:c9:bb:ed:d2:07:28:78:e0:36:47:7a:dd:6b:5d:3e:82:
         b4:9c:72:c4:f3:f6:ce:e8:9d:44:0b:8f:54:a8:ad:a1:47:19:
         1a:e3:2e:aa:a0:ff:aa:b8:41:24:6f:12:e2:1e:a9:52:1d:78:
         58:73:b0:a8:af:b1:76:60:66:f7:b5:fd:f6:ad:ac:1f:3a:88:
         9c:d2:4b:77:c1:be:4f:23:5e:4a:08:9c:e9:5e:a8:4b:10:d3:
         7a:98:66:5b:19:ba:b0:bf:61:49:1c:61:73:10:e2:f1:3e:79:
         e8:84:70:4b:14:87:86:34:70:a3:3f:67:4e:23:fa:b6:12:75:
         a1:8c:ad:9a:43:34:88:75:87:01:87:dd:c3:f8:7a:9f:9f:54:
         e2:49:5e:d2:2a:4c:95:4a:88:fb:c9:6a:f8:a4:b1:b7:7e:5f:
         a8:8a:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:38:24 2025 by rpki-client