Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3234203d3e20323634333539.roa
File:                     3133312e3136312e32342e302f32322d3234203d3e20323634333539.roa (raw, json)
Hash identifier:          ZqkNn2cvqvWm8lFOXBbNqdrMb2txSOxwwnHpYAmt1e8=
Subject key identifier:   B6:52:B7:AF:DA:FB:91:63:4D:3B:AB:A6:C3:24:C6:A3:6A:19:01:8A
Certificate issuer:       /CN=FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D
Certificate serial:       36B4BFB0CA5F6D631801C0C2429DFD1CFB8AC81A
Authority key identifier: FF:8A:5F:40:D9:FA:BC:2A:93:C5:3F:69:C0:94:73:AA:3C:A5:FA:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3234203d3e20323634333539.roa
Signing time:             Mon 25 May 2026 15:12:49 +0000
ROA not before:           Mon 25 May 2026 15:07:49 +0000
ROA not after:            Mon 24 May 2027 15:12:49 +0000
asID:                     264359
IP address blocks:        131.161.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.crl
                          rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b4:bf:b0:ca:5f:6d:63:18:01:c0:c2:42:9d:fd:1c:fb:8a:c8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D
        Validity
            Not Before: May 25 15:07:49 2026 GMT
            Not After : May 24 15:12:49 2027 GMT
        Subject: CN=B652B7AFDAFB91634D3BABA6C324C6A36A19018A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:83:28:ba:b0:ff:9c:61:53:7d:d0:45:9a:
                    ac:fe:cd:e8:7b:31:6c:33:96:9e:1b:84:e9:4d:fa:
                    47:7d:77:85:e6:08:b0:cb:ba:85:5e:95:d2:4e:00:
                    a2:9a:98:dc:53:a2:cc:47:30:dc:ee:97:f9:94:bc:
                    ca:37:c5:8b:9e:e9:01:71:4b:3d:96:de:21:65:82:
                    dd:35:f2:b2:3f:4c:e3:0a:7d:13:cf:6d:3d:e8:db:
                    9f:05:10:67:dc:71:2c:0d:3f:59:c4:34:f3:b8:ef:
                    0b:46:03:83:45:b0:9f:81:91:b1:dd:e4:e0:dc:fc:
                    7b:b9:85:ef:69:52:2c:28:42:bf:f1:bd:63:a3:43:
                    96:a4:f1:d6:a7:81:b6:b4:6e:83:b3:10:c0:72:7e:
                    14:42:0e:52:1f:65:f4:6e:97:9f:ba:5f:d0:29:bb:
                    8f:cd:38:8a:34:ee:c0:15:87:31:a1:2b:5c:9f:db:
                    05:e9:91:71:f3:71:c3:dc:07:40:ce:2b:3d:17:cb:
                    9b:b5:69:ce:80:02:30:5b:fa:16:8c:83:0b:04:42:
                    8b:2f:69:19:37:73:ca:90:a1:b1:8f:e6:24:66:ab:
                    d0:90:07:9f:cd:52:42:4b:04:7e:6c:62:76:09:fd:
                    64:c6:ba:2c:8f:27:2a:f9:0d:54:2e:5a:10:90:c9:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:52:B7:AF:DA:FB:91:63:4D:3B:AB:A6:C3:24:C6:A3:6A:19:01:8A
            X509v3 Authority Key Identifier:
                keyid:FF:8A:5F:40:D9:FA:BC:2A:93:C5:3F:69:C0:94:73:AA:3C:A5:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8A5F40D9FABC2A93C53F69C09473AA3CA5FA3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3133312e3136312e32342e302f32322d3234203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:f7:a2:08:7b:db:4e:77:d5:b6:19:0b:3b:4d:0c:b0:41:1b:
         92:ef:5e:bf:f7:ad:5b:af:bd:f0:83:33:d7:59:a0:83:5c:f1:
         04:8a:15:cf:8f:01:86:d6:13:6d:c6:48:90:93:36:a1:e7:dd:
         9d:28:e7:0f:84:fb:62:6d:67:a2:61:79:b7:76:fd:40:57:fc:
         ba:6d:8d:80:85:3d:0c:78:89:de:88:74:4e:56:3b:3c:f5:b5:
         0f:19:97:d2:d5:58:ed:ec:2e:02:08:b0:71:cf:4e:90:80:93:
         4f:a7:a9:e4:bf:e9:fe:ad:11:3d:50:89:8a:90:59:81:7e:91:
         bc:d3:57:5a:a0:30:21:23:90:08:19:59:52:c7:7d:04:19:56:
         4f:32:d7:24:48:b3:92:d1:8b:b8:60:53:d8:19:a2:60:f5:b5:
         9a:6c:73:d3:0a:d4:9e:cb:ce:13:71:0c:3b:4c:33:6e:eb:e6:
         87:ef:c1:be:d0:06:db:97:90:5e:4c:0c:12:73:b3:c6:62:0e:
         26:fd:4c:da:b2:5d:95:6b:f0:7a:40:43:66:d2:ad:26:ef:07:
         21:f1:71:28:93:37:b1:29:b6:3a:e0:15:21:d6:d4:47:33:9f:
         5b:69:6c:ee:74:47:01:14:5b:90:7e:e9:96:27:01:6b:93:2e:
         95:dc:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:14:56 2026 by rpki-client