Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39322e302f32322d3232203d3e203631383731.roa
File:                     3133312e302e39322e302f32322d3232203d3e203631383731.roa (raw, json)
Hash identifier:          guP75vhoOyL790mhBZPGtVe6XHg5NVDBuGcurW28uZI=
Subject key identifier:   47:29:F1:C3:49:A8:CD:21:EC:16:4D:31:6F:06:21:42:73:F2:17:9C
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       4849225074BFCA72BE0931FF6C3F3DFF0C1CD5A6
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39322e302f32322d3232203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:20 +0000
ROA not before:           Sun 01 Mar 2026 18:47:20 +0000
ROA not after:            Sun 28 Feb 2027 18:52:20 +0000
asID:                     61871
IP address blocks:        131.0.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:49:22:50:74:bf:ca:72:be:09:31:ff:6c:3f:3d:ff:0c:1c:d5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:20 2026 GMT
            Not After : Feb 28 18:52:20 2027 GMT
        Subject: CN=3082010A0282010100AF97DAA6C347EC4A76B7EC6F2B0073646ECA9CCD59735A26443E24B30C875DB69702568FD970C3511FEA887B1EC97D155DB5F289E962F5F8055B8ABCA3500CFAEBFE7087CE1E5CA2594D9F2753F03A71079A22CE3BE43968F1FE9D8E602716DF378307FCAB6F147F6EBA6F9AD419F32C41C5F6FCD374BEF60BA12F1A90D9E235F09D66EBEC249BE128C43240FDF759267E9A1A72CC22964E017653EEFEF341E39F87D87EEA5AC0FAAF4A0196DA798A5F2FAAD135202600FA81F3406D14D9FA13DE5A71590AD1D1C4FF8706FC6813FBAA519E2EA3E6EF577471B3BD9357BDBF0E36FF23455B05F1820C14D28F93EAE895B442EB7E8DEDD8E989F697B93B76712B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:da:a6:c3:47:ec:4a:76:b7:ec:6f:2b:00:
                    73:64:6e:ca:9c:cd:59:73:5a:26:44:3e:24:b3:0c:
                    87:5d:b6:97:02:56:8f:d9:70:c3:51:1f:ea:88:7b:
                    1e:c9:7d:15:5d:b5:f2:89:e9:62:f5:f8:05:5b:8a:
                    bc:a3:50:0c:fa:eb:fe:70:87:ce:1e:5c:a2:59:4d:
                    9f:27:53:f0:3a:71:07:9a:22:ce:3b:e4:39:68:f1:
                    fe:9d:8e:60:27:16:df:37:83:07:fc:ab:6f:14:7f:
                    6e:ba:6f:9a:d4:19:f3:2c:41:c5:f6:fc:d3:74:be:
                    f6:0b:a1:2f:1a:90:d9:e2:35:f0:9d:66:eb:ec:24:
                    9b:e1:28:c4:32:40:fd:f7:59:26:7e:9a:1a:72:cc:
                    22:96:4e:01:76:53:ee:fe:f3:41:e3:9f:87:d8:7e:
                    ea:5a:c0:fa:af:4a:01:96:da:79:8a:5f:2f:aa:d1:
                    35:20:26:00:fa:81:f3:40:6d:14:d9:fa:13:de:5a:
                    71:59:0a:d1:d1:c4:ff:87:06:fc:68:13:fb:aa:51:
                    9e:2e:a3:e6:ef:57:74:71:b3:bd:93:57:bd:bf:0e:
                    36:ff:23:45:5b:05:f1:82:0c:14:d2:8f:93:ea:e8:
                    95:b4:42:eb:7e:8d:ed:d8:e9:89:f6:97:b9:3b:76:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:F1:C3:49:A8:CD:21:EC:16:4D:31:6F:06:21:42:73:F2:17:9C
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39322e302f32322d3232203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:a9:96:22:d9:0a:87:58:3e:d3:87:50:df:15:d1:18:d6:19:
         44:10:93:43:4d:e1:6d:22:a0:ce:bd:2a:fe:1f:20:6c:cb:e1:
         61:04:a2:62:15:6f:c3:94:7e:95:42:0d:0b:c2:56:94:d2:96:
         eb:0a:a0:d2:5b:58:27:85:f8:f9:28:44:99:bb:53:36:1b:01:
         d1:91:11:bd:1c:c9:62:62:2b:6d:95:61:cc:83:29:8f:ee:6a:
         08:b0:30:1c:32:c6:14:41:c2:13:49:20:64:d6:ee:92:79:be:
         01:c9:3b:0f:1c:df:27:2d:e8:21:a6:80:c7:6f:f8:fa:a1:33:
         87:a0:df:46:55:ff:a2:14:a1:0d:ec:17:39:6b:55:0b:1e:57:
         34:7b:c8:77:38:fe:04:85:f9:1e:f2:51:0c:9a:67:4d:ae:c0:
         af:8d:fe:0d:5a:9c:e5:14:f1:c3:1d:2c:7f:af:b8:ca:c3:af:
         2f:6d:2a:a0:bd:9c:6e:bf:5c:5e:87:ee:eb:51:42:9c:82:06:
         8e:48:3f:e9:ec:68:3c:33:00:9b:c6:6d:87:89:7d:05:e2:b8:
         0b:52:f8:13:34:c4:02:76:e7:6a:67:ee:ac:11:e9:0e:8c:b2:
         a4:24:84:98:ab:6c:d3:f0:7f:1d:c0:5a:10:f6:85:73:df:27:
         2d:f9:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:39 2026 by rpki-client