Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39322e302f32332d3233203d3e203631383731.roa
File:                     3133312e302e39322e302f32332d3233203d3e203631383731.roa (raw, json)
Hash identifier:          ihKCjI4/fg/YWKwXTre1wDZWjABDRzrWaG2/8toKNh0=
Subject key identifier:   29:64:40:B5:00:A2:02:64:82:6B:EF:C5:5C:BA:2C:05:26:D1:91:5E
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       14368F03BA3357713FE187A9FA6A8DBC00B1E868
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39322e302f32332d3233203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:22 +0000
ROA not before:           Sun 01 Mar 2026 18:47:22 +0000
ROA not after:            Sun 28 Feb 2027 18:52:22 +0000
asID:                     61871
IP address blocks:        131.0.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:36:8f:03:ba:33:57:71:3f:e1:87:a9:fa:6a:8d:bc:00:b1:e8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:22 2026 GMT
            Not After : Feb 28 18:52:22 2027 GMT
        Subject: CN=3082010A0282010100A693AC2EA937C3DD3E40B54C817AC528C2F3AAA57C799850438B708AF90D858C92E92C7C232D435AA87FC5A134FBD2EAAB162450C4CC087BEE497696FB3AA8D6217B0831E515958BF583A0A39F40378730C5D60306BFAFB158979DC58FD43D93BE22433094D92817000CA2FD7F0B394E9F89B7166610BE2485B21584FDEDEC20C8A210020222F4AE485056D98F4D58D1F12F4C35E51FA9ED0054D94EB9766496D06C02033C45DE2FC66FE6809FCCDB1CDCECD139CEFBAE6021570745694E604CAF1BBC74294350736DE263506C4DB3A7FCCD5E9148D7844388E0FC897C13D3DDDC058E0792B2BE86C1A4AEF001D83E1D160FD6A12D8DECF0EF39370DCD6D3D650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:ac:2e:a9:37:c3:dd:3e:40:b5:4c:81:7a:
                    c5:28:c2:f3:aa:a5:7c:79:98:50:43:8b:70:8a:f9:
                    0d:85:8c:92:e9:2c:7c:23:2d:43:5a:a8:7f:c5:a1:
                    34:fb:d2:ea:ab:16:24:50:c4:cc:08:7b:ee:49:76:
                    96:fb:3a:a8:d6:21:7b:08:31:e5:15:95:8b:f5:83:
                    a0:a3:9f:40:37:87:30:c5:d6:03:06:bf:af:b1:58:
                    97:9d:c5:8f:d4:3d:93:be:22:43:30:94:d9:28:17:
                    00:0c:a2:fd:7f:0b:39:4e:9f:89:b7:16:66:10:be:
                    24:85:b2:15:84:fd:ed:ec:20:c8:a2:10:02:02:22:
                    f4:ae:48:50:56:d9:8f:4d:58:d1:f1:2f:4c:35:e5:
                    1f:a9:ed:00:54:d9:4e:b9:76:64:96:d0:6c:02:03:
                    3c:45:de:2f:c6:6f:e6:80:9f:cc:db:1c:dc:ec:d1:
                    39:ce:fb:ae:60:21:57:07:45:69:4e:60:4c:af:1b:
                    bc:74:29:43:50:73:6d:e2:63:50:6c:4d:b3:a7:fc:
                    cd:5e:91:48:d7:84:43:88:e0:fc:89:7c:13:d3:dd:
                    dc:05:8e:07:92:b2:be:86:c1:a4:ae:f0:01:d8:3e:
                    1d:16:0f:d6:a1:2d:8d:ec:f0:ef:39:37:0d:cd:6d:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:64:40:B5:00:A2:02:64:82:6B:EF:C5:5C:BA:2C:05:26:D1:91:5E
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39322e302f32332d3233203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:84:7a:d5:8c:8d:8a:2c:6b:52:62:3f:fa:ea:cf:92:53:
         9d:cf:0b:39:b0:4c:80:60:a5:c1:ac:0d:c9:8e:af:20:77:d3:
         88:f3:1f:aa:09:22:a5:6e:e0:f5:20:a9:6c:e5:6f:54:d1:4c:
         9f:e4:ee:b9:8c:77:51:61:0a:39:66:4c:c5:20:a0:90:10:9d:
         0b:39:28:ba:12:32:71:b8:53:16:e7:20:7c:c2:ca:8e:97:39:
         21:91:a8:db:fb:c3:a4:f5:47:c9:d1:6d:bd:78:30:aa:8c:be:
         e9:b2:48:96:9c:bb:8e:44:70:c7:c5:c0:74:ec:1d:55:54:42:
         90:b0:07:a1:d1:29:05:fd:9b:2e:ea:58:10:d0:95:ba:4f:5f:
         e6:89:c9:b6:8b:67:1b:97:b9:6d:ac:e6:c4:a3:4a:d5:3e:82:
         9f:af:15:49:af:b3:64:0e:71:2f:e8:2f:5c:c3:f4:f2:d6:f4:
         6d:c7:0c:45:99:78:3d:13:4f:a5:ca:e4:f3:a3:4b:b6:1d:00:
         20:e0:ae:70:70:5a:d9:0d:e9:76:1d:ed:04:67:a0:77:aa:6e:
         de:50:e3:ca:b6:a7:f8:53:da:90:df:28:e0:cd:11:2d:4c:bc:
         3e:73:31:b9:b9:a7:3e:82:68:a0:9c:05:49:5f:87:01:55:de:
         1c:3a:e4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:43 2026 by rpki-client