Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39332e302f32342d3234203d3e203631383731.roa
File:                     3133312e302e39332e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          PxiFwh9XIVdGAnJVm51Ar6ADj31+1geCQXygspTcrdw=
Subject key identifier:   BA:7B:89:77:3D:83:B1:41:6A:CC:FD:38:EC:19:48:09:EF:57:7D:1A
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       0193ED676A5B2D1E961DC63D36A99105C695CF0A
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39332e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:22 +0000
ROA not before:           Sun 01 Mar 2026 18:47:22 +0000
ROA not after:            Sun 28 Feb 2027 18:52:22 +0000
asID:                     61871
IP address blocks:        131.0.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ed:67:6a:5b:2d:1e:96:1d:c6:3d:36:a9:91:05:c6:95:cf:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:22 2026 GMT
            Not After : Feb 28 18:52:22 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:db:20:64:15:ed:a1:60:d1:67:c7:b1:ad:
                    da:25:49:2d:e2:bc:f6:f7:42:d8:dd:61:16:4c:93:
                    f0:ee:6c:80:f5:29:5d:d9:20:3b:67:96:40:3e:9a:
                    c1:dd:04:36:93:ec:e5:a1:9f:e3:18:6d:c0:80:33:
                    39:0f:26:09:59:29:3f:f6:7c:56:ed:90:b9:66:d3:
                    c6:16:38:e6:70:56:cf:a3:83:1e:b6:b3:41:91:2e:
                    a7:96:01:83:fb:03:01:8e:9c:89:2e:8a:7f:6d:92:
                    4c:0c:ad:96:cc:8c:ff:32:c0:09:21:b7:01:c4:ad:
                    63:aa:0a:f2:00:16:fc:92:fc:fc:31:9f:60:ce:24:
                    1e:3e:75:21:ba:ed:f1:90:4b:64:b9:b1:56:1b:32:
                    e0:d2:e7:35:36:f4:69:00:5e:2e:9e:58:96:29:fd:
                    07:36:95:fb:ee:3b:fc:f1:1a:af:65:58:e9:37:17:
                    a3:4f:74:57:82:65:28:6e:01:ae:c4:52:29:a5:cf:
                    de:33:a6:5e:13:87:99:dc:9c:81:5e:68:02:b2:1f:
                    d2:f8:18:a4:02:ec:b7:15:44:58:e2:76:f1:ee:ca:
                    9d:b2:be:91:25:1f:fd:71:f5:ff:c6:ca:b5:b0:26:
                    fc:fd:91:e0:54:6b:7b:8e:85:59:22:29:d6:11:1c:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7B:89:77:3D:83:B1:41:6A:CC:FD:38:EC:19:48:09:EF:57:7D:1A
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39332e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:45:d3:d1:19:29:db:91:c8:b6:35:e4:1a:08:0a:ed:53:
         38:7a:05:52:8c:26:2d:5b:f9:62:37:6a:4a:52:59:40:29:e5:
         32:6d:70:36:a7:8f:d8:1f:4d:98:38:a8:2d:06:b3:7c:7d:54:
         c4:cf:ec:be:52:9f:df:6a:6a:54:95:af:56:32:c7:f7:8e:d9:
         48:4a:dd:2b:b1:26:9e:81:0e:bd:12:1a:f9:42:cc:fa:41:6e:
         26:91:38:b2:40:05:ba:3a:97:c0:ce:3b:26:d9:fb:4c:32:73:
         2c:10:6d:ac:db:14:08:28:b8:ab:1a:85:9a:16:c2:2c:dd:9c:
         76:0d:04:04:8b:31:29:fc:4d:54:87:cb:4f:24:cc:d0:a1:63:
         9f:81:3c:27:ef:bd:9f:82:ca:89:f2:ad:3d:07:f0:74:c8:3f:
         9b:d9:e6:a6:9f:e6:03:f3:67:c2:d1:46:7a:66:3a:49:99:ea:
         e3:6f:2a:66:af:fa:3c:81:a5:79:f9:92:56:e7:28:d9:81:f4:
         4f:84:ad:e6:d7:93:51:d3:3e:9d:10:a2:4e:dd:5f:20:b0:01:
         45:e5:0d:af:2d:f9:8a:a1:2b:2c:e2:90:a7:b1:0a:f9:ff:6d:
         73:bc:9e:83:48:de:03:0e:3d:51:b1:fb:95:0b:97:5e:38:78:
         43:02:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:39 2026 by rpki-client