Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39342e302f32342d3234203d3e203631383731.roa
File:                     3133312e302e39342e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          jzIK6SA4tw/kv9SRfMVKNTxMBUMbMGjevmGES0edI3k=
Subject key identifier:   97:71:57:64:2F:25:2F:5E:7D:9A:06:1E:5B:E2:3B:B2:E2:42:C6:E8
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       11903EB70F51F9CC6D39B92653F77A4F1F49D154
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39342e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:20 +0000
ROA not before:           Sun 01 Mar 2026 18:47:20 +0000
ROA not after:            Sun 28 Feb 2027 18:52:20 +0000
asID:                     61871
IP address blocks:        131.0.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:90:3e:b7:0f:51:f9:cc:6d:39:b9:26:53:f7:7a:4f:1f:49:d1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:20 2026 GMT
            Not After : Feb 28 18:52:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:ec:5e:34:43:f8:49:16:e6:75:b6:e0:f0:
                    bd:7f:3a:29:90:6e:ba:a0:fe:2f:6e:09:a6:7e:3e:
                    17:0e:9e:5d:fc:a4:cb:aa:a2:61:3a:ec:53:25:56:
                    1f:47:31:c2:84:0c:c4:e6:65:da:18:df:c8:40:80:
                    c4:25:f1:30:ca:4b:3a:7a:f9:14:a7:9b:88:18:a1:
                    a5:a0:80:b7:6d:9f:5b:bb:55:e9:f3:60:ab:28:a7:
                    e6:0a:de:44:2c:ee:b8:84:fb:40:71:37:cb:3f:a8:
                    21:e6:02:e0:47:51:b4:16:68:9b:2c:c3:a1:2a:f5:
                    16:21:44:86:f8:af:fd:88:31:bd:0c:f5:a0:53:3f:
                    ed:77:e7:ad:6b:a7:c9:6c:29:fe:82:e5:28:2d:6a:
                    d9:9a:03:86:57:f4:33:f7:75:2f:23:0a:77:5a:50:
                    07:67:1f:2f:b0:05:a6:0f:c0:3d:35:c6:60:26:c1:
                    ad:bd:aa:e8:85:89:48:3a:9c:71:a1:cf:b7:6a:30:
                    5c:21:d9:32:19:73:ad:7b:8b:c4:58:e7:e6:ab:b3:
                    f3:43:1d:6c:a3:b0:a4:e2:ce:24:e2:9a:56:5c:a7:
                    85:0c:d8:11:df:00:79:e2:db:62:47:26:f7:3a:9b:
                    d4:38:ac:0e:37:4c:b2:f6:4a:33:51:45:28:0a:30:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:57:64:2F:25:2F:5E:7D:9A:06:1E:5B:E2:3B:B2:E2:42:C6:E8
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133312e302e39342e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:07:c8:b7:c1:40:c3:9d:3d:4f:78:0b:bc:e9:8b:69:88:61:
         f3:87:07:95:8a:0a:dd:b6:93:ba:83:e7:ca:8d:03:05:ad:28:
         9d:5d:e2:50:19:2c:5c:da:85:1d:e3:e0:3e:4e:34:61:7f:b2:
         61:9a:9f:28:40:be:0c:88:a2:11:ab:27:2b:36:7f:c3:35:cc:
         cf:49:cc:18:12:1e:45:cc:f1:68:72:09:6c:4b:f7:65:3a:f0:
         79:29:ad:dc:1a:d2:01:7b:cc:d9:2d:3d:5b:02:c7:99:ce:7c:
         bb:82:56:45:c7:0e:14:85:b7:3b:98:30:fc:3a:1d:cb:6c:31:
         06:c2:c6:7c:9b:96:4d:a9:0e:a4:a7:d0:fa:0f:3c:01:46:d4:
         ad:fc:ad:db:5c:68:0b:fa:fc:a2:e0:47:43:d7:46:d5:a8:bd:
         15:b9:58:f1:97:03:f0:d6:ee:c4:2e:63:db:1d:d8:c3:c6:a2:
         ac:47:c9:57:b0:89:bc:3e:6f:8c:72:c2:94:b4:32:54:5d:bb:
         6b:be:e0:5d:36:de:11:0a:a0:73:9a:2c:d3:8f:93:8a:a6:ad:
         a2:1c:72:ee:63:c2:91:5f:cf:2a:7f:81:8d:1b:b8:91:14:46:
         9f:ac:45:a6:9e:68:43:c9:79:cb:16:97:98:30:56:41:8e:e9:
         97:62:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:40 2026 by rpki-client