Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130302e302f32342d3234203d3e203631383731.roa
File:                     3133382e35392e3130302e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          4nw9cZo1VdUmFQBqzVogiPbRmOJe4EYADl9VLyTQ7Lk=
Subject key identifier:   F0:FD:EC:72:F9:0F:EC:A1:D7:80:2D:B2:7D:D9:8A:E2:17:62:91:BE
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       4756F69061ABCF8BF842E90356251D3D50C9250C
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130302e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:22 +0000
ROA not before:           Sun 01 Mar 2026 18:47:22 +0000
ROA not after:            Sun 28 Feb 2027 18:52:22 +0000
asID:                     61871
IP address blocks:        138.59.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:56:f6:90:61:ab:cf:8b:f8:42:e9:03:56:25:1d:3d:50:c9:25:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:22 2026 GMT
            Not After : Feb 28 18:52:22 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:d9:49:ac:77:b3:38:f5:b0:e1:5a:45:cc:
                    65:03:f9:da:fb:6b:c1:8c:70:61:d5:af:75:84:7c:
                    16:77:5c:a3:8b:46:1a:66:b3:49:23:b5:9c:d7:c2:
                    10:29:68:fa:dc:79:e9:95:7c:42:a8:94:73:eb:b7:
                    55:17:1a:2d:20:3e:06:31:3c:3e:a2:b6:8d:6a:97:
                    b1:76:ef:e1:ac:41:93:7f:09:06:56:26:85:38:45:
                    41:83:31:d8:83:3f:ba:a8:b3:25:97:7b:84:a7:db:
                    2b:a1:37:47:1b:02:33:3c:cc:fa:d2:44:4d:6a:df:
                    80:56:bb:62:81:b3:c7:8d:68:15:ea:c6:5d:7a:5d:
                    6f:de:8e:c3:34:2b:d0:c2:2e:34:78:d3:01:fd:13:
                    0d:72:75:ec:a2:e5:66:e4:b5:14:f5:e5:ed:17:b3:
                    8f:4c:fc:fa:7c:95:d9:6b:33:98:8e:64:9f:96:fd:
                    7c:e2:4d:71:0c:a2:2e:f4:86:ab:fe:61:6a:78:73:
                    59:64:31:d8:3c:ef:e5:05:f2:61:c5:8a:84:1a:12:
                    75:ab:37:b5:f1:bc:1b:80:8d:08:84:3a:35:e5:3a:
                    ad:37:e8:a0:89:08:8c:8f:e6:56:77:e1:a2:52:fb:
                    05:a9:11:c6:dc:af:ba:6c:82:32:39:1b:b2:83:88:
                    58:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:EC:72:F9:0F:EC:A1:D7:80:2D:B2:7D:D9:8A:E2:17:62:91:BE
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130302e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:af:01:8e:8c:da:d3:92:a2:29:fc:8e:79:b1:99:63:8d:1b:
         aa:ee:8f:60:6f:bf:2a:50:3e:5f:68:8a:84:71:58:4f:bf:f0:
         e5:84:cb:0f:07:b3:e7:dd:ad:1b:b2:ee:9d:7d:af:28:93:bb:
         b9:04:e8:67:d1:df:f4:5a:f0:fc:9b:ac:9e:85:b5:16:3a:8d:
         0f:e7:74:92:a7:0c:2c:24:d5:69:38:75:6b:b5:32:a0:36:e4:
         f8:2b:a8:cc:a6:b7:5e:ba:81:b7:d1:6d:30:f6:a4:1a:11:80:
         d0:75:bf:d3:43:56:d9:e8:29:c6:f0:9a:ee:e5:1c:37:72:d3:
         f6:d8:38:26:30:5d:d5:52:0d:73:af:eb:34:f3:42:85:3e:8e:
         68:7c:21:8b:f2:7b:6a:14:64:9c:40:95:ba:c6:45:c1:65:54:
         31:b7:c4:70:61:23:4d:de:04:3b:38:74:64:69:01:04:42:8f:
         05:8f:c2:3e:a6:36:f1:23:81:6a:68:db:f0:7c:d4:ce:aa:7a:
         e8:ab:54:ff:19:f7:1b:7f:21:2f:59:8e:70:00:66:9b:eb:3e:
         56:72:5c:0c:58:79:a5:4c:1d:8b:57:ed:ab:37:87:50:88:88:
         2f:15:f5:de:f6:7b:52:a9:10:25:fd:88:cf:f3:01:23:0a:41:
         1c:11:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:35 2026 by rpki-client