Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130312e302f32342d3234203d3e203631383731.roa
File:                     3133382e35392e3130312e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          /7qndqkPNl4tk2xC+gyiMO0mS3kW5erqf9uH0qUdt30=
Subject key identifier:   F3:2B:7A:74:AE:9A:7F:D6:2B:5F:64:FE:99:03:8B:6B:FF:16:9C:F9
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       50BB88891592EF6DC9C9B21B17649B0D38340A55
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130312e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:20 +0000
ROA not before:           Sun 01 Mar 2026 18:47:20 +0000
ROA not after:            Sun 28 Feb 2027 18:52:20 +0000
asID:                     61871
IP address blocks:        138.59.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bb:88:89:15:92:ef:6d:c9:c9:b2:1b:17:64:9b:0d:38:34:0a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:20 2026 GMT
            Not After : Feb 28 18:52:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:6b:af:8b:ea:40:b6:f4:2e:f4:fb:c7:52:
                    0f:54:4e:77:cf:7a:cd:4b:c0:e1:ee:0a:06:60:8b:
                    f8:98:fe:56:33:0c:07:21:bd:e3:06:ce:79:28:0c:
                    2d:33:51:89:7c:4d:d3:e0:6a:9b:61:0d:c4:72:ff:
                    24:cf:c5:6f:08:83:b7:dc:71:e6:48:aa:6c:48:b3:
                    d8:1e:11:d4:37:8b:ce:4a:6f:b5:65:68:30:52:b7:
                    95:1c:36:61:ea:75:74:86:ce:bf:f6:d1:19:38:2f:
                    ce:0e:0a:21:c8:23:96:99:50:c4:88:04:dc:22:08:
                    f6:21:38:2d:c3:9f:1c:45:02:84:0c:40:09:8c:fb:
                    0a:d8:64:e9:f9:97:f5:fd:ca:85:8f:0a:b1:f1:e0:
                    22:50:7c:e9:b5:88:22:61:23:b1:31:76:1e:30:68:
                    79:05:62:e1:3b:67:8b:66:5b:91:e9:8a:d0:0a:2c:
                    84:74:fa:e1:6d:74:1a:ba:e3:c0:26:b1:84:e9:8f:
                    88:f3:f5:a5:51:57:32:4b:d4:33:94:8d:61:2c:26:
                    2e:ba:65:17:cc:81:b4:ba:f1:44:d2:41:ad:7c:05:
                    70:93:34:de:83:85:b0:57:1b:10:86:51:14:b3:62:
                    79:4b:51:13:8a:87:0c:07:42:36:c9:e8:76:2e:1e:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2B:7A:74:AE:9A:7F:D6:2B:5F:64:FE:99:03:8B:6B:FF:16:9C:F9
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130312e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:80:5f:7c:36:c4:f1:92:0c:ac:96:90:32:3b:70:22:8b:17:
         6c:69:f0:63:43:08:84:b8:33:93:57:b9:d5:4e:15:ff:33:d0:
         87:c6:67:25:9e:10:36:4a:ef:74:fe:c8:74:f6:5d:c8:c6:d7:
         0a:24:94:4c:1a:8d:c2:6d:c1:1f:83:f6:9a:f2:9d:3a:2d:f2:
         8b:50:0d:38:b6:85:c4:c9:19:00:dc:c1:fa:88:4b:1c:f3:bd:
         e2:61:da:32:fd:b6:95:d6:ec:39:2d:11:f8:50:0e:2c:ef:11:
         36:5e:4b:fc:d0:41:ff:40:08:25:46:80:02:74:3f:4b:9d:8d:
         97:02:e6:3d:1b:ae:b2:75:20:26:eb:df:04:45:71:8b:5e:c0:
         dd:39:d9:90:56:a0:be:f0:9c:2f:f8:ca:54:ed:ce:22:27:99:
         b1:8b:4d:a3:63:18:bc:32:85:55:1c:ea:3d:f6:5f:a5:97:e8:
         2f:6d:4d:cb:57:44:cb:5d:6e:e6:44:88:78:07:5e:30:bf:fe:
         b5:47:cc:f3:bd:c3:62:28:8d:5d:f8:fe:37:7b:cf:3a:96:83:
         a8:d3:26:a3:52:97:34:58:d5:bf:fb:29:fb:9a:df:7c:16:a0:
         3c:6b:23:55:5a:f1:58:4b:a7:e0:32:11:19:98:29:04:d0:4c:
         b0:ba:6f:9e
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUULuIiRWS723JybIbF2SbDTg0ClUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1Q0JDMzhGNjM2ODRDREI4MkJDMjRFNDM1ODZFOEE3
MkE4RjhBRjAeFw0yNjAzMDExODQ3MjBaFw0yNzAyMjgxODUyMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTkyRTZCQUY4QkVBNDBCNkY0
MkVGNEZCQzc1MjBGNTQ0RTc3Q0Y3QUNENEJDMEUxRUUwQTA2NjA4QkY4OThGRTU2
MzMwQzA3MjFCREUzMDZDRTc5MjgwQzJEMzM1MTg5N0M0REQzRTA2QTlCNjEwREM0
NzJGRjI0Q0ZDNTZGMDg4M0I3REM3MUU2NDhBQTZDNDhCM0Q4MUUxMUQ0Mzc4QkNF
NEE2RkI1NjU2ODMwNTJCNzk1MUMzNjYxRUE3NTc0ODZDRUJGRjZEMTE5MzgyRkNF
MEUwQTIxQzgyMzk2OTk1MEM0ODgwNERDMjIwOEY2MjEzODJEQzM5RjFDNDUwMjg0
MEM0MDA5OENGQjBBRDg2NEU5Rjk5N0Y1RkRDQTg1OEYwQUIxRjFFMDIyNTA3Q0U5
QjU4ODIyNjEyM0IxMzE3NjFFMzA2ODc5MDU2MkUxM0I2NzhCNjY1QjkxRTk4QUQw
MEEyQzg0NzRGQUUxNkQ3NDFBQkFFM0MwMjZCMTg0RTk4Rjg4RjNGNUE1NTE1NzMy
NEJENDMzOTQ4RDYxMkMyNjJFQkE2NTE3Q0M4MUI0QkFGMTQ0RDI0MUFEN0MwNTcw
OTMzNERFODM4NUIwNTcxQjEwODY1MTE0QjM2Mjc5NEI1MTEzOEE4NzBDMDc0MjM2
QzlFODc2MkUxRTZBM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqS5rr4vqQLb0LvT7x1IPVE53z3rNS8Dh7goGYIv4mP5WMwwHIb3j
Bs55KAwtM1GJfE3T4GqbYQ3Ecv8kz8VvCIO33HHmSKpsSLPYHhHUN4vOSm+1ZWgw
UreVHDZh6nV0hs6/9tEZOC/ODgohyCOWmVDEiATcIgj2ITgtw58cRQKEDEAJjPsK
2GTp+Zf1/cqFjwqx8eAiUHzptYgiYSOxMXYeMGh5BWLhO2eLZluR6YrQCiyEdPrh
bXQauuPAJrGE6Y+I8/WlUVcyS9QzlI1hLCYuumUXzIG0uvFE0kGtfAVwkzTeg4Ww
VxsQhlEUs2J5S1ETiocMB0I2yeh2Lh5qPwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FPMrenSumn/WK19k/pkDi2v/Fpz5MB8GA1UdIwQYMBaAFDFcvDj2NoTNuCvCTkNY
bopyqPivMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzEvMzE1Q0JDMzhGNjM2ODRD
REI4MkJDMjRFNDM1ODZFOEE3MkE4RjhBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zMTVDQkMzOEY2MzY4NENEQjgyQkMyNEU0MzU4NkU4QTcyQThG
OEFGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8xLzMxMzMzODJlMzUzOTJlMzEzMDMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM4MzczMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIo7
ZTANBgkqhkiG9w0BAQsFAAOCAQEAQYBffDbE8ZIMrJaQMjtwIosXbGnwY0MIhLgz
k1e51U4V/zPQh8ZnJZ4QNkrvdP7IdPZdyMbXCiSUTBqNwm3BH4P2mvKdOi3yi1AN
OLaFxMkZANzB+ohLHPO94mHaMv22ldbsOS0R+FAOLO8RNl5L/NBB/0AIJUaAAnQ/
S52NlwLmPRuusnUgJuvfBEVxi17A3TnZkFagvvCcL/jKVO3OIieZsYtNo2MYvDKF
VRzqPfZfpZfoL21Ny1dEy11u5kSIeAdeML/+tUfM873DYiiNXfj+N3vPOpaDqNMm
o1KXNFjVv/sp+5rffBagPGsjVVrxWEun4DIRGZgpBNBMsLpvng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:33 2026 by rpki-client