Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130322e302f32342d3234203d3e203631383731.roa
File:                     3133382e35392e3130322e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          faTSiguCrWGAegIKgPemf5DeJCs/Smc5G2CtoK2KJfY=
Subject key identifier:   A1:6F:50:A2:62:CC:6F:08:E5:99:C1:9D:83:EF:7F:D0:31:AD:4C:7A
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       4BA577F15D7B4E930852F2D88280037227F853F3
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130322e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:21 +0000
ROA not before:           Sun 01 Mar 2026 18:47:21 +0000
ROA not after:            Sun 28 Feb 2027 18:52:21 +0000
asID:                     61871
IP address blocks:        138.59.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a5:77:f1:5d:7b:4e:93:08:52:f2:d8:82:80:03:72:27:f8:53:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:21 2026 GMT
            Not After : Feb 28 18:52:21 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:47:0a:af:89:73:24:f7:26:55:4a:a9:2e:
                    05:58:46:b7:52:7d:d4:74:1d:2d:06:35:8a:04:f0:
                    a4:c3:42:52:cc:7f:44:5f:40:3b:d0:d9:f9:8f:d1:
                    56:4d:f5:4a:07:0d:5f:4c:86:81:7f:57:f3:b3:41:
                    db:48:4a:74:16:d4:fb:ac:3c:16:f3:43:6e:47:56:
                    23:5d:52:99:ac:ab:17:21:8f:33:32:fb:db:13:88:
                    78:a7:fe:c6:62:fb:97:66:46:fc:ad:1e:36:f6:6f:
                    0d:86:95:71:e2:d8:ba:43:90:ef:f7:45:8e:39:35:
                    27:ff:94:5b:c8:62:f5:84:d5:61:d2:b1:c2:43:65:
                    98:e2:60:3a:61:2e:60:b1:a0:0a:f4:eb:59:b5:26:
                    4b:8b:f4:eb:5d:75:fd:b8:70:95:a3:cb:f5:6b:70:
                    5b:2a:ca:1b:e2:15:dd:fd:85:1f:30:67:a0:32:b1:
                    ed:06:67:2f:28:10:89:6e:81:10:07:02:50:8f:26:
                    b5:90:ce:d6:d1:d2:7a:77:ce:bf:22:21:ee:e4:0a:
                    8c:52:b2:d5:ba:28:df:1d:9f:54:e4:12:1e:b5:67:
                    18:46:b7:08:ab:7f:b9:ff:78:b8:0d:ee:d4:0a:e2:
                    a3:37:3e:65:ca:d4:88:a4:bd:33:00:a9:3f:a7:c4:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6F:50:A2:62:CC:6F:08:E5:99:C1:9D:83:EF:7F:D0:31:AD:4C:7A
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3133382e35392e3130322e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:20:57:ea:1d:ab:fd:e1:21:33:1b:23:43:bf:ea:ce:30:
         d4:ff:cb:88:ff:82:bf:79:57:80:69:8b:46:09:b0:58:3b:55:
         11:d9:f8:6a:ad:56:68:78:d6:eb:29:84:44:4b:1e:bf:4e:a8:
         f8:8c:b3:fa:95:f1:e1:de:dc:2b:6e:9c:62:0e:39:91:50:a8:
         82:1a:f4:ed:a0:a2:9c:a1:7a:52:bf:4e:28:d6:18:fd:ce:c8:
         d1:ae:bf:d8:06:02:1f:fd:80:b7:8f:e5:f5:71:ec:09:1f:a9:
         28:77:d3:00:5e:f4:2a:85:0f:a5:d0:ce:af:04:56:7d:e1:23:
         88:87:81:2f:d8:9f:3d:0f:1b:13:35:9f:ec:f0:a5:a8:fb:d9:
         76:04:93:8a:c2:6c:2c:da:66:0d:00:c6:07:c5:35:59:92:e7:
         3d:db:4d:67:94:ac:ce:e4:1c:57:8a:e7:f5:cf:c2:a8:ab:04:
         f1:0e:b1:04:23:74:40:ae:b0:86:b0:dc:bb:36:90:9d:b2:18:
         f2:5f:90:d7:50:21:fc:ee:b7:67:62:bd:84:38:7b:12:84:ce:
         90:0b:31:b4:12:d9:46:93:bf:08:3c:8d:10:24:df:92:bc:7d:
         3a:9a:1c:20:8a:17:02:bb:fd:6e:32:67:ae:8f:49:0e:21:4b:
         59:1a:55:8f
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUS6V38V17TpMIUvLYgoADcif4U/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1Q0JDMzhGNjM2ODRDREI4MkJDMjRFNDM1ODZFOEE3
MkE4RjhBRjAeFw0yNjAzMDExODQ3MjFaFw0yNzAyMjgxODUyMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0I5NDQ3MEFBRjg5NzMyNEY3
MjY1NTRBQTkyRTA1NTg0NkI3NTI3REQ0NzQxRDJEMDYzNThBMDRGMEE0QzM0MjUy
Q0M3RjQ0NUY0MDNCRDBEOUY5OEZEMTU2NERGNTRBMDcwRDVGNEM4NjgxN0Y1N0Yz
QjM0MURCNDg0QTc0MTZENEZCQUMzQzE2RjM0MzZFNDc1NjIzNUQ1Mjk5QUNBQjE3
MjE4RjMzMzJGQkRCMTM4ODc4QTdGRUM2NjJGQjk3NjY0NkZDQUQxRTM2RjY2RjBE
ODY5NTcxRTJEOEJBNDM5MEVGRjc0NThFMzkzNTI3RkY5NDVCQzg2MkY1ODRENTYx
RDJCMUMyNDM2NTk4RTI2MDNBNjEyRTYwQjFBMDBBRjRFQjU5QjUyNjRCOEJGNEVC
NUQ3NUZEQjg3MDk1QTNDQkY1NkI3MDVCMkFDQTFCRTIxNURERkQ4NTFGMzA2N0Ew
MzJCMUVEMDY2NzJGMjgxMDg5NkU4MTEwMDcwMjUwOEYyNkI1OTBDRUQ2RDFEMjdB
NzdDRUJGMjIyMUVFRTQwQThDNTJCMkQ1QkEyOERGMUQ5RjU0RTQxMjFFQjU2NzE4
NDZCNzA4QUI3RkI5RkY3OEI4MERFRUQ0MEFFMkEzMzczRTY1Q0FENDg4QTRCRDMz
MDBBOTNGQTdDNDNBQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy5RHCq+JcyT3JlVKqS4FWEa3Un3UdB0tBjWKBPCkw0JSzH9EX0A7
0Nn5j9FWTfVKBw1fTIaBf1fzs0HbSEp0FtT7rDwW80NuR1YjXVKZrKsXIY8zMvvb
E4h4p/7GYvuXZkb8rR429m8NhpVx4ti6Q5Dv90WOOTUn/5RbyGL1hNVh0rHCQ2WY
4mA6YS5gsaAK9OtZtSZLi/TrXXX9uHCVo8v1a3BbKsob4hXd/YUfMGegMrHtBmcv
KBCJboEQBwJQjya1kM7W0dJ6d86/IiHu5AqMUrLVuijfHZ9U5BIetWcYRrcIq3+5
/3i4De7UCuKjNz5lytSIpL0zAKk/p8Q6swIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FKFvUKJizG8I5ZnBnYPvf9AxrUx6MB8GA1UdIwQYMBaAFDFcvDj2NoTNuCvCTkNY
bopyqPivMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzEvMzE1Q0JDMzhGNjM2ODRD
REI4MkJDMjRFNDM1ODZFOEE3MkE4RjhBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zMTVDQkMzOEY2MzY4NENEQjgyQkMyNEU0MzU4NkU4QTcyQThG
OEFGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8xLzMxMzMzODJlMzUzOTJlMzEzMDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM4MzczMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIo7
ZjANBgkqhkiG9w0BAQsFAAOCAQEAL0kgV+odq/3hITMbI0O/6s4w1P/LiP+Cv3lX
gGmLRgmwWDtVEdn4aq1WaHjW6ymEREsev06o+Iyz+pXx4d7cK26cYg45kVCoghr0
7aCinKF6Ur9OKNYY/c7I0a6/2AYCH/2At4/l9XHsCR+pKHfTAF70KoUPpdDOrwRW
feEjiIeBL9ifPQ8bEzWf7PClqPvZdgSTisJsLNpmDQDGB8U1WZLnPdtNZ5SszuQc
V4rn9c/CqKsE8Q6xBCN0QK6whrDcuzaQnbIY8l+Q11Ah/O63Z2K9hDh7EoTOkAsx
tBLZRpO/CDyNECTfkrx9OpocIIoXArv9bjJnro9JDiFLWRpVjw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:31 2026 by rpki-client