Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa
File:                     3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa (raw, json)
Hash identifier:          ByT1PZu1aHQWFAX4MrpnlSJ9D+BsEd9TyxesrVLGCqs=
Subject key identifier:   18:68:A3:9B:11:8F:E9:95:E4:65:7E:E8:C4:F6:ED:54:29:3F:41:CB
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       7A3D8E17DF04A12DBA0BC39694B7BC8F4C8169E8
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:20 +0000
ROA not before:           Sun 01 Mar 2026 18:47:20 +0000
ROA not after:            Sun 28 Feb 2027 18:52:20 +0000
asID:                     61871
IP address blocks:        167.249.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3d:8e:17:df:04:a1:2d:ba:0b:c3:96:94:b7:bc:8f:4c:81:69:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:20 2026 GMT
            Not After : Feb 28 18:52:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:78:b2:be:10:23:c2:95:fa:50:45:22:c8:
                    36:45:6a:d4:b1:72:79:65:5c:a7:b3:63:30:9a:42:
                    30:ac:da:d7:02:98:12:23:3d:58:7f:43:50:c1:09:
                    ef:1a:3a:ba:cf:9b:3d:e4:76:2b:d0:32:f9:de:8e:
                    ef:5d:c2:f9:85:9f:ab:17:87:5e:79:9c:05:bd:cc:
                    0d:70:b5:e4:64:be:2c:de:fb:11:8b:58:52:9e:9a:
                    97:88:45:0f:59:f4:b8:22:6e:fd:1d:40:b7:0f:5e:
                    19:02:8c:6a:ea:2f:5b:f3:8d:25:46:ab:66:cc:87:
                    b9:96:c9:59:32:72:ee:ad:7e:38:bf:a2:bf:30:4a:
                    59:b1:2f:af:e1:62:d1:11:48:55:66:b7:f6:de:43:
                    02:29:98:3a:08:8d:3a:fd:3d:73:27:aa:b8:43:e8:
                    b3:59:0f:2c:20:36:b9:e2:75:f8:bc:de:12:14:fc:
                    bd:d7:e7:1e:cb:7b:c2:91:89:a9:2b:9e:72:99:1a:
                    0b:3e:36:1f:57:06:80:45:7a:a8:c4:7b:08:de:84:
                    53:26:71:86:05:cd:50:4c:e0:99:12:60:06:cd:f4:
                    42:1a:f7:9d:92:43:4c:ad:de:bb:02:01:55:7d:81:
                    08:90:7e:dd:4f:ab:ee:65:99:e5:7a:17:01:6f:75:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:68:A3:9B:11:8F:E9:95:E4:65:7E:E8:C4:F6:ED:54:29:3F:41:CB
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130302e302f32322d3232203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:cd:1d:80:b9:e7:7d:24:67:5c:6e:bb:1f:bd:6d:2d:a3:
         c0:47:04:85:a3:f5:4e:54:a5:ad:f8:d1:8d:93:a6:6b:51:49:
         0f:e2:9f:b9:08:72:07:e8:69:aa:ed:1c:e6:1c:b3:25:92:71:
         ea:3b:b7:07:6b:17:08:fa:54:5c:f4:fa:45:85:c8:3d:d6:32:
         90:e6:bb:83:1e:ff:97:62:66:91:b9:8d:8d:80:f4:e0:8b:0b:
         b7:8f:68:5a:41:e9:8d:89:61:a7:0a:1c:93:98:68:26:78:7e:
         69:d6:80:a0:7b:9a:38:10:e6:1d:0b:79:af:12:fc:af:3d:6d:
         80:ad:7e:86:ce:c9:39:3a:39:f5:8d:21:be:66:20:f4:47:60:
         7b:4f:d8:e2:fc:a5:ee:cd:24:0c:c7:d6:cc:42:76:93:04:9b:
         c6:92:70:d6:db:72:b9:8a:ca:19:2b:16:33:4f:38:be:bc:af:
         09:d5:66:98:fa:45:47:53:31:da:d1:fb:2f:fb:50:fc:4f:19:
         26:b6:51:40:4b:8d:fd:c6:fe:e6:d6:29:7e:e1:dc:36:66:ad:
         56:18:b5:90:ff:db:60:bb:63:ff:1d:3c:a3:2e:d4:b5:e3:32:
         c1:f5:46:02:79:58:6d:d1:5e:f7:f7:4c:4c:dd:a1:7d:e4:ca:
         9e:ec:a0:fe
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUej2OF98EoS26C8OWlLe8j0yBaegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1Q0JDMzhGNjM2ODRDREI4MkJDMjRFNDM1ODZFOEE3
MkE4RjhBRjAeFw0yNjAzMDExODQ3MjBaFw0yNzAyMjgxODUyMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTA3NTc4QjJCRTEwMjNDMjk1
RkE1MDQ1MjJDODM2NDU2QUQ0QjE3Mjc5NjU1Q0E3QjM2MzMwOUE0MjMwQUNEQUQ3
MDI5ODEyMjMzRDU4N0Y0MzUwQzEwOUVGMUEzQUJBQ0Y5QjNERTQ3NjJCRDAzMkY5
REU4RUVGNURDMkY5ODU5RkFCMTc4NzVFNzk5QzA1QkRDQzBENzBCNUU0NjRCRTJD
REVGQjExOEI1ODUyOUU5QTk3ODg0NTBGNTlGNEI4MjI2RUZEMUQ0MEI3MEY1RTE5
MDI4QzZBRUEyRjVCRjM4RDI1NDZBQjY2Q0M4N0I5OTZDOTU5MzI3MkVFQUQ3RTM4
QkZBMkJGMzA0QTU5QjEyRkFGRTE2MkQxMTE0ODU1NjZCN0Y2REU0MzAyMjk5ODNB
MDg4RDNBRkQzRDczMjdBQUI4NDNFOEIzNTkwRjJDMjAzNkI5RTI3NUY4QkNERTEy
MTRGQ0JERDdFNzFFQ0I3QkMyOTE4OUE5MkI5RTcyOTkxQTBCM0UzNjFGNTcwNjgw
NDU3QUE4QzQ3QjA4REU4NDUzMjY3MTg2MDVDRDUwNENFMDk5MTI2MDA2Q0RGNDQy
MUFGNzlEOTI0MzRDQURERUJCMDIwMTU1N0Q4MTA4OTA3RURENEZBQkVFNjU5OUU1
N0ExNzAxNkY3NURCQjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4HV4sr4QI8KV+lBFIsg2RWrUsXJ5ZVyns2MwmkIwrNrXApgSIz1Y
f0NQwQnvGjq6z5s95HYr0DL53o7vXcL5hZ+rF4deeZwFvcwNcLXkZL4s3vsRi1hS
npqXiEUPWfS4Im79HUC3D14ZAoxq6i9b840lRqtmzIe5lslZMnLurX44v6K/MEpZ
sS+v4WLREUhVZrf23kMCKZg6CI06/T1zJ6q4Q+izWQ8sIDa54nX4vN4SFPy91+ce
y3vCkYmpK55ymRoLPjYfVwaARXqoxHsI3oRTJnGGBc1QTOCZEmAGzfRCGvedkkNM
rd67AgFVfYEIkH7dT6vuZZnlehcBb3XbsQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBhoo5sRj+mV5GV+6MT27VQpP0HLMB8GA1UdIwQYMBaAFDFcvDj2NoTNuCvCTkNY
bopyqPivMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzEvMzE1Q0JDMzhGNjM2ODRD
REI4MkJDMjRFNDM1ODZFOEE3MkE4RjhBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zMTVDQkMzOEY2MzY4NENEQjgyQkMyNEU0MzU4NkU4QTcyQThG
OEFGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8xLzMxMzYzNzJlMzIzNDM5MmUzMTMw
MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMxMzgzNzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
p/lkMA0GCSqGSIb3DQEBCwUAA4IBAQBLxs0dgLnnfSRnXG67H71tLaPARwSFo/VO
VKWt+NGNk6ZrUUkP4p+5CHIH6Gmq7RzmHLMlknHqO7cHaxcI+lRc9PpFhcg91jKQ
5ruDHv+XYmaRuY2NgPTgiwu3j2haQemNiWGnChyTmGgmeH5p1oCge5o4EOYdC3mv
EvyvPW2ArX6Gzsk5Ojn1jSG+ZiD0R2B7T9ji/KXuzSQMx9bMQnaTBJvGknDW23K5
isoZKxYzTzi+vK8J1WaY+kVHUzHa0fsv+1D8TxkmtlFAS439xv7m1il+4dw2Zq1W
GLWQ/9tgu2P/HTyjLtS14zLB9UYCeVht0V7390xM3aF95Mqe7KD+
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:34 2026 by rpki-client