Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa
File:                     3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          Fx0B5UfvnmfrWAdnEolzVSwq+aAvZJIIAKgDGk0AG+k=
Subject key identifier:   01:CE:08:47:03:24:8A:DB:00:1A:2F:7B:80:FF:8D:F8:91:27:62:A2
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       749A1A36D7211FF92D4C8C93C2FC55FD995EEC74
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:21 +0000
ROA not before:           Sun 01 Mar 2026 18:47:21 +0000
ROA not after:            Sun 28 Feb 2027 18:52:21 +0000
asID:                     61871
IP address blocks:        167.249.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9a:1a:36:d7:21:1f:f9:2d:4c:8c:93:c2:fc:55:fd:99:5e:ec:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:21 2026 GMT
            Not After : Feb 28 18:52:21 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:27:51:1d:aa:7f:af:8b:e1:90:cf:a6:01:
                    a5:5c:ed:38:77:52:1d:3f:08:f9:71:30:44:ba:92:
                    e9:86:d1:c9:48:7b:0a:34:51:7f:8a:7f:b3:4e:c3:
                    c0:a7:08:f8:5f:ec:5b:ca:cc:17:31:5f:4e:fd:96:
                    ce:cb:60:1d:33:c9:ca:d9:55:2f:c3:62:ee:32:1f:
                    6a:37:f5:a8:5a:04:eb:72:3f:4b:3a:40:5e:7d:c5:
                    8f:92:ff:74:56:b2:eb:fd:cb:6a:dd:3c:0a:03:29:
                    c9:0a:0c:7e:64:8f:bb:08:d1:e0:db:9b:60:c2:e8:
                    10:de:d5:e6:3e:be:bc:16:b6:4a:43:b5:ac:d9:45:
                    8a:0c:c5:3d:d1:23:0f:93:5a:15:b7:32:94:b4:07:
                    c4:37:e3:95:e0:11:4d:14:b1:06:c8:a1:fd:77:75:
                    aa:45:8c:e1:42:4d:c6:70:eb:60:cb:56:b7:3c:c9:
                    87:bd:1b:f4:93:d6:5b:ac:d1:32:81:4f:cb:bc:eb:
                    69:97:50:2d:ac:5f:f7:cd:0b:fc:95:55:c4:99:a7:
                    c5:55:29:25:b7:3a:27:12:4d:0b:d4:ac:fc:d7:d6:
                    ab:18:b4:a5:b1:2b:ec:ed:58:c5:f6:77:8e:7f:3b:
                    be:cd:e9:e2:2a:e1:d6:a7:5a:2d:9a:7e:18:ad:b0:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CE:08:47:03:24:8A:DB:00:1A:2F:7B:80:FF:8D:F8:91:27:62:A2
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130312e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:b5:f2:45:9d:72:72:21:1f:ad:e6:e4:bb:f9:bd:86:7b:
         da:6b:92:d4:dd:d5:97:9b:92:c6:51:2d:c0:91:d0:00:ac:88:
         68:1a:f9:51:4f:bd:c3:69:f1:21:65:87:b1:1f:fc:98:77:3a:
         7f:c5:2c:a6:81:be:73:7b:96:b5:f5:ca:b3:50:bd:d4:f8:e5:
         3c:b3:af:15:19:6f:0c:97:75:53:ff:da:5e:32:9f:2f:3c:42:
         83:07:8b:1c:ad:ac:92:04:f6:bf:1e:af:d6:43:e2:21:1b:21:
         2f:0e:28:4e:1c:44:0d:6d:25:e9:e0:1b:2c:10:ba:10:ef:63:
         ae:22:24:c5:17:6b:48:dc:95:89:96:59:de:df:e6:84:99:0d:
         b6:57:ad:e8:c3:1f:97:34:d1:ad:88:fb:22:8c:2a:ff:3c:85:
         1a:a1:6f:42:32:74:77:ef:ee:bd:26:0e:4c:85:b6:e4:e7:46:
         65:f0:a3:1b:dd:0b:f9:e4:80:bc:5a:76:dd:49:f0:46:bc:44:
         43:ce:be:b1:05:ef:96:ba:17:c1:fb:4f:fd:28:99:ce:91:ee:
         03:46:21:ba:3e:14:96:7e:d5:9a:04:27:4d:0c:43:1b:87:4c:
         9e:6b:ad:89:40:43:63:29:0e:8d:8d:fb:d8:f1:18:a8:25:11:
         47:1c:36:96
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUdJoaNtchH/ktTIyTwvxV/Zle7HQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1Q0JDMzhGNjM2ODRDREI4MkJDMjRFNDM1ODZFOEE3
MkE4RjhBRjAeFw0yNjAzMDExODQ3MjFaFw0yNzAyMjgxODUyMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRDODI3NTExREFBN0ZBRjhC
RTE5MENGQTYwMUE1NUNFRDM4Nzc1MjFEM0YwOEY5NzEzMDQ0QkE5MkU5ODZEMUM5
NDg3QjBBMzQ1MTdGOEE3RkIzNEVDM0MwQTcwOEY4NUZFQzVCQ0FDQzE3MzE1RjRF
RkQ5NkNFQ0I2MDFEMzNDOUNBRDk1NTJGQzM2MkVFMzIxRjZBMzdGNUE4NUEwNEVC
NzIzRjRCM0E0MDVFN0RDNThGOTJGRjc0NTZCMkVCRkRDQjZBREQzQzBBMDMyOUM5
MEEwQzdFNjQ4RkJCMDhEMUUwREI5QjYwQzJFODEwREVENUU2M0VCRUJDMTZCNjRB
NDNCNUFDRDk0NThBMENDNTNERDEyMzBGOTM1QTE1QjczMjk0QjQwN0M0MzdFMzk1
RTAxMTREMTRCMTA2QzhBMUZENzc3NUFBNDU4Q0UxNDI0REM2NzBFQjYwQ0I1NkI3
M0NDOTg3QkQxQkY0OTNENjVCQUNEMTMyODE0RkNCQkNFQjY5OTc1MDJEQUM1RkY3
Q0QwQkZDOTU1NUM0OTlBN0M1NTUyOTI1QjczQTI3MTI0RDBCRDRBQ0ZDRDdENkFC
MThCNEE1QjEyQkVDRUQ1OEM1RjY3NzhFN0YzQkJFQ0RFOUUyMkFFMUQ2QTc1QTJE
OUE3RTE4QURCMERDNjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxMgnUR2qf6+L4ZDPpgGlXO04d1IdPwj5cTBEupLphtHJSHsKNFF/
in+zTsPApwj4X+xbyswXMV9O/ZbOy2AdM8nK2VUvw2LuMh9qN/WoWgTrcj9LOkBe
fcWPkv90VrLr/ctq3TwKAynJCgx+ZI+7CNHg25tgwugQ3tXmPr68FrZKQ7Ws2UWK
DMU90SMPk1oVtzKUtAfEN+OV4BFNFLEGyKH9d3WqRYzhQk3GcOtgy1a3PMmHvRv0
k9ZbrNEygU/LvOtpl1AtrF/3zQv8lVXEmafFVSkltzonEk0L1Kz819arGLSlsSvs
7VjF9neOfzu+zeniKuHWp1otmn4YrbDcZwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAHOCEcDJIrbABove4D/jfiRJ2KiMB8GA1UdIwQYMBaAFDFcvDj2NoTNuCvCTkNY
bopyqPivMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzEvMzE1Q0JDMzhGNjM2ODRD
REI4MkJDMjRFNDM1ODZFOEE3MkE4RjhBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zMTVDQkMzOEY2MzY4NENEQjgyQkMyNEU0MzU4NkU4QTcyQThG
OEFGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8xLzMxMzYzNzJlMzIzNDM5MmUzMTMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzgzNzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
p/llMA0GCSqGSIb3DQEBCwUAA4IBAQBnDrXyRZ1yciEfrebku/m9hnvaa5LU3dWX
m5LGUS3AkdAArIhoGvlRT73DafEhZYexH/yYdzp/xSymgb5ze5a19cqzUL3U+OU8
s68VGW8Ml3VT/9peMp8vPEKDB4scraySBPa/Hq/WQ+IhGyEvDihOHEQNbSXp4Bss
ELoQ72OuIiTFF2tI3JWJllne3+aEmQ22V63owx+XNNGtiPsijCr/PIUaoW9CMnR3
7+69Jg5Mhbbk50Zl8KMb3Qv55IC8WnbdSfBGvERDzr6xBe+WuhfB+0/9KJnOke4D
RiG6PhSWftWaBCdNDEMbh0yea62JQENjKQ6NjfvY8RioJRFHHDaW
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:30 2026 by rpki-client