Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa
File:                     3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa (raw, json)
Hash identifier:          UCuBwdpcvMwWkOruCieCMiieB/uhyaRPdLbGf7mLtPs=
Subject key identifier:   70:A0:97:64:97:FF:34:7E:3C:A3:5B:B0:DC:15:C2:00:AA:33:D8:7B
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       214C4C7E339D45731027616CF9107CCC55CC1600
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:21 +0000
ROA not before:           Sun 01 Mar 2026 18:47:21 +0000
ROA not after:            Sun 28 Feb 2027 18:52:21 +0000
asID:                     61871
IP address blocks:        167.249.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4c:4c:7e:33:9d:45:73:10:27:61:6c:f9:10:7c:cc:55:cc:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:21 2026 GMT
            Not After : Feb 28 18:52:21 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:63:da:be:36:ba:05:46:c7:6a:f1:66:e8:
                    30:b1:81:41:77:49:3b:85:d2:95:48:a4:15:ce:ae:
                    a0:98:0c:cd:69:6e:93:71:95:c7:7a:91:60:64:87:
                    3b:e1:a9:ed:7a:51:97:a4:b8:f5:76:db:2d:71:ec:
                    44:6b:1e:2b:4f:2b:8d:b7:c9:05:4a:7c:0a:aa:03:
                    a9:c1:30:d5:17:e3:48:82:26:dc:0e:89:fc:cb:93:
                    be:13:66:ac:92:00:48:3d:40:98:42:8f:18:e7:46:
                    be:a4:37:99:e6:04:49:96:42:9a:85:64:bc:17:1d:
                    82:54:2d:27:61:e9:7d:de:38:49:3e:7c:53:c7:3f:
                    06:b9:97:e9:ce:6c:7c:1d:31:bf:74:42:22:5c:36:
                    33:54:46:08:ea:e7:d0:5b:79:8c:4d:80:7c:40:a2:
                    90:07:0b:d4:10:92:3c:0e:49:d7:63:aa:2b:20:eb:
                    48:50:02:53:90:15:fe:e3:11:e8:0b:f0:2d:03:d9:
                    78:ef:98:58:48:8a:b4:9d:8b:ab:b7:9a:a4:8a:f1:
                    ce:d3:e7:dd:69:05:e9:9d:97:c7:d6:97:66:d5:c8:
                    aa:d1:94:5e:b6:66:c9:60:8d:65:3e:1f:9a:a8:7f:
                    b0:4d:28:9e:e1:01:b4:cd:b1:56:45:cd:f6:64:8d:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A0:97:64:97:FF:34:7E:3C:A3:5B:B0:DC:15:C2:00:AA:33:D8:7B
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130322e302f32332d3233203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:31:d0:50:00:b3:88:51:07:26:48:ae:ce:7c:80:8a:17:
         23:71:c4:5b:73:85:1b:9a:4b:94:7d:dd:ed:e9:46:22:63:e3:
         24:00:84:ee:c5:81:3c:86:c1:4f:98:0c:50:31:3f:ce:74:0a:
         17:f0:9c:28:02:d0:20:3d:58:ef:53:f3:84:14:b1:9a:a9:03:
         66:0f:a6:64:ca:b1:f9:06:9a:29:ce:55:20:d4:17:17:30:92:
         11:f4:12:70:5d:02:64:09:3f:ec:a0:05:73:56:00:d6:15:27:
         ab:c4:65:5c:8d:37:09:87:66:04:1f:32:95:fa:ba:46:f4:07:
         d3:1c:4a:15:48:f5:99:3a:1c:af:87:5b:94:3d:49:8b:59:3f:
         9e:55:80:fd:47:59:8d:4f:63:d0:99:9a:8e:2e:bd:1f:d5:16:
         f6:79:ce:c9:24:14:71:43:c8:34:cb:b3:13:98:ca:65:c8:55:
         3b:d8:fa:57:5f:b9:bc:45:6e:7b:83:53:19:da:2a:83:60:85:
         1c:9c:78:ce:0c:9c:0a:14:ff:40:c8:a6:9e:6a:ee:1e:86:81:
         17:04:31:4b:ce:a1:51:e7:6e:c7:32:3a:a1:91:9e:98:0f:cc:
         ec:39:3f:13:bc:71:37:f6:52:1d:b0:06:b6:d3:23:8e:eb:38:
         e0:08:00:39
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIUxMfjOdRXMQJ2Fs+RB8zFXMFgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1Q0JDMzhGNjM2ODRDREI4MkJDMjRFNDM1ODZFOEE3
MkE4RjhBRjAeFw0yNjAzMDExODQ3MjFaFw0yNzAyMjgxODUyMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDU2ODYzREFCRTM2QkEwNTQ2
Qzc2QUYxNjZFODMwQjE4MTQxNzc0OTNCODVEMjk1NDhBNDE1Q0VBRUEwOTgwQ0NE
Njk2RTkzNzE5NUM3N0E5MTYwNjQ4NzNCRTFBOUVEN0E1MTk3QTRCOEY1NzZEQjJE
NzFFQzQ0NkIxRTJCNEYyQjhEQjdDOTA1NEE3QzBBQUEwM0E5QzEzMEQ1MTdFMzQ4
ODIyNkRDMEU4OUZDQ0I5M0JFMTM2NkFDOTIwMDQ4M0Q0MDk4NDI4RjE4RTc0NkJF
QTQzNzk5RTYwNDQ5OTY0MjlBODU2NEJDMTcxRDgyNTQyRDI3NjFFOTdEREUzODQ5
M0U3QzUzQzczRjA2Qjk5N0U5Q0U2QzdDMUQzMUJGNzQ0MjIyNUMzNjMzNTQ0NjA4
RUFFN0QwNUI3OThDNEQ4MDdDNDBBMjkwMDcwQkQ0MTA5MjNDMEU0OUQ3NjNBQTJC
MjBFQjQ4NTAwMjUzOTAxNUZFRTMxMUU4MEJGMDJEMDNEOTc4RUY5ODU4NDg4QUI0
OUQ4QkFCQjc5QUE0OEFGMUNFRDNFN0RENjkwNUU5OUQ5N0M3RDY5NzY2RDVDOEFB
RDE5NDVFQjY2NkM5NjA4RDY1M0UxRjlBQTg3RkIwNEQyODlFRTEwMUI0Q0RCMTU2
NDVDREY2NjQ4RDUyNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1Whj2r42ugVGx2rxZugwsYFBd0k7hdKVSKQVzq6gmAzNaW6TcZXH
epFgZIc74antelGXpLj1dtstcexEax4rTyuNt8kFSnwKqgOpwTDVF+NIgibcDon8
y5O+E2askgBIPUCYQo8Y50a+pDeZ5gRJlkKahWS8Fx2CVC0nYel93jhJPnxTxz8G
uZfpzmx8HTG/dEIiXDYzVEYI6ufQW3mMTYB8QKKQBwvUEJI8DknXY6orIOtIUAJT
kBX+4xHoC/AtA9l475hYSIq0nYurt5qkivHO0+fdaQXpnZfH1pdm1ciq0ZRetmbJ
YI1lPh+aqH+wTSie4QG0zbFWRc32ZI1SbQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHCgl2SX/zR+PKNbsNwVwgCqM9h7MB8GA1UdIwQYMBaAFDFcvDj2NoTNuCvCTkNY
bopyqPivMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzEvMzE1Q0JDMzhGNjM2ODRD
REI4MkJDMjRFNDM1ODZFOEE3MkE4RjhBRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zMTVDQkMzOEY2MzY4NENEQjgyQkMyNEU0MzU4NkU4QTcyQThG
OEFGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8xLzMxMzYzNzJlMzIzNDM5MmUzMTMw
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMxMzgzNzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
p/lmMA0GCSqGSIb3DQEBCwUAA4IBAQAtJzHQUACziFEHJkiuznyAihcjccRbc4Ub
mkuUfd3t6UYiY+MkAITuxYE8hsFPmAxQMT/OdAoX8JwoAtAgPVjvU/OEFLGaqQNm
D6ZkyrH5BpopzlUg1BcXMJIR9BJwXQJkCT/soAVzVgDWFSerxGVcjTcJh2YEHzKV
+rpG9AfTHEoVSPWZOhyvh1uUPUmLWT+eVYD9R1mNT2PQmZqOLr0f1Rb2ec7JJBRx
Q8g0y7MTmMplyFU72PpXX7m8RW57g1MZ2iqDYIUcnHjODJwKFP9AyKaeau4ehoEX
BDFLzqFR527HMjqhkZ6YD8zsOT8TvHE39lIdsAa20yOO6zjgCAA5
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:32 2026 by rpki-client