Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa
File:                     3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          t9NXhWVOho+rA7ZYQNchThdaYDziCj83eef2o+jV5N8=
Subject key identifier:   7F:60:14:00:24:7B:1C:41:34:EE:3F:BB:A9:5D:37:C5:0E:52:D2:88
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       6B593136CD5889F259617973C983236EA0F83D4E
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:20 +0000
ROA not before:           Sun 01 Mar 2026 18:47:20 +0000
ROA not after:            Sun 28 Feb 2027 18:52:20 +0000
asID:                     61871
IP address blocks:        167.249.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:59:31:36:cd:58:89:f2:59:61:79:73:c9:83:23:6e:a0:f8:3d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:20 2026 GMT
            Not After : Feb 28 18:52:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:d4:9f:7c:c3:43:e4:85:98:06:74:f9:b4:
                    77:fb:0f:84:37:9c:78:51:98:82:77:1a:cc:31:e2:
                    a9:7f:e8:2b:b4:03:c0:8f:e4:68:35:48:27:61:f5:
                    66:d9:af:92:35:07:79:28:93:5a:42:f5:51:ab:b2:
                    7c:50:38:a2:3b:c4:67:52:83:f4:41:59:84:db:eb:
                    be:1b:21:55:15:17:14:a9:f8:92:0b:46:12:b9:a6:
                    42:e3:fd:57:e8:10:06:8a:6e:62:df:d6:1c:f9:86:
                    ba:fb:26:a9:fb:4b:bf:3d:7e:5f:d4:19:29:21:09:
                    21:d0:93:49:4e:ba:06:f6:57:9b:cf:76:ef:d7:27:
                    ff:6f:0c:ce:51:b3:be:27:a8:81:0e:72:06:36:38:
                    35:b8:25:08:ff:59:5f:ba:0a:06:01:a4:1e:b7:10:
                    c2:11:ba:61:3c:88:c7:18:ea:41:d6:60:b2:b8:63:
                    d7:ab:11:a6:94:46:8c:91:84:24:59:35:b1:15:dc:
                    98:e0:35:1e:ea:de:5f:8b:4e:d7:f0:43:2d:f9:e3:
                    b4:dc:b3:9e:a9:e4:49:03:75:36:70:9b:98:7e:ac:
                    2a:88:36:29:47:f3:f4:70:64:46:62:73:3d:20:1a:
                    50:4d:53:93:a8:fa:6a:8d:11:8d:29:2c:58:09:f6:
                    8b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:60:14:00:24:7B:1C:41:34:EE:3F:BB:A9:5D:37:C5:0E:52:D2:88
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130322e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:36:07:fb:76:23:ce:75:88:78:96:68:85:92:bf:e6:ac:f6:
         c4:1d:b0:ab:ce:f8:cd:21:c7:85:19:fa:ba:87:68:a9:52:ce:
         e3:36:ed:cf:f0:1d:ea:d1:f2:a8:1f:d0:89:5d:59:6b:6f:e8:
         6e:7a:95:fe:ae:02:40:63:1a:f4:83:be:21:87:8a:a1:3d:71:
         91:17:16:70:57:58:e0:6d:0a:eb:aa:52:c0:3b:a0:a7:79:f8:
         ca:09:92:54:2e:60:2a:06:c0:ee:8d:e3:95:d9:3a:69:02:5b:
         3a:0b:89:07:13:9b:11:c9:83:fc:4e:41:d0:56:c9:28:2f:5d:
         14:c9:48:7c:cd:41:18:5f:4b:53:25:95:9a:91:b9:c9:28:63:
         e8:64:5e:5c:af:86:50:24:61:76:07:88:ea:aa:cd:d0:e5:18:
         44:53:f8:0c:e4:40:55:d3:e0:8a:a4:40:ff:65:6c:86:a5:a8:
         7d:88:43:40:9a:a8:09:30:a5:97:d6:8c:78:ca:40:17:10:22:
         4b:32:df:9f:96:85:6d:f4:75:1c:5a:44:a9:48:5f:86:7e:06:
         f0:d8:8d:c2:12:09:c6:07:ab:5b:0a:d5:37:69:f7:26:b7:b5:
         6b:52:05:66:75:c6:40:83:ac:07:7d:a0:95:65:22:22:64:8a:
         f9:8f:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:29 2026 by rpki-client