Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130332e302f32342d3234203d3e203631383731.roa
File:                     3136372e3234392e3130332e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          KSGXO/2umkU+b2t13EzW/XafUa8MGZ0OvW4s66nE1s8=
Subject key identifier:   2A:D0:E3:70:EA:AA:2C:31:BB:1C:B5:17:47:B3:D0:EC:84:EC:18:09
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       4246D74DF1D3069A728CF8664CEA3BDECC758DA9
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130332e302f32342d3234203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:52:21 +0000
ROA not before:           Sun 01 Mar 2026 18:47:21 +0000
ROA not after:            Sun 28 Feb 2027 18:52:21 +0000
asID:                     61871
IP address blocks:        167.249.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:46:d7:4d:f1:d3:06:9a:72:8c:f8:66:4c:ea:3b:de:cc:75:8d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:47:21 2026 GMT
            Not After : Feb 28 18:52:21 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:df:83:5d:91:55:7b:97:45:2b:25:a0:03:
                    13:18:5a:9a:3b:b0:2b:6e:8e:73:2a:6a:58:ed:89:
                    7e:97:52:62:39:56:2b:f9:4c:d4:7e:bc:ab:d5:5c:
                    bd:00:b2:26:23:3d:87:e4:26:9f:1d:15:d8:5a:ba:
                    f9:c1:19:0c:cc:3c:5e:98:06:df:8e:e1:5d:12:72:
                    e4:16:7c:5a:aa:a9:11:d5:02:57:04:07:6d:b8:3e:
                    4b:96:5a:43:8e:68:ab:78:82:f0:f8:8f:bb:8b:fb:
                    33:65:47:66:4d:cf:fc:85:36:af:ca:5a:3b:fd:b4:
                    cd:f4:70:67:fc:51:d0:26:22:67:9b:fb:9d:5a:e2:
                    e0:00:c5:96:3a:31:c9:c9:90:bf:a1:a1:ee:34:67:
                    48:cf:d8:10:93:9b:05:59:2a:41:4b:f8:6f:fd:06:
                    8b:ed:da:19:ae:29:29:cc:06:47:3a:45:04:78:4b:
                    22:ff:ee:ce:26:f2:20:c9:54:a1:6d:91:31:2a:bb:
                    36:b5:cb:7c:fc:e0:0c:22:5b:e1:cd:e7:aa:6a:b6:
                    e4:b6:c5:e0:81:6b:f1:25:a0:76:4b:54:50:04:a2:
                    e9:3a:72:90:b2:ad:da:2d:87:e4:97:b6:02:31:3c:
                    4d:0f:7d:67:56:2d:1a:e4:ef:c4:07:a4:d7:22:35:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D0:E3:70:EA:AA:2C:31:BB:1C:B5:17:47:B3:D0:EC:84:EC:18:09
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/3136372e3234392e3130332e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:a8:aa:ab:05:26:ba:b0:1d:6a:57:8a:1d:ff:b5:5a:ad:
         9f:69:13:ad:e7:a9:93:1c:40:e2:d1:d3:32:2f:20:67:f3:00:
         4f:89:1d:31:20:f1:9c:36:be:0b:c7:a8:e9:38:20:22:e6:2e:
         70:66:a4:15:35:12:7a:91:ca:2e:9a:80:ca:91:de:ee:1a:d3:
         f6:a5:af:90:75:08:d6:88:a0:92:54:0f:5c:a4:bb:99:56:8e:
         f5:4a:23:e4:cd:78:dd:a0:65:77:65:83:8c:c5:e8:c6:dd:fb:
         6e:4b:17:50:16:5e:6b:35:1c:3a:8b:81:f9:52:4e:ed:cc:4b:
         3d:4a:5e:56:95:6b:6e:c2:62:9f:59:c7:e1:4e:91:04:f5:8b:
         e8:24:32:25:22:d2:d4:93:c3:ae:98:14:60:b2:5c:77:31:13:
         60:ce:fb:59:72:e3:f0:99:1e:32:4e:35:6d:10:6d:75:a5:2b:
         30:63:29:12:88:22:de:74:7e:68:20:d3:c7:04:ed:08:ef:ed:
         56:1f:2f:67:8f:2f:93:9c:d6:70:e1:dc:40:23:c4:c6:e5:63:
         b3:9f:67:5f:1f:3a:fe:13:d8:bc:bf:73:41:75:73:5c:02:e6:
         f2:69:87:f5:04:a6:4b:6b:7c:fd:64:b7:36:4b:d2:eb:51:f6:
         bc:2a:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:32 2026 by rpki-client