Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/323830343a316139633a3a2f33332d3333203d3e203631383731.roa
File:                     323830343a316139633a3a2f33332d3333203d3e203631383731.roa (raw, json)
Hash identifier:          vfZuduz380Pa6YfjVRm8AutCQ5tTg50geL09zhvm6qU=
Subject key identifier:   9E:7E:5C:58:1C:08:ED:37:2F:69:EB:22:1F:84:BB:05:9E:0D:59:19
Certificate issuer:       /CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
Certificate serial:       033F4B276EA0B2171F12A46FC479FAACD41F3D89
Authority key identifier: 31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/323830343a316139633a3a2f33332d3333203d3e203631383731.roa
Signing time:             Sun 01 Mar 2026 18:53:41 +0000
ROA not before:           Sun 01 Mar 2026 18:48:41 +0000
ROA not after:            Sun 28 Feb 2027 18:53:41 +0000
asID:                     61871
IP address blocks:        2804:1a9c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl
                          rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3f:4b:27:6e:a0:b2:17:1f:12:a4:6f:c4:79:fa:ac:d4:1f:3d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315CBC38F63684CDB82BC24E43586E8A72A8F8AF
        Validity
            Not Before: Mar  1 18:48:41 2026 GMT
            Not After : Feb 28 18:53:41 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:fc:3c:cc:ae:cd:7d:aa:3c:f1:43:b2:79:
                    4e:f2:fd:ec:18:66:7f:7e:cf:c6:0b:17:ca:80:c2:
                    76:8e:15:79:e5:7e:d8:a2:e9:8a:a0:c4:d7:e1:6e:
                    8a:6c:6e:1c:28:2b:f4:16:92:45:e6:c7:e9:c0:0b:
                    47:ac:a4:dd:68:86:7e:85:49:51:bc:94:88:a0:a7:
                    d8:99:a8:d7:da:4f:65:83:83:7a:ad:9f:9c:f1:6f:
                    ea:f2:e4:89:25:a6:4d:30:64:ac:af:b2:b6:7a:aa:
                    da:30:89:b8:1f:1b:12:6a:64:6a:cc:5f:ab:6d:95:
                    33:ce:a5:80:79:01:d6:b0:d3:24:9c:d2:6f:20:d7:
                    b4:62:0b:80:81:df:9b:b6:3b:d3:b6:1a:70:49:39:
                    46:91:ec:e4:2b:ff:d7:23:f9:1e:16:e4:c5:6e:d4:
                    c7:3b:30:45:af:f4:76:b7:15:e9:75:0e:ac:aa:b1:
                    51:11:5f:55:d4:be:11:e5:02:bc:5d:18:db:09:22:
                    86:4c:39:91:f5:3c:f6:30:31:be:ee:83:6b:ac:86:
                    05:28:11:ef:ed:49:6f:76:22:b2:09:85:39:c7:57:
                    6d:83:4f:5d:cb:95:14:fc:5d:61:67:e1:00:5e:ab:
                    d9:b0:9a:f7:bc:8a:df:47:1c:c2:03:19:2f:e3:ba:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7E:5C:58:1C:08:ED:37:2F:69:EB:22:1F:84:BB:05:9E:0D:59:19
            X509v3 Authority Key Identifier:
                keyid:31:5C:BC:38:F6:36:84:CD:B8:2B:C2:4E:43:58:6E:8A:72:A8:F8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315CBC38F63684CDB82BC24E43586E8A72A8F8AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/1/323830343a316139633a3a2f33332d3333203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         7b:00:8b:46:70:08:65:44:dd:ee:47:fe:90:bd:a3:5c:eb:41:
         ce:3d:63:21:95:aa:fb:db:5b:ec:0a:ee:52:b6:7d:a2:21:80:
         d5:18:2b:d9:bd:67:38:d3:ea:8b:85:d4:74:55:ff:54:e0:a4:
         59:21:28:37:dc:20:3e:5e:03:8f:c8:34:c8:65:88:69:f8:f1:
         cb:57:cb:82:31:5b:48:53:83:ef:99:32:59:b1:18:c3:d8:9c:
         90:30:24:18:83:54:86:52:a0:e7:3b:0b:50:2c:30:7d:31:ae:
         85:17:d5:94:eb:53:bc:80:27:5e:af:61:15:8c:18:c9:d4:81:
         fb:15:22:f2:a3:f3:52:8e:75:0d:69:da:1c:fc:d2:fb:3c:86:
         6c:10:4f:d7:e5:6a:05:9a:de:a2:57:85:e1:7a:8f:84:f7:ed:
         9e:ad:75:53:0b:2f:f3:ca:9b:3d:1b:fd:be:21:91:83:9c:f4:
         2c:2d:3b:4f:34:c7:25:93:4c:cf:ad:65:0a:f2:ea:a0:a8:06:
         66:b7:8f:17:2a:26:99:13:e9:4f:5f:97:6d:c1:78:bf:30:0f:
         e6:7b:54:8c:52:53:ff:f0:00:f0:af:0f:31:fb:51:15:c0:40:
         4a:36:ef:a1:25:2d:77:9d:c9:0e:ad:26:56:d1:f1:fd:8c:77:
         51:33:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:31 2026 by rpki-client