Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          1THkfRae9fZLacGbwVdgE5blGGd5x5aFWZk1NteZbmc=
Subject key identifier:   D6:25:7C:4A:91:FC:6A:BA:F4:F3:B6:8E:C4:C2:E9:A2:BF:75:33:B5
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       7B9A2D2DEB9E57D3013E52CFF8B1D368623EE572
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 28 Mar 2026 19:25:06 +0000
ROA not before:           Sat 28 Mar 2026 19:20:06 +0000
ROA not after:            Sat 27 Mar 2027 19:25:06 +0000
asID:                     263335
IP address blocks:        191.36.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9a:2d:2d:eb:9e:57:d3:01:3e:52:cf:f8:b1:d3:68:62:3e:e5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Mar 28 19:20:06 2026 GMT
            Not After : Mar 27 19:25:06 2027 GMT
        Subject: CN=D6257C4A91FC6ABAF4F3B68EC4C2E9A2BF7533B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:d0:3a:ea:9a:08:04:cb:96:b3:d1:7b:84:
                    c4:c5:32:2f:35:e4:78:fc:50:d7:a5:1d:06:21:6f:
                    25:1f:5c:07:42:c4:0d:3e:fb:18:8d:ec:52:e4:ce:
                    85:09:e8:98:fe:5e:72:c2:ab:64:d3:f6:37:04:b6:
                    9a:63:82:fe:14:07:91:4b:86:e3:67:ee:d2:04:25:
                    5d:54:8c:db:46:f6:00:9a:b5:e2:da:e0:be:a3:72:
                    95:14:35:14:40:09:ba:e6:01:49:d1:88:31:3b:b3:
                    e3:ca:3b:76:2d:9e:f3:f4:07:b4:a8:5d:05:c5:41:
                    2e:dc:47:a8:e5:c0:72:5e:91:d5:47:64:57:b8:be:
                    3f:26:6a:af:0b:ac:07:76:74:01:8d:f8:86:4a:34:
                    a1:3a:17:12:73:83:65:66:24:3c:77:92:83:ee:f0:
                    a2:7b:df:b8:62:24:72:69:52:93:ed:bb:3f:ae:07:
                    dd:30:4f:df:c3:40:27:6d:31:62:8d:ca:0f:fd:a3:
                    aa:11:9b:ca:dd:a4:5b:0d:af:1d:c1:87:be:a8:33:
                    7d:31:58:49:86:70:80:d3:5f:bd:dd:42:4c:3a:b5:
                    fa:a6:04:19:53:3c:f5:3e:97:be:1c:bf:e7:5b:39:
                    68:a2:a2:2c:08:d1:61:da:7f:1a:3e:a9:12:75:d5:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:7C:4A:91:FC:6A:BA:F4:F3:B6:8E:C4:C2:E9:A2:BF:75:33:B5
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:3e:ad:99:af:91:fd:d8:34:a2:b5:66:a3:51:40:92:7d:
         06:eb:b2:65:66:d2:f2:66:21:a3:34:8c:c0:27:fe:d8:90:3e:
         6f:96:9c:c1:ba:b9:7a:d7:0e:a2:94:c7:a1:d9:02:02:5b:7c:
         0f:90:95:76:9c:15:8b:53:25:9e:e4:ed:6c:90:be:df:ba:ff:
         89:63:7f:a0:ad:0e:98:e5:2f:53:02:ab:69:d3:71:91:4b:de:
         63:72:53:c2:0d:f5:eb:27:b8:7b:22:28:22:ea:7b:4d:1f:c9:
         1b:3d:ee:ad:14:8b:6e:fb:3e:97:69:7a:d0:3a:66:99:e7:d8:
         4c:3a:b9:06:f6:42:50:02:da:1c:0b:5e:28:cf:d3:56:e0:19:
         1b:03:49:f5:aa:17:fc:60:73:aa:e7:d6:fa:8d:d1:3e:7e:fb:
         ed:3d:de:08:99:53:b9:a4:30:a5:49:29:96:b9:20:66:15:30:
         35:d2:8d:70:7c:30:20:0a:a2:b8:0d:92:ff:f7:ed:b2:04:76:
         d2:49:4c:d5:a0:82:71:f3:f9:d1:a1:c2:76:38:86:05:42:e1:
         4c:1d:c2:c0:85:ae:34:98:c3:90:e2:52:7b:25:0e:8c:7e:dc:
         8e:0f:c2:f8:48:fe:28:79:31:fb:0b:da:18:e4:e2:71:92:8f:
         ff:f9:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:51 2026 by rpki-client