Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          ILiZUnOLggIPTMQ4yrLB5Q87L+K7VXvnhssCUtzZtVE=
Subject key identifier:   A9:EE:51:91:59:D5:3D:31:D4:85:8B:D7:EE:E2:0E:E5:2A:4D:15:14
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       79F2427958EDCCACC9486B25E6DF1C5324E0D39C
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 28 Mar 2026 19:25:06 +0000
ROA not before:           Sat 28 Mar 2026 19:20:06 +0000
ROA not after:            Sat 27 Mar 2027 19:25:06 +0000
asID:                     263335
IP address blocks:        191.36.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f2:42:79:58:ed:cc:ac:c9:48:6b:25:e6:df:1c:53:24:e0:d3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Mar 28 19:20:06 2026 GMT
            Not After : Mar 27 19:25:06 2027 GMT
        Subject: CN=A9EE519159D53D31D4858BD7EEE20EE52A4D1514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:db:1d:57:70:48:54:f3:d4:70:3e:f9:ff:
                    0a:3d:4c:b0:eb:34:54:58:0f:19:7a:9b:ac:30:30:
                    e7:2c:42:c3:d8:c7:69:ae:46:0f:c6:d1:93:89:90:
                    1c:78:ef:a4:c2:cc:3f:a2:6e:2a:d1:07:3a:c4:eb:
                    41:1b:90:e2:27:18:9f:8c:cd:8e:45:3f:a4:0a:5a:
                    a8:ff:72:b4:54:31:b2:eb:b4:d9:62:29:fd:c6:dd:
                    fa:21:84:a7:50:60:c2:30:79:62:50:55:dc:53:48:
                    a1:53:64:ea:00:03:3f:fe:39:50:30:0c:22:1e:8b:
                    a6:0d:a3:f4:77:ed:1d:55:1e:1e:bb:a6:47:d9:ca:
                    20:7d:d0:1e:a1:ed:72:ed:9d:61:59:b9:88:6a:db:
                    d8:f1:b4:f5:b4:b6:a0:ec:3e:45:d6:28:ff:af:3a:
                    1f:c0:91:06:68:6b:18:6e:db:80:a7:c9:48:da:02:
                    5d:16:09:e9:a1:69:45:78:bd:08:30:51:f1:43:54:
                    d6:48:9d:4e:da:06:66:75:2a:6a:26:f0:02:97:4b:
                    b0:e5:d3:3f:74:b7:11:eb:92:1c:ce:c9:6e:93:1a:
                    69:d1:17:31:c6:a1:29:6d:62:fb:ba:1d:51:4d:4e:
                    64:7a:27:17:e0:a5:24:cc:c4:57:50:31:c5:fd:13:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EE:51:91:59:D5:3D:31:D4:85:8B:D7:EE:E2:0E:E5:2A:4D:15:14
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0b:9d:07:1c:c9:fd:e9:66:cd:8b:6c:f6:5d:0b:af:dc:b7:
         54:07:ba:b6:cb:6f:56:42:a2:89:79:9c:81:13:49:c3:1d:f4:
         4d:f9:b2:87:57:b0:74:56:e8:ce:cf:41:82:9a:61:26:82:ff:
         08:4f:df:67:de:98:5d:ac:8d:21:49:15:07:82:2a:5e:18:51:
         35:eb:da:de:87:60:b6:b6:65:cc:55:69:bc:0c:bc:72:ca:22:
         4b:13:cc:b2:33:91:43:d9:61:c2:47:c7:45:e1:16:0b:f0:97:
         98:37:23:25:c8:73:f2:3d:b7:88:c7:4a:37:ec:12:43:ae:29:
         43:e0:f2:e5:de:68:b1:e3:01:c7:aa:75:fe:7a:56:bb:7c:13:
         79:13:94:fe:84:03:90:be:67:f2:9e:5b:0f:ed:cd:32:17:2c:
         ce:88:c5:f0:25:2b:8c:cc:16:ef:59:ca:03:66:78:64:b7:b3:
         2b:37:98:38:7a:2b:01:82:be:4a:40:c3:e0:b9:be:6a:ea:e3:
         7e:f5:d3:af:4e:07:03:f1:d7:8b:15:51:57:ed:94:41:98:30:
         73:b3:ff:35:cc:56:31:59:39:55:f4:ca:1a:cd:03:17:75:51:
         10:c5:1b:3b:77:15:09:48:9b:52:ff:63:0b:a4:e8:f9:53:c8:
         d9:13:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:56 2026 by rpki-client