Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          LNAXVsVsP9dKLOpQt4aW2zmq3BfFeT9Y6Nm0CBeMIho=
Subject key identifier:   24:A4:79:1F:CD:F0:CB:E6:FC:DC:D7:4E:5D:0C:96:B2:29:AD:68:3D
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       7A84A46C00EEB82D0B0956C4D71990A2F76B5E3C
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 28 Mar 2026 19:25:06 +0000
ROA not before:           Sat 28 Mar 2026 19:20:06 +0000
ROA not after:            Sat 27 Mar 2027 19:25:06 +0000
asID:                     263335
IP address blocks:        191.36.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:84:a4:6c:00:ee:b8:2d:0b:09:56:c4:d7:19:90:a2:f7:6b:5e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Mar 28 19:20:06 2026 GMT
            Not After : Mar 27 19:25:06 2027 GMT
        Subject: CN=24A4791FCDF0CBE6FCDCD74E5D0C96B229AD683D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:ac:12:b3:e1:42:45:61:9d:b6:16:c3:f9:
                    df:ab:c0:9e:48:ae:23:a4:12:6a:69:01:24:58:e6:
                    8d:d5:c4:82:49:c4:b0:d4:99:5f:7b:b2:84:e8:30:
                    94:58:bf:8b:d2:74:2f:ee:c9:64:c2:bf:c5:67:0a:
                    48:0c:67:f8:b4:6c:4e:c6:c6:1c:32:81:63:c8:50:
                    1f:b2:ff:c2:e2:44:72:df:1d:4f:60:cb:3a:dd:fb:
                    72:e5:d6:34:20:11:dc:41:ae:08:5f:2f:6f:44:65:
                    c9:c6:a0:7a:fd:fd:83:46:25:d6:a6:9c:3a:2a:2a:
                    03:1a:39:1f:35:24:1f:ec:a4:2c:e6:f9:f8:9b:ec:
                    c4:f2:7d:c7:f7:42:33:0e:7b:7b:5a:bb:7a:e0:dc:
                    5d:14:62:df:a5:36:1e:91:45:bd:38:72:5c:c4:a7:
                    72:0b:78:01:92:45:5e:41:24:70:d5:9e:fd:63:47:
                    ad:c6:54:ba:23:aa:b9:42:70:32:61:19:86:e9:86:
                    e7:5c:95:60:ea:0a:e7:ec:b7:66:25:da:b9:b0:cc:
                    ec:ab:15:f7:79:00:1a:41:06:9d:7b:4a:18:8d:a4:
                    07:10:22:b2:a8:c7:4e:f3:30:bf:e8:83:80:b8:03:
                    42:2e:05:bb:8a:df:fe:09:ea:c3:1a:a6:1a:5a:98:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A4:79:1F:CD:F0:CB:E6:FC:DC:D7:4E:5D:0C:96:B2:29:AD:68:3D
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2f:74:db:00:ef:da:34:6d:8c:dd:c7:c3:71:ec:5f:80:c4:
         84:ef:76:51:12:d7:5d:9b:43:0d:33:6f:5f:63:56:06:5c:20:
         55:63:f1:f9:3d:29:1d:e7:c7:93:fd:9e:8c:d3:cb:05:c0:11:
         a8:20:66:db:b3:8c:74:da:04:8a:e1:55:91:95:3d:37:54:b3:
         cf:ae:08:6d:b2:7c:0d:7d:4a:5a:97:24:16:01:c2:a7:74:c5:
         fa:2b:5e:29:57:e8:ba:91:e7:a7:8e:4b:b8:6e:67:96:6c:3d:
         50:3e:9a:19:68:e8:8d:b0:9a:6f:da:92:f8:ff:3d:a1:b3:f2:
         81:07:dc:05:88:f9:9b:9d:c7:b5:1b:e1:7a:c3:b7:29:10:b5:
         38:92:5f:c4:11:b6:7e:56:52:3a:cb:52:79:72:a5:ba:e8:5b:
         87:ce:8b:cb:c3:09:c1:eb:bb:0f:98:7c:dd:17:43:c3:6b:84:
         67:21:b6:65:69:11:94:e1:92:fd:32:d3:b9:01:f9:fd:40:0a:
         58:24:84:b3:31:2d:7c:15:83:11:9f:28:51:12:1a:aa:7b:46:
         85:9c:27:2f:04:6e:84:d4:75:ce:2a:b3:28:f5:3a:aa:04:19:
         26:cb:b9:f1:a9:bb:a3:93:cc:20:ca:de:80:99:10:55:c8:8e:
         d1:40:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:54 2026 by rpki-client