Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          LBcWGvVp+en1Z1v4QIqhcB8bh4cm4WvaI72oMKYdQkg=
Subject key identifier:   E3:BE:49:CB:A3:1A:96:D1:C5:72:99:4D:59:E6:C6:0A:B8:14:E6:D1
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       7398A037CEA49699AFFB1F9971E530998965F2F6
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 28 Mar 2026 19:25:06 +0000
ROA not before:           Sat 28 Mar 2026 19:20:06 +0000
ROA not after:            Sat 27 Mar 2027 19:25:06 +0000
asID:                     263335
IP address blocks:        191.36.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:98:a0:37:ce:a4:96:99:af:fb:1f:99:71:e5:30:99:89:65:f2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Mar 28 19:20:06 2026 GMT
            Not After : Mar 27 19:25:06 2027 GMT
        Subject: CN=E3BE49CBA31A96D1C572994D59E6C60AB814E6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:9b:6f:cf:df:6b:19:2e:c5:9f:e2:3f:ea:
                    a2:18:ab:db:8f:60:39:b4:98:4c:31:e3:3f:0d:f8:
                    28:a0:3d:27:7a:7f:19:00:80:a6:c0:d5:5b:53:f5:
                    ca:df:cb:39:1d:14:dd:b5:e4:97:7e:3f:d0:57:7a:
                    ad:ad:0c:49:b0:15:e9:70:cc:22:f7:c9:f6:81:38:
                    3a:a0:2b:8f:53:a0:8f:4d:d9:20:15:26:18:4c:3b:
                    64:7c:0b:0c:8f:91:d1:5d:59:80:72:94:73:03:49:
                    6b:8c:83:cb:7d:cd:fd:c4:66:a5:78:d3:e0:e8:71:
                    cc:ce:3c:79:ca:7f:28:c4:fa:95:d9:85:f3:02:d6:
                    17:ab:40:ce:8b:9e:fd:65:44:c9:ea:ae:dc:4a:be:
                    d8:1b:69:3a:59:74:89:29:60:1d:bb:b1:c6:52:64:
                    3b:90:dc:67:db:c0:6b:81:84:6e:de:87:f9:c4:44:
                    60:71:6c:21:aa:e8:82:5f:18:2b:55:ca:5b:0e:46:
                    28:47:5f:3d:99:48:34:37:24:80:42:9d:5c:41:a5:
                    b3:09:84:0c:e0:4c:08:9d:e0:90:7c:a8:7e:69:e2:
                    3a:a8:ba:a0:9d:cf:51:15:56:04:ce:38:ae:af:b6:
                    68:58:d6:1c:11:d9:d9:d8:42:c1:9a:cc:fd:37:0e:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BE:49:CB:A3:1A:96:D1:C5:72:99:4D:59:E6:C6:0A:B8:14:E6:D1
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:c2:d8:ba:79:e6:2c:f1:d4:b2:0c:63:f4:6d:4a:29:25:
         32:0b:e6:8a:41:60:9e:b0:f5:6a:5e:95:43:4a:27:4b:b4:4a:
         a1:39:f1:ac:ea:1f:62:63:f6:2a:dc:8f:7c:c1:74:fc:70:e7:
         9f:2f:af:d1:79:c2:ff:04:17:30:39:74:0b:da:2a:fd:47:ea:
         0d:9e:ad:cc:bb:0e:e2:27:f3:24:bf:e6:d4:7b:e4:92:b2:8a:
         e6:e6:94:cc:e8:9c:53:12:a6:dd:e4:65:eb:ca:dc:e6:e1:01:
         6e:33:54:5c:5c:1f:9e:44:65:93:19:ac:b0:71:e7:0a:bc:a6:
         12:ac:fa:5d:76:85:ae:64:48:ca:26:2f:df:63:f2:b8:15:04:
         42:09:1f:9b:22:24:38:fa:e8:55:49:6a:d0:a7:88:53:76:39:
         48:e9:e2:56:fc:cb:45:db:a4:36:02:ff:42:94:eb:ed:50:73:
         2c:fe:96:8d:6a:d1:f6:7b:ee:ab:b5:c3:1b:c8:9f:76:71:13:
         a8:6e:30:aa:ac:31:ef:33:3f:e7:1e:66:d0:c1:50:1b:a3:d1:
         71:f8:36:72:a3:90:1a:d2:61:6c:2c:73:d1:b2:ea:64:a7:af:
         94:27:a6:d8:e8:0f:52:d1:c0:8c:1f:bb:2f:5d:97:e2:a7:f5:
         cb:72:fe:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc5igN86klpmv+x+ZceUwmYll8vYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U3NTQzMzkzQzgzRDc2RkI2QkREQzkzODU5QkU5NkI1
MThDREVBQzAeFw0yNjAzMjgxOTIwMDZaFw0yNzAzMjcxOTI1MDZaMDMxMTAvBgNV
BAMTKEUzQkU0OUNCQTMxQTk2RDFDNTcyOTk0RDU5RTZDNjBBQjgxNEU2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGs5tvz99rGS7Fn+I/6qIYq9uP
YDm0mEwx4z8N+CigPSd6fxkAgKbA1VtT9crfyzkdFN215Jd+P9BXeq2tDEmwFelw
zCL3yfaBODqgK49ToI9N2SAVJhhMO2R8CwyPkdFdWYBylHMDSWuMg8t9zf3EZqV4
0+DocczOPHnKfyjE+pXZhfMC1herQM6Lnv1lRMnqrtxKvtgbaTpZdIkpYB27scZS
ZDuQ3GfbwGuBhG7eh/nERGBxbCGq6IJfGCtVylsORihHXz2ZSDQ3JIBCnVxBpbMJ
hAzgTAid4JB8qH5p4jqouqCdz1EVVgTOOK6vtmhY1hwR2dnYQsGazP03Dj3bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU475Jy6MaltHFcplNWebGCrgU5tEwHwYDVR0j
BBgwFoAUznVDOTyD12+2vdyThZvpa1GM3qwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVvUzc5QnpQelhE
QkcvMC9DRTc1NDMzOTNDODNENzZGQjZCRERDOTM4NTlCRTk2QjUxOENERUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNzU0MzM5M0M4M0Q3NkZC
NkJEREM5Mzg1OUJFOTZCNTE4Q0RFQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKcVdTRGhNZUh0bjd6TG1qUThhcDNTUXRIRUdHb2U1b1M3OUJ6UHpYREJHLzAv
MzEzOTMxMmUzMzM2MmUzMTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JIwwDQYJKoZIhvcNAQELBQADggEBAE4pwti6
eeYs8dSyDGP0bUopJTIL5opBYJ6w9WpelUNKJ0u0SqE58azqH2Jj9ircj3zBdPxw
558vr9F5wv8EFzA5dAvaKv1H6g2ercy7DuIn8yS/5tR75JKyiubmlMzonFMSpt3k
ZevK3ObhAW4zVFxcH55EZZMZrLBx5wq8phKs+l12ha5kSMomL99j8rgVBEIJH5si
JDj66FVJatCniFN2OUjp4lb8y0XbpDYC/0KU6+1Qcyz+lo1q0fZ77qu1wxvIn3Zx
E6huMKqsMe8zP+ceZtDBUBuj0XH4NnKjkBrSYWwsc9Gy6mSnr5QnptjoD1LRwIwf
uy9dl+Kn9cty/rk=
-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:47 2026 by rpki-client