Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          5nXdxI9Evjfr97+Nt4Ogj+M31rjtFqFP1V+tySUTPuM=
Subject key identifier:   18:CA:4F:95:59:27:E7:6A:F3:49:2C:D7:D6:05:AF:15:BA:CB:84:9B
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       3FB069BDB8DE4DEE4E1A86916FC7214E8282FC09
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 28 Mar 2026 20:25:06 +0000
ROA not before:           Sat 28 Mar 2026 20:20:06 +0000
ROA not after:            Sat 27 Mar 2027 20:25:06 +0000
asID:                     263335
IP address blocks:        191.36.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b0:69:bd:b8:de:4d:ee:4e:1a:86:91:6f:c7:21:4e:82:82:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Mar 28 20:20:06 2026 GMT
            Not After : Mar 27 20:25:06 2027 GMT
        Subject: CN=18CA4F955927E76AF3492CD7D605AF15BACB849B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:8b:d2:36:b4:31:43:95:a6:36:7b:4f:03:
                    18:cd:6e:26:7b:34:6a:08:e0:4b:f4:64:2a:56:d1:
                    5f:9d:4e:fb:17:ae:be:db:27:56:b6:d6:03:e2:4d:
                    f9:ff:16:a1:b8:6e:f0:be:0e:78:0b:67:e8:80:da:
                    64:69:f4:da:66:a2:de:05:97:f4:41:d7:cb:21:0e:
                    df:62:6d:a8:38:dc:bc:2c:12:72:b5:ad:89:90:76:
                    d1:86:81:61:fd:b2:77:8f:b0:54:57:2a:52:4a:e8:
                    ac:03:b5:70:58:f2:72:d5:bd:e9:0f:38:13:37:9c:
                    9d:65:93:6e:18:65:08:bf:29:fc:39:ef:4a:08:ec:
                    11:ab:00:a0:a9:d6:7a:06:65:ea:38:98:89:2e:7d:
                    6d:14:7d:8f:3e:2c:d3:39:69:00:fa:39:02:0f:ad:
                    d6:d8:85:a4:e2:50:0e:cc:13:6d:cb:3d:47:ba:1c:
                    8c:c6:66:e9:3b:b9:39:c3:cb:1c:37:fb:5c:17:d4:
                    0b:21:bf:af:6a:4c:6d:9f:37:b2:2e:1c:7a:91:b2:
                    12:3a:62:b1:a4:93:94:27:07:8a:09:fb:eb:39:b0:
                    7a:a2:d0:f9:16:3e:f9:da:e1:ea:86:19:52:0e:b3:
                    4b:0f:4a:7a:4a:df:15:93:c9:f4:01:a8:66:4e:fe:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CA:4F:95:59:27:E7:6A:F3:49:2C:D7:D6:05:AF:15:BA:CB:84:9B
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134312e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:e5:a0:4b:1b:b1:4a:a7:ba:f1:96:df:f8:a3:3d:a0:8c:
         f8:aa:37:88:31:1b:7a:ec:fe:33:0d:25:3f:7d:40:73:f7:d4:
         0a:d5:c1:5c:b5:ae:85:b2:b6:26:e7:48:7d:ee:e0:22:6a:cb:
         01:67:1c:7d:15:f5:e0:3d:0e:ef:5e:5f:0b:c5:ae:4b:c9:f9:
         87:e4:53:f7:65:82:c1:8d:5e:be:ed:8e:ff:2e:81:c1:ce:6f:
         5a:3c:79:c6:21:cf:60:9a:02:4f:bc:4b:53:86:33:8d:6e:17:
         0d:2d:bd:54:4d:56:85:13:c3:55:73:5a:1a:0e:f3:06:30:e9:
         75:22:9e:12:84:86:db:4e:48:09:f1:5b:ee:70:c8:c4:ec:b7:
         0e:e2:0c:ed:af:b7:49:79:33:af:9c:2b:13:f8:d5:a3:ff:2e:
         76:ac:2a:dc:c2:04:76:bd:7a:26:74:a0:55:ca:ed:0c:e4:3c:
         27:11:e3:9e:80:9c:f8:fc:24:17:58:88:01:98:71:4f:7d:f2:
         8e:f1:3b:89:1a:53:93:eb:b4:a3:63:89:90:fc:b5:24:f1:00:
         9c:1f:8e:f3:71:75:6a:2f:96:10:5d:d9:9e:42:95:d0:a0:68:
         1e:73:7e:05:0a:3e:18:3d:ff:ec:0f:5a:ac:45:50:c1:0c:13:
         8e:67:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:59 2026 by rpki-client