Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134322e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          q2Io4nUQH59P1whKkPl85Wr0NHlB/NgR0bPvo+DMI70=
Subject key identifier:   B2:EA:0D:48:EA:1D:8E:34:90:7F:D3:57:3C:5D:67:1A:F7:39:06:05
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       27C5C7E41D353B71D6782DE4993C20FB711F70D8
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 28 Mar 2026 19:25:06 +0000
ROA not before:           Sat 28 Mar 2026 19:20:06 +0000
ROA not after:            Sat 27 Mar 2027 19:25:06 +0000
asID:                     263335
IP address blocks:        191.36.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c5:c7:e4:1d:35:3b:71:d6:78:2d:e4:99:3c:20:fb:71:1f:70:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Mar 28 19:20:06 2026 GMT
            Not After : Mar 27 19:25:06 2027 GMT
        Subject: CN=B2EA0D48EA1D8E34907FD3573C5D671AF7390605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:91:4e:e7:2c:80:b8:e6:f4:8b:9e:1a:67:
                    54:10:12:77:3e:1b:62:2a:ed:93:3b:9d:ac:60:0d:
                    9b:c9:a9:3e:ae:2a:43:ea:4b:b9:b9:2a:21:0c:bd:
                    29:39:84:59:ae:7b:b0:77:7a:da:08:64:f4:02:55:
                    70:6a:b7:7b:5d:a1:09:7c:a5:3b:06:8f:65:42:10:
                    db:20:c5:6c:5a:01:9c:9e:8f:1b:43:a6:e3:6c:66:
                    5b:9f:ab:3d:74:2f:c4:2a:f2:9c:c8:7e:7b:22:e1:
                    2b:00:ec:04:33:6b:f5:a3:89:72:00:1a:b2:fe:c7:
                    66:7f:be:ad:30:2c:d1:bf:ea:12:76:1f:cf:d1:b0:
                    88:0d:0d:6a:90:0c:7d:0a:03:91:3e:4c:b6:62:d1:
                    78:c4:dd:c0:f3:0d:3f:d8:1b:7c:21:b0:53:80:99:
                    c2:a2:6c:74:dd:a5:ce:20:de:fa:69:f8:ff:e7:48:
                    cd:e7:6c:17:6e:23:6d:bb:5b:41:38:6a:53:4b:8d:
                    2e:a9:03:90:6b:ae:23:ab:59:b4:8e:cb:9d:2e:d3:
                    19:46:85:6e:e5:b4:9a:31:e2:c9:9c:6d:5f:be:96:
                    43:84:cf:89:7e:1a:5c:c1:15:ac:5f:d3:aa:b0:3d:
                    25:d9:53:41:46:2b:a0:9b:77:8f:67:8d:97:a2:18:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EA:0D:48:EA:1D:8E:34:90:7F:D3:57:3C:5D:67:1A:F7:39:06:05
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:56:b3:ef:28:23:18:91:d3:db:57:19:24:15:25:dc:51:
         3f:53:34:46:b3:18:54:8d:b0:bd:b1:74:bd:6a:04:d5:33:c0:
         ff:95:11:9d:9e:5b:8f:02:ff:27:81:90:e7:92:5d:7c:99:82:
         0e:c9:b0:b1:a1:77:24:3a:25:39:c8:62:1d:25:74:05:3c:40:
         58:9f:82:07:37:6a:6d:db:5e:76:2d:c2:da:25:88:08:62:25:
         b5:97:83:26:47:d4:25:7c:ff:17:02:e4:ca:ba:4d:da:fd:7f:
         4f:a5:de:26:2e:db:bc:0c:82:51:b6:a3:83:77:6f:ef:01:dc:
         9b:9d:81:8f:ab:6e:14:01:35:d3:6d:b3:dc:9e:d1:b6:df:d5:
         34:fe:c0:db:98:aa:4b:0b:d7:10:e6:0f:69:67:b8:a8:b1:69:
         21:6b:e0:36:b3:dc:f3:ea:94:55:de:73:d6:7f:f9:c4:f1:e3:
         21:af:50:1a:ac:1f:27:52:b7:42:6f:cd:fd:e3:d0:5c:18:73:
         df:87:46:84:16:8f:ff:2b:5c:c2:7e:3c:d7:87:c4:38:76:4d:
         e4:83:19:98:a8:d0:b6:80:57:ed:11:de:9e:41:38:59:0f:da:
         27:89:d4:0c:c5:01:65:9f:3f:2b:03:de:ec:17:df:ff:98:c0:
         68:0e:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:50 2026 by rpki-client