Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          rKA4+i8QwqTTu8Fd64IL6mBDP4inbX/M61y5fcqmkxk=
Subject key identifier:   C6:83:D3:2D:6E:9E:CD:C7:B3:8B:19:8F:94:D2:E1:15:4A:7F:73:68
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       481DBD3AB580729A849CCD6BA22AE01ECADFA4AF
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 28 Mar 2026 20:25:06 +0000
ROA not before:           Sat 28 Mar 2026 20:20:06 +0000
ROA not after:            Sat 27 Mar 2027 20:25:06 +0000
asID:                     263335
IP address blocks:        191.36.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1d:bd:3a:b5:80:72:9a:84:9c:cd:6b:a2:2a:e0:1e:ca:df:a4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Mar 28 20:20:06 2026 GMT
            Not After : Mar 27 20:25:06 2027 GMT
        Subject: CN=C683D32D6E9ECDC7B38B198F94D2E1154A7F7368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:76:5e:ec:6f:30:c6:ce:c8:10:35:01:70:
                    cc:d4:0b:88:06:46:e4:e6:32:82:a7:35:bb:db:e4:
                    87:4c:ca:4a:60:b0:7a:2f:54:81:05:23:96:c3:c7:
                    2f:33:c8:61:88:29:39:59:43:3e:3e:2d:cd:18:38:
                    7b:51:d1:6a:18:b3:20:da:84:43:cc:94:06:6f:9a:
                    75:2c:10:f7:9f:48:3a:7c:29:52:82:ba:14:f1:cc:
                    53:0c:21:02:16:d9:01:e5:da:32:ac:ec:5a:0e:6a:
                    e5:f5:c6:83:b0:46:12:39:ef:c1:43:78:2d:c2:4d:
                    2b:b6:3a:7c:a0:eb:d8:65:43:22:9e:7d:a1:6d:5b:
                    02:20:da:07:b5:39:ea:80:1c:8c:13:d5:ae:cf:29:
                    83:e7:ca:3f:37:79:19:75:51:85:db:89:41:c7:bc:
                    71:20:fc:d4:3e:14:fd:5d:8d:62:1c:16:59:77:ce:
                    a3:29:fe:bc:86:2a:13:4a:c9:76:99:7f:18:60:08:
                    bd:b7:cf:76:73:6d:f9:fc:c2:32:d2:eb:41:ac:6b:
                    4d:bf:21:f3:49:10:38:f4:5a:ff:92:bf:79:87:e3:
                    cf:08:ec:93:5e:34:2b:01:14:99:6e:5b:e2:3b:2d:
                    ae:38:7a:a3:48:3c:59:f3:40:dc:0b:6c:0b:15:85:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:D3:2D:6E:9E:CD:C7:B3:8B:19:8F:94:D2:E1:15:4A:7F:73:68
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134332e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:61:aa:8e:f1:bb:7c:e1:41:ae:ab:4d:b6:7a:f5:04:c2:ef:
         76:ec:f4:04:d0:47:f0:d0:98:61:40:5c:bc:9a:3e:97:05:1d:
         57:58:fc:b9:63:51:22:47:a7:40:e5:46:c6:1a:37:fc:be:0f:
         60:ec:86:bd:37:a9:67:be:2b:5b:e1:f0:35:35:9a:a7:f0:f2:
         18:87:80:d4:dd:0f:ab:2e:de:5a:4b:88:01:c4:7f:a8:1f:f0:
         3c:c3:5d:1b:a0:fa:e0:46:c6:62:cb:50:2a:46:96:4d:2d:c2:
         2d:b6:f3:74:04:2a:ac:d7:42:e8:b9:a9:e8:77:7a:6d:53:5e:
         ba:f9:2e:a1:94:af:f9:eb:51:90:89:b1:3c:27:e7:f5:53:61:
         ea:3b:fd:1f:ba:9a:af:ed:78:79:41:55:78:6b:f6:3e:ed:1f:
         d0:1d:a8:a7:e4:60:b5:1d:2b:78:c2:9d:34:19:ed:7a:d5:0f:
         5c:47:d6:c2:74:28:91:65:c5:26:b1:4c:77:f7:5a:30:46:38:
         36:8e:8a:90:69:35:ed:72:24:ad:1d:44:e0:c7:8a:1b:93:e7:
         c3:de:60:45:ee:3b:3c:e5:46:e7:72:68:a7:d7:6c:0b:e4:ce:
         9b:6c:8d:6b:c2:3c:52:df:bf:f1:9a:cd:c8:ca:c7:f5:5d:d5:
         aa:09:a2:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSB29OrWAcpqEnM1roirgHsrfpK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U3NTQzMzkzQzgzRDc2RkI2QkREQzkzODU5QkU5NkI1
MThDREVBQzAeFw0yNjAzMjgyMDIwMDZaFw0yNzAzMjcyMDI1MDZaMDMxMTAvBgNV
BAMTKEM2ODNEMzJENkU5RUNEQzdCMzhCMTk4Rjk0RDJFMTE1NEE3RjczNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoi3Ze7G8wxs7IEDUBcMzUC4gG
RuTmMoKnNbvb5IdMykpgsHovVIEFI5bDxy8zyGGIKTlZQz4+Lc0YOHtR0WoYsyDa
hEPMlAZvmnUsEPefSDp8KVKCuhTxzFMMIQIW2QHl2jKs7FoOauX1xoOwRhI578FD
eC3CTSu2Onyg69hlQyKefaFtWwIg2ge1OeqAHIwT1a7PKYPnyj83eRl1UYXbiUHH
vHEg/NQ+FP1djWIcFll3zqMp/ryGKhNKyXaZfxhgCL23z3Zzbfn8wjLS60Gsa02/
IfNJEDj0Wv+Sv3mH488I7JNeNCsBFJluW+I7La44eqNIPFnzQNwLbAsVhRTPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxoPTLW6ezcezixmPlNLhFUp/c2gwHwYDVR0j
BBgwFoAUznVDOTyD12+2vdyThZvpa1GM3qwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVvUzc5QnpQelhE
QkcvMC9DRTc1NDMzOTNDODNENzZGQjZCRERDOTM4NTlCRTk2QjUxOENERUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNzU0MzM5M0M4M0Q3NkZC
NkJEREM5Mzg1OUJFOTZCNTE4Q0RFQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKcVdTRGhNZUh0bjd6TG1qUThhcDNTUXRIRUdHb2U1b1M3OUJ6UHpYREJHLzAv
MzEzOTMxMmUzMzM2MmUzMTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JI8wDQYJKoZIhvcNAQELBQADggEBAI9hqo7x
u3zhQa6rTbZ69QTC73bs9ATQR/DQmGFAXLyaPpcFHVdY/LljUSJHp0DlRsYaN/y+
D2Dshr03qWe+K1vh8DU1mqfw8hiHgNTdD6su3lpLiAHEf6gf8DzDXRug+uBGxmLL
UCpGlk0twi2283QEKqzXQui5qeh3em1TXrr5LqGUr/nrUZCJsTwn5/VTYeo7/R+6
mq/teHlBVXhr9j7tH9AdqKfkYLUdK3jCnTQZ7XrVD1xH1sJ0KJFlxSaxTHf3WjBG
ODaOipBpNe1yJK0dRODHihuT58PeYEXuOzzlRudyaKfXbAvkzptsjWvCPFLfv/Ga
zcjKx/Vd1aoJov0=
-----END CERTIFICATE-----
Generated at Wed Apr 8 19:05:03 2026 by rpki-client