Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa (raw, json)
Hash identifier:          B5OwnngYSon6wxQNIbdvEwUtZth2oiIGinmv785xbAQ=
Subject key identifier:   05:CE:BA:62:62:67:6A:B0:99:60:5D:19:A7:D6:53:A9:C9:C9:9D:4C
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       1618F72A69100FE67D78DF465DE9692094C0D8C1
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa
Signing time:             Tue 15 Sep 2026 23:00:07 +0000
ROA not before:           Tue 15 Sep 2026 22:55:07 +0000
ROA not after:            Tue 14 Sep 2027 23:00:07 +0000
asID:                     263335
IP address blocks:        191.36.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 00:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:18:f7:2a:69:10:0f:e6:7d:78:df:46:5d:e9:69:20:94:c0:d8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Sep 15 22:55:07 2026 GMT
            Not After : Sep 14 23:00:07 2027 GMT
        Subject: CN=05CEBA6262676AB099605D19A7D653A9C9C99D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:de:cc:2d:62:2c:96:02:90:5d:40:dd:fb:
                    2c:bf:2f:30:35:40:3b:7a:81:80:8b:c2:80:55:18:
                    ab:ca:cc:3d:f8:43:f1:97:54:8b:75:db:ed:2c:8c:
                    01:0c:b0:f1:6b:af:be:f7:26:53:5b:76:09:ea:8f:
                    f6:7a:57:f7:21:d1:b3:e3:97:f5:d1:a8:b1:42:60:
                    fb:44:96:0e:cf:2c:9d:23:9b:dc:34:69:be:46:53:
                    54:26:c3:d1:c5:0a:4b:e8:04:7d:a7:43:33:df:bb:
                    26:6e:39:80:3b:c5:a7:01:4a:89:a7:f9:dc:69:65:
                    ef:05:b9:26:b6:6e:b4:85:22:cd:4b:3a:0b:cc:46:
                    f3:c1:a3:9a:84:50:d1:65:24:3f:2c:55:09:e1:bf:
                    28:98:70:1d:1c:3f:be:8a:6f:1d:50:2a:dc:c9:40:
                    df:19:e8:37:4f:fa:a2:3b:74:90:59:66:2e:d3:47:
                    b3:19:92:3b:8d:23:96:f1:eb:85:fd:96:92:42:7c:
                    14:5e:a5:d5:b7:00:28:2f:10:c2:de:b5:64:26:ee:
                    d2:99:f2:83:5d:34:57:c5:a4:ec:de:f3:50:9f:89:
                    5b:5e:79:03:3b:8d:a3:5d:73:60:23:18:b5:4e:35:
                    6b:a9:bf:8b:3d:bb:8a:c4:78:88:a1:27:77:3e:a1:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CE:BA:62:62:67:6A:B0:99:60:5D:19:A7:D6:53:A9:C9:C9:9D:4C
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:55:cb:18:5d:2a:81:87:78:7d:a0:fb:04:ff:27:de:57:
         61:0b:2e:a9:1a:6d:ed:d5:87:c1:6b:75:ea:3f:12:2d:7a:f6:
         9c:ed:29:9b:77:cf:c0:48:5f:5d:66:53:26:9d:7a:38:a8:e5:
         c6:a0:94:58:ba:0b:ee:33:9c:17:0d:7f:c5:f3:ff:94:e2:91:
         3f:60:b9:a3:e4:50:30:00:e6:21:f9:1e:f4:f1:47:27:8f:d9:
         ed:0c:74:f5:24:75:3d:cb:e4:39:bc:a8:f8:d1:b7:e9:54:0f:
         c8:5e:90:99:b0:d8:7a:d1:73:73:2c:0b:c2:c4:50:7e:27:df:
         b7:60:6a:61:bf:43:1c:7c:25:5c:78:79:20:46:3f:d1:5d:c7:
         26:f5:f3:b2:14:81:e1:b5:38:9d:cf:43:5c:cf:bb:80:26:63:
         26:4e:41:98:cf:2a:c7:d7:ad:c8:bd:05:d2:28:a4:83:f9:83:
         0b:55:c1:9e:5f:b4:4f:f3:4b:23:a9:2c:1b:8a:10:6f:3d:1e:
         cf:f8:60:20:d8:1d:6d:2b:56:6f:05:74:5c:c1:d0:0b:0d:b7:
         c4:00:7f:dc:70:b5:9b:ec:88:96:13:70:63:8a:40:3f:20:23:
         c1:ad:2e:bc:4e:2b:09:bc:ca:1d:0f:d9:79:87:b2:03:00:01:
         9d:a0:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:09:33 2026 by rpki-client