Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133372e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133372e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          czzm+T4jqd4dtbwT1dacdqs0LFLkY/8Vwae9HUj3IRk=
Subject key identifier:   27:A9:9A:EC:12:61:B9:03:53:1D:15:86:F3:04:B7:32:BE:9E:ED:A3
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       3AE2E468F0C056BC2E7E326A0EC61CE79ED83942
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133372e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 26 Apr 2025 19:23:56 +0000
ROA not before:           Sat 26 Apr 2025 19:18:56 +0000
ROA not after:            Sat 25 Apr 2026 19:23:56 +0000
asID:                     263335
IP address blocks:        191.36.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 03:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e2:e4:68:f0:c0:56:bc:2e:7e:32:6a:0e:c6:1c:e7:9e:d8:39:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Apr 26 19:18:56 2025 GMT
            Not After : Apr 25 19:23:56 2026 GMT
        Subject: CN=27A99AEC1261B903531D1586F304B732BE9EEDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:68:a5:9f:95:18:a8:a8:d4:44:c3:c3:dd:
                    7f:7c:8f:f8:bd:8b:1e:d6:80:dc:00:41:59:48:f6:
                    73:1e:1e:71:bc:32:36:ad:de:06:7b:aa:88:6f:61:
                    ed:5a:ba:1e:58:b9:95:75:b1:29:4d:f1:af:6c:d8:
                    07:be:a4:b0:68:81:97:01:6f:71:fa:14:ed:0a:92:
                    07:b4:23:d2:3d:e4:90:b9:ae:b0:d4:6e:04:fb:e6:
                    b1:79:68:30:bf:09:62:67:62:0a:db:04:a0:7d:22:
                    18:e9:11:ce:2f:6b:6d:62:f2:f9:7c:81:1d:2d:a2:
                    db:22:2f:da:f9:60:54:dc:dd:48:11:16:d5:14:0f:
                    64:c2:cd:79:ec:4f:78:59:e5:af:34:18:54:6d:08:
                    70:89:ff:f0:8b:b1:e2:89:03:fb:ba:72:07:0a:f4:
                    ec:c5:89:2d:52:f5:3a:17:bf:1f:b6:c0:5a:2c:83:
                    60:a3:a5:7e:dc:c0:c7:61:e1:47:be:e3:60:0a:c5:
                    ea:85:c4:24:ea:80:92:93:8a:d3:b1:af:6f:c1:aa:
                    9d:ae:f5:87:67:4f:e7:48:86:fd:da:ca:11:ae:d4:
                    d9:f8:c5:c3:b4:8b:f8:f5:97:9a:a8:b6:16:a5:2e:
                    f4:61:39:46:92:ff:c1:d1:4f:07:06:1b:12:38:3b:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:9A:EC:12:61:B9:03:53:1D:15:86:F3:04:B7:32:BE:9E:ED:A3
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133372e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:9a:e7:e8:3b:ec:b3:9c:28:0f:77:da:44:33:f2:e6:12:0d:
         39:75:b7:37:aa:3d:f5:cd:59:7b:03:e4:65:f3:1b:6d:92:f9:
         29:6d:1f:9f:8a:cb:e0:dc:4a:67:57:f0:78:56:21:2b:27:14:
         e9:8a:66:7a:38:71:99:6f:5a:86:3f:96:3d:5f:8c:4b:0c:6e:
         1b:6e:9a:33:28:d2:89:85:d6:fb:76:8f:3e:43:6a:e9:4f:e5:
         9d:de:c4:90:b5:55:2f:d0:5c:39:0f:a4:01:69:05:b5:43:5d:
         f1:ef:a0:f8:ed:7c:b4:bf:f1:c9:66:78:68:88:e1:a0:8c:f2:
         13:f4:63:0f:3f:89:24:0d:d0:b7:46:80:bc:56:b6:85:53:bf:
         25:f1:2f:c4:20:12:11:00:3b:65:3f:5c:e3:27:68:54:b1:ec:
         58:53:75:3a:52:d6:ad:fd:cc:78:38:02:9b:cc:ab:a0:18:66:
         0b:18:bf:76:73:d8:7c:fd:3a:90:8b:a7:1d:3b:f8:c6:2b:59:
         37:8c:5c:8d:57:73:0c:ab:37:b8:7a:1a:0a:7b:8f:56:53:50:
         a3:a8:0d:5d:c7:bb:2c:5f:bb:44:e1:b6:5c:f8:e3:73:86:1d:
         b8:68:83:4c:11:66:af:00:72:87:fa:dd:0d:82:64:39:a2:a4:
         2a:ce:e6:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOuLkaPDAVrwufjJqDsYc557YOUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U3NTQzMzkzQzgzRDc2RkI2QkREQzkzODU5QkU5NkI1
MThDREVBQzAeFw0yNTA0MjYxOTE4NTZaFw0yNjA0MjUxOTIzNTZaMDMxMTAvBgNV
BAMTKDI3QTk5QUVDMTI2MUI5MDM1MzFEMTU4NkYzMDRCNzMyQkU5RUVEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIWiln5UYqKjURMPD3X98j/i9
ix7WgNwAQVlI9nMeHnG8Mjat3gZ7qohvYe1auh5YuZV1sSlN8a9s2Ae+pLBogZcB
b3H6FO0Kkge0I9I95JC5rrDUbgT75rF5aDC/CWJnYgrbBKB9IhjpEc4va21i8vl8
gR0totsiL9r5YFTc3UgRFtUUD2TCzXnsT3hZ5a80GFRtCHCJ//CLseKJA/u6cgcK
9OzFiS1S9ToXvx+2wFosg2CjpX7cwMdh4Ue+42AKxeqFxCTqgJKTitOxr2/Bqp2u
9YdnT+dIhv3ayhGu1Nn4xcO0i/j1l5qothalLvRhOUaS/8HRTwcGGxI4OwohAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ6ma7BJhuQNTHRWG8wS3Mr6e7aMwHwYDVR0j
BBgwFoAUznVDOTyD12+2vdyThZvpa1GM3qwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVvUzc5QnpQelhE
QkcvMC9DRTc1NDMzOTNDODNENzZGQjZCRERDOTM4NTlCRTk2QjUxOENERUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNzU0MzM5M0M4M0Q3NkZC
NkJEREM5Mzg1OUJFOTZCNTE4Q0RFQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKcVdTRGhNZUh0bjd6TG1qUThhcDNTUXRIRUdHb2U1b1M3OUJ6UHpYREJHLzAv
MzEzOTMxMmUzMzM2MmUzMTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JIkwDQYJKoZIhvcNAQELBQADggEBABSa5+g7
7LOcKA932kQz8uYSDTl1tzeqPfXNWXsD5GXzG22S+SltH5+Ky+DcSmdX8HhWISsn
FOmKZno4cZlvWoY/lj1fjEsMbhtumjMo0omF1vt2jz5DaulP5Z3exJC1VS/QXDkP
pAFpBbVDXfHvoPjtfLS/8clmeGiI4aCM8hP0Yw8/iSQN0LdGgLxWtoVTvyXxL8Qg
EhEAO2U/XOMnaFSx7FhTdTpS1q39zHg4ApvMq6AYZgsYv3Zz2Hz9OpCLpx07+MYr
WTeMXI1XcwyrN7h6Ggp7j1ZTUKOoDV3Huyxfu0Thtlz443OGHbhog0wRZq8Acof6
3Q2CZDmipCrO5qs=
-----END CERTIFICATE-----
Generated at Mon May 12 14:31:22 2025 by rpki-client