Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          TPw+t9YNT4pcuqeqpc+KAU6YH9qgOs5qDvutuMRmVqM=
Subject key identifier:   BE:65:41:55:1A:BF:2E:C9:96:3E:36:B2:94:B3:DA:DF:6D:5F:5B:03
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       1726E2E3FE5ED23E9445D8A9BFDFB29376AFEA26
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 14 Oct 2025 22:25:22 +0000
ROA not before:           Tue 14 Oct 2025 22:20:22 +0000
ROA not after:            Tue 13 Oct 2026 22:25:22 +0000
asID:                     263335
IP address blocks:        191.36.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:26:e2:e3:fe:5e:d2:3e:94:45:d8:a9:bf:df:b2:93:76:af:ea:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Oct 14 22:20:22 2025 GMT
            Not After : Oct 13 22:25:22 2026 GMT
        Subject: CN=BE6541551ABF2EC9963E36B294B3DADF6D5F5B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:af:8c:ff:6b:48:f2:c5:f1:d7:d2:c3:05:
                    ed:75:39:5b:ad:62:82:77:8e:1f:cf:bd:18:40:72:
                    5c:11:78:00:4c:01:19:35:6f:ed:9d:8a:e7:1b:4c:
                    65:2f:31:c5:e3:fd:32:e7:2e:84:13:60:56:34:e6:
                    cb:ea:6f:dc:6f:d4:78:a0:a0:13:e3:8e:fa:11:50:
                    1d:be:6d:6d:cb:53:d9:c6:a3:54:df:3e:51:bf:9d:
                    e9:37:f6:14:5a:d5:08:a8:52:cd:9a:f7:78:05:28:
                    eb:45:bd:24:b1:5a:18:93:1a:8d:ef:33:dd:ea:d0:
                    4a:36:03:18:ff:0a:72:7c:fd:b0:c0:c4:e8:06:18:
                    1d:e6:9c:63:5a:03:9b:b2:7e:e5:b1:02:19:28:5f:
                    8a:af:01:0d:a2:c8:72:e9:b6:d6:c7:cc:8b:50:73:
                    3b:d7:9d:79:35:16:fb:05:37:93:c3:04:a6:65:32:
                    27:0e:bc:c7:33:23:79:75:fc:02:7b:57:0f:e6:e7:
                    1f:29:4a:d5:3f:4a:a5:d6:f2:02:82:e5:82:57:ce:
                    fa:19:33:ba:0d:8f:47:bc:78:35:af:c9:32:f0:f7:
                    ab:b0:3c:16:9a:85:e7:d1:1b:0b:ba:62:cf:80:f3:
                    23:fd:38:6c:a4:a6:c0:2c:96:64:34:19:f7:cc:92:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:41:55:1A:BF:2E:C9:96:3E:36:B2:94:B3:DA:DF:6D:5F:5B:03
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:45:5e:9a:46:a5:0e:c9:fe:b7:35:b9:43:26:89:6b:15:
         0d:4b:67:28:a2:90:64:7c:44:8d:2c:4e:53:ad:a7:26:3f:2f:
         11:2f:76:43:a0:30:8b:e7:5f:40:8d:22:ce:a7:f5:af:1d:b8:
         9a:2d:45:46:fe:2b:c6:a4:57:90:2f:73:8a:b0:a9:44:2a:4e:
         1a:79:7e:8c:12:ae:40:2e:94:b2:8d:7a:88:05:f4:53:68:3b:
         f3:b0:46:04:8a:02:5d:ab:ba:b2:64:a0:eb:33:4a:9f:b3:74:
         53:dd:c3:57:e2:ec:e0:90:51:82:45:92:b2:e3:cb:2e:28:18:
         ea:b7:aa:ad:31:49:6f:dd:f0:be:37:d7:1a:39:ac:27:b6:6c:
         cf:a7:9e:9a:f1:9b:34:ed:a6:ad:a9:b9:98:de:24:71:3b:39:
         9c:1c:5e:95:b9:de:61:8e:cd:1a:ff:b9:dd:93:64:a6:57:6b:
         2a:22:dc:a6:3f:df:28:af:4b:0f:73:f1:1c:ea:03:e4:e4:2a:
         9a:1b:50:5c:61:2a:f4:cf:b6:69:bd:a1:8d:90:12:43:29:52:
         eb:68:59:b4:7b:97:74:98:ec:c1:42:ba:70:ac:13:ca:e7:77:
         4c:18:85:b9:69:c5:f9:9f:f5:f8:d8:cb:7a:03:fc:c7:10:19:
         22:e5:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:19 2025 by rpki-client