Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa (raw, json)
Hash identifier:          ZRkRyC+tD8boEsT0ksuBvkfRmytkugc9W7pxQBdP0sg=
Subject key identifier:   EE:84:3B:3D:4C:44:96:A4:C7:8A:7D:5B:F5:84:81:C7:21:AF:E5:97
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       7E44B21283D7E5716029C30E28C3BAE3683798EE
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa
Signing time:             Tue 14 Oct 2025 22:25:22 +0000
ROA not before:           Tue 14 Oct 2025 22:20:22 +0000
ROA not after:            Tue 13 Oct 2026 22:25:22 +0000
asID:                     263335
IP address blocks:        191.36.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:44:b2:12:83:d7:e5:71:60:29:c3:0e:28:c3:ba:e3:68:37:98:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Oct 14 22:20:22 2025 GMT
            Not After : Oct 13 22:25:22 2026 GMT
        Subject: CN=EE843B3D4C4496A4C78A7D5BF58481C721AFE597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:10:63:37:4b:72:a6:15:6c:f8:0a:78:9c:
                    da:3f:02:95:90:b3:ee:f0:dc:0c:ef:42:a2:60:2a:
                    ce:85:c2:7d:3b:d9:42:e3:10:0a:28:96:29:8e:7f:
                    54:80:9f:d8:1d:7b:87:07:1e:1e:25:cd:f1:19:e0:
                    ce:95:1a:7a:80:ac:09:91:30:be:39:ca:8d:1b:48:
                    36:4d:df:6f:d1:96:1f:ba:ac:db:48:95:31:ca:79:
                    93:9d:5a:e1:79:b0:a8:27:04:4f:4c:b1:01:14:06:
                    d3:ac:e4:c2:27:5f:f5:22:c3:56:9e:86:45:f0:67:
                    05:ab:57:91:45:4c:9e:d1:cc:39:77:00:b2:ff:53:
                    6e:b4:88:b4:23:51:3f:a3:2f:65:b8:a8:7a:0f:be:
                    59:9a:a0:13:75:8e:97:d4:cd:0f:06:bf:12:d8:88:
                    0e:bd:9c:33:aa:00:39:db:79:d7:8c:c4:b9:d5:dd:
                    87:9d:df:9b:66:d3:60:66:2d:85:8e:6c:92:15:40:
                    a7:4d:9a:17:45:42:52:38:9e:8c:d7:a7:4b:3b:b1:
                    38:13:65:02:9b:0c:9b:b4:f2:eb:e6:89:74:09:18:
                    04:3d:ab:f5:2e:5f:cf:d0:50:29:b5:50:2a:8f:7f:
                    76:f0:ae:22:79:cb:25:78:71:6c:5f:68:2f:32:d5:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:3B:3D:4C:44:96:A4:C7:8A:7D:5B:F5:84:81:C7:21:AF:E5:97
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:cd:5a:fd:f7:6f:41:83:d9:80:7c:77:92:3b:83:90:08:
         0a:ed:0b:a0:03:88:fc:ae:f1:07:ad:f6:f1:3a:8d:90:17:38:
         c0:e8:21:40:b5:85:54:66:d5:75:9b:c1:00:d3:44:7e:be:cc:
         3a:37:74:34:e2:a5:dc:7c:b8:ff:53:f5:3e:32:1c:6f:f3:ad:
         7d:f9:ac:10:b2:7f:4f:53:65:03:46:60:58:91:37:e5:a0:78:
         14:5a:ac:1b:f6:5e:17:59:fe:0a:ec:3e:97:63:c0:cb:72:47:
         29:32:2f:bf:ac:43:1a:26:46:33:d2:c3:26:70:4f:40:bc:15:
         15:5f:44:81:a2:65:a2:63:22:7a:1c:ec:90:f1:c8:52:94:9d:
         72:f7:db:43:13:01:35:a6:96:ac:b9:e7:de:98:7f:85:b6:c4:
         7e:4b:d4:12:5f:f9:e1:f2:d2:8a:72:75:a7:b7:db:9d:bd:92:
         0d:33:e0:e4:67:bd:96:43:88:d7:9a:cc:ae:0e:16:ae:d0:fa:
         32:30:66:c3:75:b1:3e:80:dc:31:28:af:2e:84:38:fb:4b:31:
         23:3f:be:38:a6:29:c5:0d:10:1a:f5:e3:3c:7b:0d:58:bb:8f:
         f4:8b:f3:de:13:3d:b4:e1:32:2e:21:65:c0:5c:fb:59:e0:1a:
         8d:3c:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:24 2025 by rpki-client