Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          zc+CWIY15Ysi4AXpk9YT01amUL2fXye2T40Aplszpas=
Subject key identifier:   94:F3:6B:71:B4:A7:EB:26:0B:97:C4:DF:B1:C1:3D:0F:2E:36:CB:B5
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       0FAE68CC4E90B8BA436F9390676F4BC1DB21609D
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 14 Oct 2025 22:25:22 +0000
ROA not before:           Tue 14 Oct 2025 22:20:22 +0000
ROA not after:            Tue 13 Oct 2026 22:25:22 +0000
asID:                     263335
IP address blocks:        191.36.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ae:68:cc:4e:90:b8:ba:43:6f:93:90:67:6f:4b:c1:db:21:60:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Oct 14 22:20:22 2025 GMT
            Not After : Oct 13 22:25:22 2026 GMT
        Subject: CN=94F36B71B4A7EB260B97C4DFB1C13D0F2E36CBB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:8d:b9:77:6a:c0:de:e3:bf:d2:04:e1:a9:
                    0d:e9:0b:d7:32:5e:60:34:9d:a3:fc:6e:54:0f:fa:
                    0f:5d:6b:03:de:51:8e:58:37:5b:18:71:c7:90:e5:
                    bc:35:9b:80:ad:38:ba:0d:6f:85:c5:0e:cc:05:e3:
                    ce:9b:06:9a:9e:cf:24:c5:e9:57:fb:9f:93:f8:46:
                    24:a0:93:02:22:df:e0:a0:61:29:d1:c3:5f:68:e9:
                    b8:5f:3d:3c:6a:4d:a9:23:ed:0b:95:d0:9b:ea:de:
                    b4:72:5d:1a:50:90:de:f2:9a:73:9e:28:2c:ec:25:
                    80:28:3a:39:79:74:68:8a:52:52:11:bb:20:b1:3e:
                    69:59:ba:92:80:89:07:9c:ed:00:a3:75:ed:b2:4f:
                    a2:12:e7:e0:d3:52:56:e0:0a:3f:03:f4:b1:37:bf:
                    39:22:ef:c6:24:ea:7e:b1:5f:e9:bc:54:fe:7c:6f:
                    be:d5:4e:8e:80:9b:97:81:41:67:59:86:d1:28:97:
                    fb:55:a1:5e:fc:61:4b:65:18:4f:47:4b:fd:c7:5a:
                    69:f6:22:ef:29:6e:83:cd:e6:6b:ae:15:c0:75:05:
                    27:31:92:42:d7:c5:11:93:32:6a:eb:26:36:81:76:
                    a7:38:ca:eb:fb:f0:59:e7:52:ff:67:6d:ee:2e:bd:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F3:6B:71:B4:A7:EB:26:0B:97:C4:DF:B1:C1:3D:0F:2E:36:CB:B5
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:e6:37:47:5b:cc:04:8d:5e:b7:c3:ff:20:4c:ad:5d:c8:54:
         71:01:79:3b:fe:35:23:c0:5c:a6:c3:82:27:56:b4:28:bd:2f:
         26:60:11:57:f1:e4:21:14:5f:f1:23:f8:dc:b6:f2:02:01:c7:
         ff:99:71:e6:d4:d6:75:49:83:b8:c1:a2:3f:e0:49:93:6d:15:
         b5:a8:b8:5e:b1:af:da:3e:c4:dc:ad:d2:68:6b:02:14:55:e5:
         1d:e2:76:b4:f9:0c:6c:08:cf:bb:38:bd:c5:2e:14:33:7d:43:
         53:50:f0:ef:5f:81:0c:6f:e0:9d:ed:67:af:93:5d:f2:7b:ad:
         3b:c6:b7:5f:d5:e6:ba:f0:15:34:41:9a:fd:bf:12:32:21:c1:
         4e:b5:84:f9:1b:8b:b2:82:65:88:c7:d7:52:2a:71:23:79:b3:
         4b:3a:ba:ce:e7:f7:b6:46:98:b3:67:c0:90:f5:a3:71:6f:5d:
         2b:57:53:f6:de:d6:5b:e4:95:a7:05:a2:03:94:75:6a:ea:c8:
         01:5b:27:81:e2:a6:33:24:ef:36:26:e0:a2:a2:48:3d:eb:19:
         c3:06:d7:d8:a2:84:60:d2:d0:0d:23:34:5e:b1:b9:b4:62:db:
         30:00:b4:bb:85:09:95:f5:7a:b8:cc:37:07:5f:79:c6:55:a9:
         73:c6:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:13 2025 by rpki-client