Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          1as9dPSJ/ru8vyXZAFrlArFa5r5qlTbI/78F7O1MPbI=
Subject key identifier:   47:C9:F9:0B:8A:3F:41:68:32:0E:71:70:E2:C8:89:77:BE:43:E5:91
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       3550FD0640CAB88F66185702570E645DC26A4C47
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 15 Sep 2026 23:00:07 +0000
ROA not before:           Tue 15 Sep 2026 22:55:07 +0000
ROA not after:            Tue 14 Sep 2027 23:00:07 +0000
asID:                     263335
IP address blocks:        191.36.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:50:fd:06:40:ca:b8:8f:66:18:57:02:57:0e:64:5d:c2:6a:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Sep 15 22:55:07 2026 GMT
            Not After : Sep 14 23:00:07 2027 GMT
        Subject: CN=47C9F90B8A3F4168320E7170E2C88977BE43E591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:77:9a:74:4f:43:c6:b6:13:7e:9e:81:f3:
                    dc:a5:bb:3b:d8:d9:1e:2a:4f:c7:1e:35:75:38:11:
                    a3:2f:56:96:4b:db:7d:24:11:28:2e:22:58:c3:55:
                    a7:2c:e6:f4:c5:87:40:be:d5:8a:69:3c:c5:b3:f7:
                    19:d9:95:44:c2:b1:50:15:1b:8f:59:30:ff:40:13:
                    8a:9f:56:d5:0e:3f:72:84:36:21:8a:af:9c:0f:64:
                    17:f1:d2:45:db:99:7b:f7:7a:8f:3d:c8:46:9c:ba:
                    58:ce:68:8a:63:94:ba:c8:1e:77:db:58:4c:28:db:
                    12:29:37:b7:ba:07:32:f8:7d:43:d4:b9:58:d6:ea:
                    3f:b5:f9:46:5c:7b:e2:7c:c4:1e:81:59:e4:3d:62:
                    25:a0:5d:8b:be:ef:29:dc:44:99:53:95:99:ba:84:
                    30:b8:96:76:20:65:3f:7e:4e:09:93:0a:aa:16:cb:
                    52:b4:31:47:51:dc:d5:64:fa:90:7e:c5:3d:03:07:
                    c7:8d:cf:87:23:42:b6:2a:40:39:2f:be:b6:59:93:
                    a9:8e:7d:b1:8e:44:ad:3d:b5:1b:c8:ea:4c:92:aa:
                    2e:65:81:60:3b:c1:06:b7:85:3e:5d:8f:b6:55:f7:
                    ad:52:f4:26:ca:50:66:67:c1:cd:2e:03:bf:7e:34:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C9:F9:0B:8A:3F:41:68:32:0E:71:70:E2:C8:89:77:BE:43:E5:91
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:16:7a:b8:21:85:e1:d6:95:76:1e:ce:24:15:cf:72:94:
         11:b6:ab:26:86:4a:95:55:44:cf:d3:c7:09:60:cd:74:de:11:
         1d:3a:79:a6:46:a0:bf:0e:1e:53:ee:b9:bd:15:0b:dc:03:fd:
         ba:f5:e2:6f:e3:79:60:1e:2c:0b:23:93:84:a0:72:41:e7:97:
         b0:5e:94:bc:cd:c0:0c:77:94:c0:ee:ff:eb:d3:35:a3:0c:c9:
         16:b0:e8:04:79:17:cb:f8:34:3a:88:31:26:0e:a9:0e:45:2b:
         cb:96:6f:f6:0e:17:20:d5:7e:2c:8d:ca:e4:3d:93:0f:cd:ff:
         f8:1f:84:a9:9b:12:6e:77:a5:35:a1:93:5b:6e:13:35:60:87:
         25:1a:1b:89:99:ce:d3:01:f9:94:02:66:01:ce:8e:80:d1:e6:
         83:7d:36:df:39:b9:a0:7d:ed:91:dc:f8:84:2a:1f:d2:d0:c2:
         0c:80:87:b7:f6:93:07:78:bf:2b:5f:ca:22:06:85:e6:b5:a3:
         73:aa:66:39:86:bc:0d:46:26:4c:84:23:2e:7d:4c:56:df:a5:
         cc:54:14:5d:7e:09:84:6d:c3:b5:07:2c:28:3a:10:8e:ea:61:
         e2:b7:aa:ef:50:b7:b0:79:e8:b2:0d:fb:e9:1f:0d:5d:67:96:
         4b:a4:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:21:16 2026 by rpki-client