Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          efX/awAepeLQmHLZSela/JjfId1ZqBkjWMbspnws6io=
Subject key identifier:   BE:76:DE:18:CB:6A:F6:9E:59:E8:E9:3C:0B:F3:17:2F:0E:83:E2:F5
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       6CCB6AF3E76A8E31AD973DA5FB48C296A47BD5A1
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 14 Oct 2025 22:25:22 +0000
ROA not before:           Tue 14 Oct 2025 22:20:22 +0000
ROA not after:            Tue 13 Oct 2026 22:25:22 +0000
asID:                     263335
IP address blocks:        191.36.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cb:6a:f3:e7:6a:8e:31:ad:97:3d:a5:fb:48:c2:96:a4:7b:d5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Oct 14 22:20:22 2025 GMT
            Not After : Oct 13 22:25:22 2026 GMT
        Subject: CN=BE76DE18CB6AF69E59E8E93C0BF3172F0E83E2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:73:c7:7d:c8:82:35:d4:a6:c0:02:a2:d9:
                    3a:0f:10:8a:9e:7b:03:c9:8a:80:1c:e0:57:b6:48:
                    84:3a:2f:d6:ea:56:1c:51:95:d9:28:80:89:8a:7c:
                    95:63:57:33:81:43:07:b6:02:b0:9e:b6:48:f6:67:
                    91:48:7f:15:ed:3d:a3:e7:2e:34:18:09:4c:9a:68:
                    6a:77:cc:ae:e6:ec:65:30:f2:3f:fd:4d:eb:2b:f5:
                    09:00:f3:e2:72:45:03:d1:c2:e3:55:a4:19:60:cb:
                    10:45:45:a6:fa:c9:0e:65:cb:16:19:68:f4:7f:ee:
                    86:bf:be:cf:b9:af:76:a6:be:3d:f2:6e:1d:fd:df:
                    cc:4a:bb:ba:3d:c9:0d:7e:65:55:c3:5b:97:79:64:
                    27:26:f2:81:0f:a1:64:a4:f6:36:02:3f:96:37:64:
                    8e:7e:4d:6b:4a:0f:4e:76:c1:9f:ee:ec:c2:6a:71:
                    72:44:4e:0e:3e:f1:f9:fb:72:44:57:1d:7c:c3:61:
                    88:25:fb:4c:23:da:08:79:fd:90:e5:31:0d:01:f7:
                    60:f0:0b:c3:f2:16:28:ae:a9:e7:4b:38:82:fb:40:
                    93:34:88:5d:bf:4e:d8:bd:a9:40:63:e2:71:0a:5e:
                    16:2b:bf:29:d1:5c:7e:ed:c1:62:aa:25:0e:21:c1:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:DE:18:CB:6A:F6:9E:59:E8:E9:3C:0B:F3:17:2F:0E:83:E2:F5
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:44:89:ce:ee:fe:06:32:7b:b4:6b:a2:a4:0e:2c:29:39:6e:
         47:8f:d0:ed:b5:db:ad:c9:38:05:2e:2f:c3:e5:8e:f5:bd:7f:
         e9:6d:0a:68:35:df:2c:83:8f:ab:3b:43:5e:9f:1c:bb:b8:98:
         a9:2e:44:b1:4e:55:ae:51:73:08:ed:ec:db:14:1f:7e:e4:96:
         6a:47:31:d5:94:05:f9:dc:a2:a3:2c:d6:2b:eb:c0:1a:20:d7:
         7d:fc:ab:84:09:bc:4b:2a:9f:25:2d:47:95:44:d2:e4:00:fe:
         73:30:40:c7:0f:67:72:9d:8d:9d:12:f8:c2:5d:ce:6b:2f:59:
         e3:0f:60:59:fe:00:7d:6e:6d:4b:15:a5:ed:72:38:93:96:ad:
         c3:d9:eb:ea:ee:77:5c:d1:79:33:b6:ad:ae:3c:0c:a3:10:e8:
         30:65:6b:d1:e8:08:2f:80:14:bc:8a:b7:42:46:6f:7c:6d:f3:
         8b:b3:47:cd:05:f1:c0:6a:29:2e:3d:eb:79:29:70:e0:f4:1c:
         9f:75:0d:3d:79:25:06:06:9f:e6:b7:59:b1:d3:8f:47:21:12:
         3c:4d:8d:55:cf:18:85:05:fb:1e:fe:e6:e0:51:22:3e:67:45:
         82:3e:4b:7b:fe:0d:52:1d:fa:81:f5:ba:1e:28:66:ff:78:85:
         31:d3:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:35 2025 by rpki-client