Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          7/qpGh9kl2SM2YKmu+GVxgUMvA056KcZWisNJM4MLW8=
Subject key identifier:   7D:9A:06:EE:89:F8:A4:E7:76:F5:50:22:27:63:8E:98:EC:BE:6D:2C
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       5F92AD52C71E4AC556528663BBA2F298B76FF266
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 15 Sep 2026 23:00:07 +0000
ROA not before:           Tue 15 Sep 2026 22:55:07 +0000
ROA not after:            Tue 14 Sep 2027 23:00:07 +0000
asID:                     263335
IP address blocks:        191.36.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:92:ad:52:c7:1e:4a:c5:56:52:86:63:bb:a2:f2:98:b7:6f:f2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Sep 15 22:55:07 2026 GMT
            Not After : Sep 14 23:00:07 2027 GMT
        Subject: CN=7D9A06EE89F8A4E776F5502227638E98ECBE6D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:cd:83:87:20:de:7d:c0:64:52:29:ea:bc:
                    a8:c5:83:d9:f8:f5:92:93:84:cb:1f:71:dd:53:cc:
                    e3:23:21:16:8c:f5:a0:93:6a:ad:69:57:80:c9:39:
                    9f:ad:30:ed:62:f4:01:c6:17:7b:d9:b1:95:0d:fb:
                    db:93:07:21:a4:66:a0:7f:7a:93:0c:10:9e:f5:97:
                    30:e6:3d:7b:f7:fe:f3:d5:1e:ca:88:21:e9:f9:44:
                    34:90:07:73:10:6b:2b:bd:f3:30:57:99:52:51:f5:
                    01:6c:97:e0:a7:18:75:09:57:c2:8e:60:25:2e:4b:
                    b4:40:a0:51:3c:ab:99:3f:c5:38:5a:48:a4:c0:aa:
                    a8:b8:4d:29:85:32:e2:65:17:44:8f:09:ac:0f:e2:
                    56:42:37:1d:45:1a:4c:70:3c:2d:65:85:77:0a:79:
                    d0:2e:b6:5b:46:1a:e7:65:82:62:72:c7:34:9c:14:
                    cf:5b:17:dd:7e:c7:40:63:06:f7:26:9a:b7:8e:a7:
                    9e:72:5c:4a:cf:8f:b9:67:eb:67:1c:1c:6e:da:1d:
                    a2:a9:cc:45:00:4a:99:cb:39:84:bd:a6:88:ee:1b:
                    fd:f5:f6:c4:3f:11:a6:49:4d:aa:9a:fd:2b:4f:00:
                    62:8d:df:8b:7c:59:2d:99:2f:a6:45:16:01:c7:e2:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9A:06:EE:89:F8:A4:E7:76:F5:50:22:27:63:8E:98:EC:BE:6D:2C
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134322e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:aa:80:1b:77:97:60:12:e3:4e:9e:66:0f:1a:a3:2e:fd:3e:
         18:72:f8:e3:c0:84:7b:57:db:65:91:47:44:18:e2:ee:b8:20:
         87:46:a6:62:8e:86:1e:74:df:7a:27:e0:c9:35:9a:2f:92:97:
         f0:35:f2:07:cf:6e:36:13:cb:a4:07:00:96:6e:87:d8:e9:3f:
         04:94:35:49:72:23:ba:3a:1b:2a:df:24:31:da:df:29:58:b9:
         e5:29:39:f3:50:33:19:72:f2:9b:72:bb:19:60:27:fa:61:88:
         8d:d8:c0:f3:47:4d:07:9c:e3:e9:46:9f:2d:74:ec:36:ea:0d:
         e0:44:79:f4:5a:28:4a:3e:23:81:f3:24:18:44:95:90:fd:ba:
         9e:a7:6f:8d:f8:54:62:91:65:c7:9b:73:fc:c3:9b:27:28:31:
         3a:97:d7:d2:e7:b5:33:f7:72:79:92:bf:99:c6:65:8e:e8:7c:
         c7:b2:c7:aa:38:df:a8:72:37:f1:1a:89:f8:df:57:44:a0:f4:
         86:be:ad:ea:78:db:04:86:3f:90:2e:cc:a4:ae:34:9f:17:8b:
         e4:24:f7:33:e7:5d:5b:f3:c8:5a:1f:e5:5d:f2:c6:13:82:bb:
         a7:39:1e:a9:88:a2:a2:c8:9f:69:04:23:aa:66:6a:78:01:ee:
         1e:35:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 20:02:36 2026 by rpki-client