Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32332d3233203d3e20323633343936.roa
File:                     3139312e3234332e35362e302f32332d3233203d3e20323633343936.roa (raw, json)
Hash identifier:          hQO/2i3uV6Q670zy6tYWCoLtCFwa8d3GzyXvvQNKcwI=
Subject key identifier:   81:D5:C6:0E:01:F4:CD:36:13:B4:62:0A:E6:5D:FD:45:9F:79:7F:50
Certificate issuer:       /CN=226AFB968DD1DE00BA091347D5C472E194110650
Certificate serial:       28477A71D6F05839F5BA64BF87C0E8A6A4C1E1C4
Authority key identifier: 22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32332d3233203d3e20323633343936.roa
Signing time:             Tue 21 Jul 2026 17:32:36 +0000
ROA not before:           Tue 21 Jul 2026 17:27:36 +0000
ROA not after:            Tue 20 Jul 2027 17:32:36 +0000
asID:                     263496
IP address blocks:        191.243.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:47:7a:71:d6:f0:58:39:f5:ba:64:bf:87:c0:e8:a6:a4:c1:e1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226AFB968DD1DE00BA091347D5C472E194110650
        Validity
            Not Before: Jul 21 17:27:36 2026 GMT
            Not After : Jul 20 17:32:36 2027 GMT
        Subject: CN=81D5C60E01F4CD3613B4620AE65DFD459F797F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:8b:1a:c1:63:24:63:07:9f:e9:27:31:b2:
                    15:26:03:8c:1c:ed:cd:5e:09:63:e4:01:29:5e:7c:
                    4f:10:2b:f8:4b:a0:97:a8:c1:2e:88:03:c1:55:8a:
                    4b:e9:f5:4e:8a:d9:5e:b6:a9:ff:d4:0b:6d:cc:3f:
                    15:58:1e:a4:0f:74:44:04:91:7a:c1:4c:4f:5b:10:
                    1c:b5:90:6f:42:77:10:b8:b5:27:1b:4b:96:14:15:
                    b0:a4:0d:cb:49:c7:77:bf:6b:75:88:26:ce:e0:0c:
                    22:05:83:3e:a1:2d:46:9e:7d:28:7a:4f:46:47:6d:
                    81:d3:7a:1b:08:0d:14:3a:23:ed:f9:69:b6:f0:3d:
                    d4:fc:a7:00:ac:a4:92:47:ef:ae:e4:b0:db:d6:e8:
                    ac:f1:c2:bd:aa:2b:88:87:1e:df:15:34:a2:28:01:
                    c2:ac:fe:b2:9b:af:21:90:c1:0c:64:b5:f0:25:4a:
                    37:24:bb:47:05:76:6a:b5:ff:db:c8:29:37:22:10:
                    55:19:5f:c5:bc:a6:9d:d7:fb:80:71:cc:66:70:26:
                    a2:e3:8c:bb:12:3c:05:8d:94:8d:9f:0f:bc:69:86:
                    f8:fe:e4:33:13:3e:f8:9b:89:9f:9f:d3:9e:4f:18:
                    b2:b7:89:60:30:4e:3b:b6:c8:21:b8:a8:02:0e:60:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D5:C6:0E:01:F4:CD:36:13:B4:62:0A:E6:5D:FD:45:9F:79:7F:50
            X509v3 Authority Key Identifier:
                keyid:22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32332d3233203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:65:32:9b:6b:61:a9:f6:f8:35:c8:2a:27:65:25:0d:7b:
         e3:b6:d2:87:9a:aa:dd:42:e3:fd:5e:4d:1f:a9:ff:e0:48:93:
         ff:29:29:dd:c0:a8:7f:37:5d:8d:64:e0:52:42:a5:3b:25:cb:
         84:19:48:ac:9b:b5:08:cf:c5:7c:84:a1:36:7d:b6:a7:46:20:
         33:b1:fe:4f:ee:b7:43:31:9c:fd:c4:56:83:88:32:fd:2c:c5:
         43:7a:67:22:69:35:cb:cc:24:b8:35:ea:f4:ee:e9:09:1e:a4:
         41:ba:10:fe:22:8f:b9:dc:73:3a:0c:1f:ce:bc:99:40:81:fe:
         d8:b0:4e:a0:54:01:1a:8e:3d:a8:db:91:be:29:50:11:c0:06:
         87:eb:56:51:49:a5:2e:f3:db:41:65:fd:14:df:30:44:aa:d4:
         4f:3d:49:d9:92:9d:d2:4b:4e:70:ee:b6:e1:09:0a:a1:c4:02:
         d4:bb:8b:71:14:f7:e8:26:ed:8c:d5:70:cf:22:bb:9a:37:59:
         ca:01:64:19:dd:0b:c8:b3:ac:27:e1:4c:9a:04:23:f6:b6:7a:
         e7:33:48:6b:c9:47:42:f1:cc:81:b8:78:35:4b:51:a3:49:39:
         e1:ae:40:ff:29:81:43:e0:e0:01:a7:f7:11:13:83:5e:73:b9:
         5b:ec:c8:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKEd6cdbwWDn1umS/h8DopqTB4cQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI2QUZCOTY4REQxREUwMEJBMDkxMzQ3RDVDNDcyRTE5
NDExMDY1MDAeFw0yNjA3MjExNzI3MzZaFw0yNzA3MjAxNzMyMzZaMDMxMTAvBgNV
BAMTKDgxRDVDNjBFMDFGNENEMzYxM0I0NjIwQUU2NURGRDQ1OUY3OTdGNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWosawWMkYwef6ScxshUmA4wc
7c1eCWPkASlefE8QK/hLoJeowS6IA8FVikvp9U6K2V62qf/UC23MPxVYHqQPdEQE
kXrBTE9bEBy1kG9CdxC4tScbS5YUFbCkDctJx3e/a3WIJs7gDCIFgz6hLUaefSh6
T0ZHbYHTehsIDRQ6I+35abbwPdT8pwCspJJH767ksNvW6Kzxwr2qK4iHHt8VNKIo
AcKs/rKbryGQwQxktfAlSjcku0cFdmq1/9vIKTciEFUZX8W8pp3X+4BxzGZwJqLj
jLsSPAWNlI2fD7xphvj+5DMTPvibiZ+f055PGLK3iWAwTju2yCG4qAIOYGN9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgdXGDgH0zTYTtGIK5l39RZ95f1AwHwYDVR0j
BBgwFoAUImr7lo3R3gC6CRNH1cRy4ZQRBlAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4
ekUvMC8yMjZBRkI5NjhERDFERTAwQkEwOTEzNDdENUM0NzJFMTk0MTEwNjUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNkFGQjk2OEREMURFMDBC
QTA5MTM0N0Q1QzQ3MkUxOTQxMTA2NTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwZWNiZXFDSlA1UlFhaGhaa3o2TVlGaGs1UUJDSEFMV0pDS0xMOTdWOHpFLzAv
MzEzOTMxMmUzMjM0MzMyZTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/8zgwDQYJKoZIhvcNAQELBQADggEBAE3wZTKb
a2Gp9vg1yConZSUNe+O20oeaqt1C4/1eTR+p/+BIk/8pKd3AqH83XY1k4FJCpTsl
y4QZSKybtQjPxXyEoTZ9tqdGIDOx/k/ut0MxnP3EVoOIMv0sxUN6ZyJpNcvMJLg1
6vTu6QkepEG6EP4ij7ncczoMH868mUCB/tiwTqBUARqOPajbkb4pUBHABofrVlFJ
pS7z20Fl/RTfMESq1E89SdmSndJLTnDutuEJCqHEAtS7i3EU9+gm7YzVcM8iu5o3
WcoBZBndC8izrCfhTJoEI/a2euczSGvJR0LxzIG4eDVLUaNJOeGuQP8pgUPg4AGn
9xETg15zuVvsyIg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:02:44 2026 by rpki-client