Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32342d3234203d3e20323633343936.roa
File:                     3139312e3234332e35362e302f32342d3234203d3e20323633343936.roa (raw, json)
Hash identifier:          9BdlDSTSAWjVozRip6OoQVdkphIrhE8Jydmf4IoI8e4=
Subject key identifier:   57:3E:43:0B:11:D8:A7:FE:AD:3E:16:F9:E3:9B:33:76:CA:1D:2E:82
Certificate issuer:       /CN=226AFB968DD1DE00BA091347D5C472E194110650
Certificate serial:       296AB2919C92FA3532C5E46A795F75C88AFF1AB8
Authority key identifier: 22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32342d3234203d3e20323633343936.roa
Signing time:             Tue 21 Jul 2026 17:32:34 +0000
ROA not before:           Tue 21 Jul 2026 17:27:34 +0000
ROA not after:            Tue 20 Jul 2027 17:32:34 +0000
asID:                     263496
IP address blocks:        191.243.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6a:b2:91:9c:92:fa:35:32:c5:e4:6a:79:5f:75:c8:8a:ff:1a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226AFB968DD1DE00BA091347D5C472E194110650
        Validity
            Not Before: Jul 21 17:27:34 2026 GMT
            Not After : Jul 20 17:32:34 2027 GMT
        Subject: CN=573E430B11D8A7FEAD3E16F9E39B3376CA1D2E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:7e:bd:1d:16:40:bf:a8:18:13:90:8f:01:
                    88:b8:69:16:d5:74:b0:98:c3:39:21:9f:ec:85:fe:
                    d2:76:a3:70:21:09:64:e0:a1:f5:bd:f7:ff:05:c7:
                    44:f7:24:f6:6c:93:e4:2f:14:46:be:39:05:6f:ca:
                    b5:e5:8a:44:3c:d5:c8:19:25:d8:82:98:7d:bd:a1:
                    f9:9d:0f:0e:f2:6d:e3:c1:b3:70:32:b3:ca:17:45:
                    f6:a9:ba:be:d7:2c:c6:5a:a9:9a:60:e9:2d:fe:36:
                    56:8b:41:27:50:66:51:b4:88:8a:d7:a8:62:b4:b1:
                    cc:ff:05:c9:53:d9:4c:21:64:41:e3:56:7f:33:ee:
                    09:b3:8d:4c:94:f7:fc:17:9d:21:d3:3e:12:fa:2d:
                    c2:04:1b:6d:88:bd:65:7b:bc:b5:27:86:97:04:2d:
                    37:07:e0:73:c5:f3:6f:7e:90:44:8a:61:ca:81:94:
                    d5:75:14:38:df:06:75:99:e3:80:f5:2d:76:16:46:
                    5f:e0:27:85:c0:2e:52:ef:ab:b3:f9:a4:28:15:08:
                    88:fe:b4:47:01:60:49:84:2e:ed:53:26:2e:98:48:
                    1d:34:d0:fc:fd:79:77:17:0a:b9:50:ee:63:f8:87:
                    7d:fc:39:fa:55:52:6e:d6:8f:3f:75:54:8f:96:e5:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:43:0B:11:D8:A7:FE:AD:3E:16:F9:E3:9B:33:76:CA:1D:2E:82
            X509v3 Authority Key Identifier:
                keyid:22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35362e302f32342d3234203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:24:65:ee:86:99:aa:c2:4c:d6:6b:5a:b3:da:96:af:d8:c6:
         65:22:2d:b8:2f:0a:5a:e9:65:81:2d:eb:28:00:72:14:2d:41:
         3f:d4:3d:07:b2:05:9e:81:38:eb:a8:aa:99:da:41:b8:6c:8c:
         7f:a3:23:89:b9:8e:8f:45:72:e5:00:7d:07:8b:ef:f9:00:6d:
         2d:2a:25:68:fa:86:48:c2:11:80:45:58:97:0c:21:f9:22:03:
         56:c7:a8:79:66:3d:69:b8:b5:6b:0f:cc:8a:9b:b7:21:07:8a:
         fb:42:18:ea:cd:c4:29:d0:dc:74:be:b7:35:ea:dd:7b:f3:f2:
         be:24:ae:7a:d2:6d:37:32:2c:47:b4:4e:8b:5f:13:58:ad:c6:
         0e:7f:ae:7d:7c:5c:a4:40:47:b6:f9:8c:12:4b:ad:a7:97:e0:
         81:b7:4b:b2:0f:6d:2d:95:39:2b:3f:a3:a0:15:1b:a6:f1:c9:
         4b:c5:d5:ba:11:83:c9:2b:5f:89:fd:be:5c:21:b8:32:a1:b3:
         ed:07:f8:db:68:da:cc:6a:89:9b:7a:b1:dc:ec:73:3b:9a:2f:
         75:cd:6d:c8:05:aa:26:bc:23:e6:e4:fb:6f:76:16:8f:8a:0a:
         cd:06:5b:08:5a:69:ae:48:13:15:75:e5:c6:d0:10:1b:55:48:
         c2:73:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:49 2026 by rpki-client