Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35372e302f32342d3234203d3e20323633343936.roa
File:                     3139312e3234332e35372e302f32342d3234203d3e20323633343936.roa (raw, json)
Hash identifier:          Sy0DmbNioTxQnzfmxNnP52CTw+1duXqS3J7Xo7bbSAc=
Subject key identifier:   B3:42:1E:1D:8D:06:75:6A:EA:96:D4:C4:B4:44:71:CB:05:60:C5:78
Certificate issuer:       /CN=226AFB968DD1DE00BA091347D5C472E194110650
Certificate serial:       5EF914E235971B034B02979B4D2E79CCB7F87272
Authority key identifier: 22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35372e302f32342d3234203d3e20323633343936.roa
Signing time:             Tue 21 Jul 2026 17:32:35 +0000
ROA not before:           Tue 21 Jul 2026 17:27:35 +0000
ROA not after:            Tue 20 Jul 2027 17:32:35 +0000
asID:                     263496
IP address blocks:        191.243.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f9:14:e2:35:97:1b:03:4b:02:97:9b:4d:2e:79:cc:b7:f8:72:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226AFB968DD1DE00BA091347D5C472E194110650
        Validity
            Not Before: Jul 21 17:27:35 2026 GMT
            Not After : Jul 20 17:32:35 2027 GMT
        Subject: CN=B3421E1D8D06756AEA96D4C4B44471CB0560C578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:90:42:d3:fd:9b:70:57:61:e3:ce:a7:17:
                    80:34:34:41:69:54:0b:e9:28:d4:69:f5:3d:64:2d:
                    63:19:66:cf:d0:e8:c7:cc:ec:1f:21:3b:a3:e0:0c:
                    ba:75:cb:1a:93:74:85:e3:11:70:99:44:9f:c2:03:
                    2d:25:5d:fb:9a:16:48:fe:60:b3:c7:a7:06:f8:50:
                    79:31:2c:c4:2e:d2:ad:a1:2b:ec:f0:ca:1e:21:38:
                    db:09:a3:98:56:c7:57:f2:bd:7d:49:21:66:6c:20:
                    d6:c5:17:aa:a3:dc:8a:32:37:a0:c1:20:fb:5f:92:
                    c5:bb:6e:c0:e4:84:a4:24:d0:8d:db:38:8a:24:c5:
                    2e:d7:c4:91:d5:ba:25:f3:54:eb:48:43:e9:e9:97:
                    83:49:82:e6:18:a4:86:c0:b3:b5:43:10:cc:00:03:
                    1e:6c:e5:92:85:4e:0e:38:ea:c5:97:d8:5a:e7:f8:
                    db:af:e7:13:f4:8b:95:a5:0f:f1:63:5d:b7:54:46:
                    a6:ad:71:24:68:b7:83:24:0c:fe:1b:95:d9:c1:3a:
                    44:4f:2f:07:b8:b5:cb:d7:95:f0:41:e5:ec:79:e7:
                    e9:a1:f6:ce:4f:83:e9:0d:fa:b5:ab:6d:29:0c:d1:
                    fd:ae:42:6f:f0:35:23:13:4b:8e:15:c5:d3:1a:4e:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:42:1E:1D:8D:06:75:6A:EA:96:D4:C4:B4:44:71:CB:05:60:C5:78
            X509v3 Authority Key Identifier:
                keyid:22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35372e302f32342d3234203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:a5:4c:18:bf:2e:7c:91:1c:7d:1c:cd:fd:59:58:39:2e:c9:
         a8:71:89:e5:0e:e4:02:e0:df:17:b0:f9:d5:8b:83:3d:dc:ee:
         9c:e7:8c:57:6a:99:19:9b:c8:69:44:4f:43:18:f3:66:7c:da:
         8b:58:37:c8:5c:d4:14:4e:6e:b4:b8:01:dd:9d:d1:27:08:e7:
         34:0b:50:d3:01:6f:5b:53:53:50:5b:d1:e8:f9:72:41:6d:a5:
         82:8d:3e:12:5d:7d:52:3c:c1:cb:c9:b7:23:1a:9b:7e:24:11:
         de:01:e5:62:ec:75:e2:b3:d7:72:68:1f:d8:09:c1:a5:b0:ed:
         9a:ff:f4:ae:e7:5c:6d:98:f4:7d:69:1c:a9:f0:81:e1:63:ab:
         f8:cf:64:30:37:79:d4:ae:8f:7c:34:23:cc:1d:e0:a4:a5:98:
         ef:27:74:6e:23:5c:b5:12:3e:af:94:a3:d1:bd:fa:5a:b1:18:
         be:be:33:8b:c0:fa:04:f6:66:1c:a0:b4:6d:e8:d1:1c:ec:c4:
         6d:8e:0d:0e:db:c5:cd:d2:93:4a:66:3e:83:21:0b:14:54:00:
         a2:0e:5d:35:9c:8e:02:76:79:8b:b0:56:90:35:bb:e0:f4:2d:
         47:9b:d7:ce:f0:7f:16:1c:91:08:1d:9f:23:62:63:c4:1d:be:
         2d:36:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:50 2026 by rpki-client