Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35382e302f32332d3233203d3e20323633343936.roa
File:                     3139312e3234332e35382e302f32332d3233203d3e20323633343936.roa (raw, json)
Hash identifier:          SfhCVwWcBJGw9QaOS6EJtvpix6Qa1ZEkM0gossdvSN0=
Subject key identifier:   A1:B3:F2:36:F4:09:B6:6E:37:01:7D:6A:66:6C:9D:1B:52:BD:01:EE
Certificate issuer:       /CN=226AFB968DD1DE00BA091347D5C472E194110650
Certificate serial:       76624FCF5A7B96CA581A274B6041DAB7F0940044
Authority key identifier: 22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35382e302f32332d3233203d3e20323633343936.roa
Signing time:             Tue 21 Jul 2026 17:32:35 +0000
ROA not before:           Tue 21 Jul 2026 17:27:35 +0000
ROA not after:            Tue 20 Jul 2027 17:32:35 +0000
asID:                     263496
IP address blocks:        191.243.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:62:4f:cf:5a:7b:96:ca:58:1a:27:4b:60:41:da:b7:f0:94:00:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226AFB968DD1DE00BA091347D5C472E194110650
        Validity
            Not Before: Jul 21 17:27:35 2026 GMT
            Not After : Jul 20 17:32:35 2027 GMT
        Subject: CN=A1B3F236F409B66E37017D6A666C9D1B52BD01EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:c2:78:63:f4:ad:f7:4f:80:a5:26:b2:73:
                    ce:f3:f7:f2:17:d1:4f:e9:d6:32:9a:d8:37:49:22:
                    30:75:b7:39:fe:1c:05:72:ee:fd:66:b9:ad:f6:0b:
                    b4:6c:7c:8a:7e:9e:1d:42:c0:88:35:2e:8c:c8:c9:
                    ae:ec:83:01:ed:d5:28:04:b2:37:c4:43:36:db:62:
                    1d:5a:c8:52:ce:46:56:d1:84:8c:be:d0:5d:a7:5e:
                    af:c1:ca:af:b0:05:1b:a0:cf:76:df:b8:8b:68:23:
                    f7:ec:e8:67:94:52:eb:b7:9a:93:bc:83:b2:cd:b0:
                    50:69:de:39:e4:41:34:bb:d2:89:72:14:5a:bd:5e:
                    c0:01:aa:b2:53:d0:a5:38:f5:4f:c5:96:39:e5:79:
                    6c:41:88:a7:b1:59:8b:2e:64:a3:8b:91:70:44:1e:
                    ff:ca:98:31:45:71:97:41:92:f4:90:86:fc:0a:dd:
                    c3:43:6b:76:98:f3:f6:38:d3:96:12:3a:91:20:cb:
                    f0:09:47:c7:e3:95:e3:27:e2:83:50:f3:32:05:57:
                    dd:08:7d:8d:89:c8:5c:8a:23:1b:4d:0c:68:a8:e0:
                    53:a9:47:d2:99:20:eb:f4:25:0b:73:bb:03:81:e0:
                    f2:01:3a:53:ca:79:b5:85:52:0c:91:48:29:90:7b:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B3:F2:36:F4:09:B6:6E:37:01:7D:6A:66:6C:9D:1B:52:BD:01:EE
            X509v3 Authority Key Identifier:
                keyid:22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e35382e302f32332d3233203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:9d:67:d6:14:9c:15:27:7a:09:71:27:20:19:d6:43:cf:e0:
         3f:42:6a:ff:32:15:fe:ba:c5:8f:62:ab:f1:ea:90:ca:fd:fe:
         10:7e:12:ad:4e:53:eb:9c:d8:62:33:c9:0c:04:96:b7:e0:29:
         16:84:19:c0:ca:22:2c:71:32:56:5f:53:4e:95:e9:04:4e:e1:
         1a:8f:c7:44:5f:84:a7:7e:83:60:da:e8:1f:3c:62:d7:fb:44:
         bb:fd:fd:19:24:ef:aa:d1:21:40:4c:06:7f:61:7e:07:ad:2b:
         2b:39:11:d7:85:de:a4:f5:03:bc:01:36:2a:9c:87:e2:7e:01:
         66:ca:d0:b8:6d:4e:81:71:69:9a:17:65:eb:7b:ed:64:b6:a6:
         e8:cd:48:e7:84:5c:73:ce:df:98:32:04:eb:bf:62:99:18:89:
         22:eb:45:93:80:90:ae:02:53:6e:b4:7d:0b:98:13:78:c3:d4:
         95:da:3f:08:d0:57:cb:49:96:a8:b1:74:85:e9:7b:d0:24:dd:
         f1:19:2a:d3:13:81:eb:9b:c5:81:6f:fe:cb:a4:f0:d2:47:16:
         2d:35:b9:c2:23:98:b2:6e:09:fe:03:37:e6:57:54:77:c7:2b:
         2e:54:37:8d:bd:e0:89:72:d5:03:af:63:19:d3:44:67:6b:c9:
         57:36:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:02:40 2026 by rpki-client