Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          LDeH83IM5CEBzY7qrr77lGpvdiXbB/U13ZkX2ORmgZ4=
Subject key identifier:   30:22:73:0E:0B:4F:A4:A3:03:7C:CF:F2:39:30:03:50:74:32:1A:CF
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       1EBEDD7DA278E9A55BFF712457B8637685F77C1A
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 26 Apr 2025 19:23:40 +0000
ROA not before:           Sat 26 Apr 2025 19:18:40 +0000
ROA not after:            Sat 25 Apr 2026 19:23:40 +0000
asID:                     263335
IP address blocks:        191.36.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 03:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:be:dd:7d:a2:78:e9:a5:5b:ff:71:24:57:b8:63:76:85:f7:7c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Apr 26 19:18:40 2025 GMT
            Not After : Apr 25 19:23:40 2026 GMT
        Subject: CN=3022730E0B4FA4A3037CCFF23930035074321ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:22:df:8d:cb:a9:de:01:c5:b3:dc:16:63:
                    6d:ac:39:ea:72:a4:4f:7b:c1:fb:a1:70:76:1f:04:
                    70:e2:e9:ae:d9:e2:b4:1e:65:b2:10:90:c5:72:7f:
                    be:13:79:53:11:7a:95:05:16:e0:95:23:98:9b:8d:
                    bd:92:fd:29:60:2b:24:7f:b9:1d:5f:45:88:f9:f3:
                    13:63:0a:81:b2:d4:57:90:d8:46:b0:d1:a2:44:70:
                    55:62:62:bc:36:5d:b9:a0:c3:d1:6a:5e:35:1c:ed:
                    5a:8e:16:eb:ea:20:7d:28:5d:28:23:ef:f0:e5:5e:
                    b3:65:75:1d:88:24:ec:ee:fd:bf:6b:b9:4b:8c:52:
                    84:5e:39:52:0e:56:6e:cb:ff:e3:6c:d2:c8:58:ba:
                    90:0a:cb:ee:1a:c9:28:20:1b:78:12:cf:95:38:81:
                    75:e9:59:1d:bc:ce:ff:0e:9a:10:c6:e3:2c:1b:20:
                    5b:21:73:ec:97:9d:2e:5a:59:d4:26:e4:42:1e:b2:
                    ad:08:b8:6d:30:1a:54:02:93:43:e4:5b:81:c2:6f:
                    dd:d0:50:39:0d:c4:40:13:99:11:1c:c4:5b:f2:2f:
                    d6:60:10:b2:b4:0a:7b:2a:ad:dd:02:75:d1:02:51:
                    c2:9a:f4:99:e4:a3:f4:b7:51:b5:ef:6c:0a:3f:24:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:22:73:0E:0B:4F:A4:A3:03:7C:CF:F2:39:30:03:50:74:32:1A:CF
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:2b:60:56:6f:38:9c:d8:01:b0:cc:a9:2c:fb:8d:41:c6:
         56:bb:2b:f7:ac:46:64:29:66:87:82:2d:c0:3f:bb:7b:ef:af:
         1a:29:71:56:0f:ac:c8:60:80:63:5f:4b:a9:7d:a5:7f:43:d0:
         ed:1c:b4:01:b8:2b:f9:6b:05:91:5e:7b:86:0b:f4:72:dd:36:
         46:67:03:e7:a5:b1:ba:39:3f:29:3d:0a:47:f0:56:8a:b7:85:
         cf:8d:3a:27:d3:20:a4:de:af:85:87:62:91:f9:d1:db:48:e1:
         6f:fe:f8:59:be:fa:77:1d:4e:b6:7b:00:01:a2:3f:9a:08:6d:
         03:ff:54:8a:88:8e:60:11:66:05:15:53:4c:ee:9a:bd:8b:1c:
         48:6c:9f:11:bb:3a:ac:41:ef:3f:3e:4d:13:58:ff:3c:1c:dd:
         b4:71:c6:61:8f:4c:62:18:5b:57:2a:08:8e:bc:74:2a:37:48:
         ac:5e:28:b1:bc:b4:0a:e4:31:dc:95:40:b7:a8:47:f5:ac:41:
         84:a8:e3:37:ca:c0:7d:27:6f:b5:ef:ab:81:f4:6a:18:d8:a7:
         57:e7:52:ba:bc:43:35:a0:46:2d:46:bc:3a:58:da:9d:9b:33:
         54:d1:6f:5d:7d:98:00:32:0a:24:30:d7:2e:b8:37:1c:99:be:
         b8:77:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:31 2025 by rpki-client