Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          uhlJgi/Zo1Dp3Y6CpFhMmJKZZpf/pvZY89hZLbs4cbE=
Subject key identifier:   F4:BA:A7:F0:BC:92:F4:6D:C3:DC:B7:B6:63:40:84:E6:9E:65:60:B7
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       73D70AB171D8DC4CBC951EB97718132EC95CE8F5
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 26 Apr 2025 19:24:26 +0000
ROA not before:           Sat 26 Apr 2025 19:19:26 +0000
ROA not after:            Sat 25 Apr 2026 19:24:26 +0000
asID:                     263335
IP address blocks:        191.36.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 20:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d7:0a:b1:71:d8:dc:4c:bc:95:1e:b9:77:18:13:2e:c9:5c:e8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Apr 26 19:19:26 2025 GMT
            Not After : Apr 25 19:24:26 2026 GMT
        Subject: CN=F4BAA7F0BC92F46DC3DCB7B6634084E69E6560B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:a6:9c:42:06:e7:76:18:20:59:65:eb:24:
                    e9:86:c5:ae:8d:40:c0:60:41:35:e2:c4:92:fc:63:
                    1f:d0:41:31:fc:e2:ac:4d:e1:2c:53:86:f6:df:7e:
                    f9:d7:f1:a2:4a:da:e9:a8:03:35:c3:76:cd:b3:df:
                    8e:10:db:2a:73:ee:b7:01:9b:ae:3d:44:e1:4c:b1:
                    e5:18:32:0b:97:cc:65:f5:87:fc:90:59:03:34:6b:
                    8c:62:6e:6c:d0:59:7c:a8:e1:36:3f:3a:9c:b7:2d:
                    7f:8a:58:84:fe:33:c4:93:de:af:23:10:28:2b:1a:
                    d5:e1:b7:ed:9c:2e:a5:fc:2c:5c:17:3e:dd:a8:6e:
                    1d:76:6d:4c:6c:86:d6:e2:0d:c8:06:71:02:d8:44:
                    c3:0a:db:55:25:a6:9c:60:50:89:1c:24:80:f8:71:
                    d6:bb:ed:99:49:ee:38:91:bc:0b:84:e9:a4:98:1c:
                    84:4e:a0:6e:dc:b6:00:d0:26:90:d2:17:8f:9f:e9:
                    ce:fd:ea:69:4f:3d:41:b2:63:1a:61:48:48:55:cd:
                    28:63:8e:3c:39:20:a6:f7:0f:74:86:8b:9e:10:1c:
                    58:24:fa:0c:9d:9a:6e:2a:0a:49:6b:c3:b9:8e:1d:
                    9f:09:d1:ed:b8:7b:9d:eb:bf:2b:09:9e:63:a3:7c:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BA:A7:F0:BC:92:F4:6D:C3:DC:B7:B6:63:40:84:E6:9E:65:60:B7
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:18:f8:d2:10:b1:43:f7:b5:02:cc:39:4e:d6:e0:63:93:35:
         c3:d8:bd:13:4e:66:72:f1:ca:d2:6c:18:a5:df:80:36:98:32:
         4e:ec:8e:53:a7:4c:50:9f:ea:66:c2:4e:43:ef:0c:34:e9:a6:
         9a:52:7d:f1:7d:fe:f3:e1:cc:eb:60:cc:91:0e:47:c8:22:1e:
         2b:29:8a:40:21:82:b4:d5:b1:d5:3d:39:28:3c:19:63:d8:bd:
         3a:2c:7a:86:cb:0a:c0:4d:d0:a5:42:dd:be:e0:a2:c8:03:b8:
         bb:56:dc:e3:1b:05:5d:22:1d:76:24:44:23:38:a9:2a:6a:60:
         d9:18:fb:0c:78:58:43:f3:ea:3b:e7:78:e4:aa:10:77:cb:c7:
         a8:0f:68:d8:a4:9b:e4:96:d2:82:b9:ed:c8:5d:f5:ba:10:57:
         78:9d:6b:8f:80:76:bc:d3:58:12:22:4b:07:74:f9:76:b1:8d:
         47:a1:76:96:a2:28:8a:04:a6:7c:6e:ce:10:e5:f8:52:a6:92:
         c8:96:f5:50:29:0b:d0:c5:92:f7:74:1c:4e:33:fc:bd:49:87:
         5e:b2:13:37:cb:c8:bc:98:82:3c:aa:70:1d:71:99:da:d4:38:
         ba:1f:b2:f0:33:1c:19:21:fd:20:08:89:7a:de:ea:97:82:a2:
         13:ac:b0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:20 2025 by rpki-client on console.sobornost.net