Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          mtep9gkj1duLK74evjK1U4+i2ZWafI8SFaBniqh4muc=
Subject key identifier:   7A:35:04:96:EE:C6:EA:26:B4:C9:D7:10:7C:B7:FD:F0:7C:FC:58:8A
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       6F85738E049F1630140957E3CC6D3F3DC94EC98B
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa
Signing time:             Sat 26 Apr 2025 19:24:58 +0000
ROA not before:           Sat 26 Apr 2025 19:19:58 +0000
ROA not after:            Sat 25 Apr 2026 19:24:58 +0000
asID:                     263335
IP address blocks:        191.36.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 20:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:85:73:8e:04:9f:16:30:14:09:57:e3:cc:6d:3f:3d:c9:4e:c9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Apr 26 19:19:58 2025 GMT
            Not After : Apr 25 19:24:58 2026 GMT
        Subject: CN=7A350496EEC6EA26B4C9D7107CB7FDF07CFC588A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:21:a0:1e:8f:18:8c:35:d4:18:be:76:24:e1:
                    0c:93:2b:82:20:39:30:86:aa:2a:3f:2e:08:f5:48:
                    79:9e:8c:b7:7c:be:34:af:7b:57:87:3a:55:25:e9:
                    93:e8:d7:ac:33:2e:4d:47:4a:48:f9:df:95:e1:a7:
                    5a:66:e6:7a:e0:47:f0:12:5c:50:b9:17:4a:a7:57:
                    d2:8d:14:73:ce:a7:0d:cb:31:4c:d2:fd:7e:9e:55:
                    c8:82:e0:32:9f:8d:e7:b4:30:af:03:64:42:2d:3b:
                    b8:31:1b:f7:65:50:fc:c8:35:30:27:46:da:f9:65:
                    f5:38:46:4f:ec:b5:d4:ee:29:ab:21:3b:b3:3c:de:
                    03:75:0e:ae:25:ca:20:a4:eb:fe:e1:c1:42:b4:a1:
                    9c:ed:d6:27:0a:eb:f1:f5:34:7e:c3:73:fe:e1:b1:
                    ef:90:c9:1d:3f:02:88:47:c4:49:f6:1c:7e:75:e0:
                    8c:2a:ff:f4:c1:d2:4f:88:1a:fa:dc:d9:17:ef:48:
                    e7:ff:b7:08:da:94:c1:53:a1:a9:2d:f1:60:1c:72:
                    6b:f0:38:87:75:fb:42:cd:4e:f9:65:fe:97:d6:9b:
                    56:01:af:46:45:81:32:e3:01:98:10:cb:53:c0:07:
                    9f:8a:92:95:a8:9c:63:1c:27:90:5d:96:48:17:62:
                    85:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:04:96:EE:C6:EA:26:B4:C9:D7:10:7C:B7:FD:F0:7C:FC:58:8A
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:94:18:b6:68:f1:3f:05:7d:3c:66:c2:e7:82:d7:31:13:ce:
         65:ea:37:52:b7:69:65:43:6a:55:94:49:be:bf:25:27:5d:a7:
         40:36:2d:d7:37:68:75:a2:a1:cf:57:e3:2b:88:99:72:10:7f:
         c0:cc:5a:83:e1:db:f8:6f:cd:c2:88:a6:65:72:3b:f1:1f:6b:
         62:94:fd:81:2f:e1:e7:4a:fd:50:49:94:4d:d0:d3:be:fc:b1:
         c8:d4:23:1d:52:b6:84:f3:ea:ef:36:83:97:47:a2:82:8e:d1:
         3c:8e:b9:3c:ff:d4:35:e6:6e:17:21:f4:cc:7d:91:4a:7c:01:
         48:e0:97:4a:4d:b4:a0:31:bb:e8:18:f0:7d:4f:77:ec:f3:fb:
         dc:55:af:ad:16:f3:83:8d:c1:2e:d7:6b:f6:06:5b:06:4b:fa:
         e3:54:23:cf:ba:88:7e:7a:cc:e7:a2:21:e5:bb:db:be:f7:a2:
         07:4b:ef:2c:19:97:41:d7:ba:64:05:c0:0b:77:bd:8f:93:f0:
         c7:91:e6:50:09:65:0e:84:60:aa:c1:ab:69:ef:e3:8d:93:ba:
         46:28:65:10:d3:f0:ef:be:c1:50:3b:2a:c3:7e:b9:b1:af:01:
         02:56:ee:06:b5:21:fc:a1:4c:fa:d1:e0:c4:93:30:83:e6:f0:
         11:b7:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:20 2025 by rpki-client on console.sobornost.net