Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139302e38392e33342e302f32342d3234203d3e20323730333635.roa
File:                     3139302e38392e33342e302f32342d3234203d3e20323730333635.roa (raw, json)
Hash identifier:          KvuzlUZ7nQOW0EVQMfCKOKp5x1yIS2D+Co4jzNj4CJc=
Subject key identifier:   C2:91:D1:73:94:F1:03:85:F6:5D:B5:61:44:8C:E4:FB:54:50:61:D0
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       028C2E91F91A88FDB23FCFE24545B0AA683275BF
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139302e38392e33342e302f32342d3234203d3e20323730333635.roa
Signing time:             Thu 06 Mar 2025 06:52:46 +0000
ROA not before:           Thu 06 Mar 2025 06:47:46 +0000
ROA not after:            Thu 05 Mar 2026 06:52:46 +0000
asID:                     270365
IP address blocks:        190.89.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8c:2e:91:f9:1a:88:fd:b2:3f:cf:e2:45:45:b0:aa:68:32:75:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Mar  6 06:47:46 2025 GMT
            Not After : Mar  5 06:52:46 2026 GMT
        Subject: CN=C291D17394F10385F65DB561448CE4FB545061D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:7a:f3:31:21:58:b3:48:31:0d:19:2b:1c:
                    fa:56:bb:32:d9:1e:b2:d5:53:0a:d6:9b:71:80:60:
                    c4:a2:47:49:91:8c:c5:4f:3b:64:3d:43:48:ed:ff:
                    a7:4e:80:d7:d1:4e:5f:a0:7f:2c:ba:f4:60:06:ab:
                    43:fc:9d:5f:05:9a:c6:ae:d0:6f:c2:e6:4b:cf:3f:
                    a2:78:39:16:fd:2d:27:4c:8f:ad:1f:eb:80:d7:8d:
                    34:55:84:2b:b7:03:7f:6b:4b:01:72:36:b5:fc:80:
                    94:0b:18:7a:8d:13:27:7f:3c:44:0f:10:e9:3c:df:
                    91:c4:9b:09:bb:9d:0d:55:b0:7a:34:45:fd:00:20:
                    3e:54:11:3b:b9:f0:f7:cb:fc:82:c7:63:fe:3d:65:
                    c8:28:24:4b:1d:ca:89:6c:9d:af:c2:c2:38:17:9c:
                    4c:95:dd:6a:52:ce:7f:cd:77:8c:d4:91:34:37:8a:
                    a7:79:33:63:c7:07:fb:29:ff:17:f2:48:92:e5:77:
                    38:ec:81:f6:8a:c1:91:32:e3:2b:06:99:c8:39:ad:
                    23:c9:b4:b6:37:aa:a7:ef:64:a4:f7:17:bd:d3:20:
                    c9:1f:79:65:0f:12:ea:09:4f:de:38:68:2b:33:62:
                    79:83:b5:87:37:09:6a:ce:b9:e1:d0:ff:14:d6:02:
                    c9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:91:D1:73:94:F1:03:85:F6:5D:B5:61:44:8C:E4:FB:54:50:61:D0
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139302e38392e33342e302f32342d3234203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:13:2a:f9:11:63:95:28:62:cb:30:05:4d:be:3f:73:60:34:
         49:b1:e4:12:6e:f9:01:10:c7:fe:1a:1e:ad:48:04:5e:6e:07:
         1e:31:43:c3:b2:bf:9e:db:b2:11:eb:c7:f0:df:23:ef:42:5f:
         0b:6d:63:87:b2:42:a7:e7:20:50:0e:ef:b2:8b:1b:72:70:e6:
         5f:6b:7b:0b:a6:06:5d:76:57:a2:0d:a6:b5:9f:44:86:63:3e:
         fc:56:28:5d:8a:59:86:b5:24:c0:fc:43:41:75:f4:b7:7a:28:
         6d:5e:98:be:81:80:74:a0:c3:30:72:c7:57:06:0b:e8:68:55:
         32:e6:13:7a:60:91:04:94:f1:00:7e:5a:c1:78:85:55:e2:0c:
         eb:1e:69:8a:f3:09:24:e9:e2:cf:24:4a:bf:df:98:66:f4:58:
         6f:9e:f5:1b:b0:27:b5:aa:f3:8e:f5:cf:dc:90:57:9b:5a:04:
         a8:8a:f3:0b:81:dc:1d:65:1c:95:da:61:62:71:58:de:bf:f3:
         35:61:70:f1:89:3f:67:f8:a9:e3:7c:5c:32:90:47:ea:16:a2:
         6a:7b:56:2d:73:f3:fe:80:12:7d:ee:73:22:28:11:0e:49:3e:
         d3:34:d5:fd:62:bb:07:8f:2d:d3:f5:0e:86:51:8d:6c:11:dd:
         71:02:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:53 2025 by rpki-client