Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139302e38392e33342e302f32342d3234203d3e20323730333635.roa
File:                     3139302e38392e33342e302f32342d3234203d3e20323730333635.roa (raw, json)
Hash identifier:          Abv2oqsiXX6Nn2TTA5BkZz/kbtnySyQmx3sJulSZxGc=
Subject key identifier:   2C:94:D4:9E:46:29:60:57:DE:AD:1F:AE:9A:E8:9C:C6:59:EC:C3:EE
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       56DE4329D9B83DFA61D3D5B3EDB883B8179608FD
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139302e38392e33342e302f32342d3234203d3e20323730333635.roa
Signing time:             Thu 04 Apr 2024 06:42:24 +0000
ROA not before:           Thu 04 Apr 2024 06:37:24 +0000
ROA not after:            Thu 03 Apr 2025 06:42:24 +0000
asID:                     270365
IP address blocks:        190.89.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:de:43:29:d9:b8:3d:fa:61:d3:d5:b3:ed:b8:83:b8:17:96:08:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Apr  4 06:37:24 2024 GMT
            Not After : Apr  3 06:42:24 2025 GMT
        Subject: CN=2C94D49E46296057DEAD1FAE9AE89CC659ECC3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:e4:23:c4:ee:98:e5:b4:c4:53:cd:8c:9d:
                    e7:49:bb:16:1b:af:1b:0d:c0:ca:b6:7b:dc:d7:08:
                    49:85:93:47:a5:16:bd:05:85:a9:f9:6b:2a:45:ad:
                    db:29:3f:a1:fb:88:56:d8:f9:f2:bb:0e:c9:c8:bc:
                    e8:74:16:f0:7e:cc:b8:f8:3e:71:8a:57:ee:dc:8b:
                    0f:0c:6b:53:29:f7:3a:87:b0:b0:46:d6:30:1a:53:
                    76:6e:23:c6:a0:33:72:58:e3:79:3b:c9:e1:6d:ad:
                    ce:50:c7:40:9e:68:4a:f9:90:07:3a:b4:ba:73:f5:
                    68:28:3c:e6:0a:c2:ea:5b:c8:2d:8f:c8:7f:0e:a6:
                    43:26:de:d2:13:33:cd:8c:c4:6a:4a:96:c0:e9:0e:
                    7b:d5:b3:ac:04:ab:db:08:10:66:2e:dd:b7:45:73:
                    f0:b0:c4:cb:06:83:8a:bd:61:d0:03:17:9c:e1:8f:
                    eb:2d:d5:bd:7e:f9:87:48:7e:4d:84:48:b1:33:a1:
                    a8:2a:5f:cf:fd:d8:17:c6:5a:01:19:99:3f:60:3d:
                    35:69:e8:22:c1:c4:4c:c9:c9:65:21:a1:f4:d3:6a:
                    86:d7:59:61:e7:ad:c0:cf:c4:8a:09:5c:75:33:dc:
                    f3:c7:f9:1c:fe:18:28:ab:ad:94:06:88:de:89:6e:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:94:D4:9E:46:29:60:57:DE:AD:1F:AE:9A:E8:9C:C6:59:EC:C3:EE
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139302e38392e33342e302f32342d3234203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e8:ae:31:24:c1:d0:18:3e:63:64:b7:3b:6c:1e:92:f1:3e:
         bc:e9:6f:2c:16:27:e4:87:d7:4c:5d:17:9e:47:8d:26:a0:2c:
         5a:7f:4e:45:15:ec:8f:31:eb:81:92:3f:9f:f2:fc:af:4b:40:
         e3:26:48:0d:6a:52:f8:f2:e1:41:76:84:29:a0:2c:d9:33:05:
         ed:05:27:d8:df:c3:bb:16:8f:f0:7c:69:04:fe:d8:94:a9:7d:
         79:44:92:f9:0e:24:35:e7:11:bc:7e:32:1c:29:35:93:46:d8:
         25:5e:b4:41:68:a1:44:2f:d0:b7:bb:3e:f2:ee:76:86:3a:d6:
         0a:d5:78:75:45:a5:8a:17:df:ae:42:bd:2b:48:2f:b1:76:ec:
         4b:e7:62:4f:1e:dd:cf:86:6a:12:f3:05:0b:8c:c8:07:1b:5b:
         6e:a6:ae:91:57:ba:6e:ee:9a:16:5f:04:fa:f8:b8:ac:3b:64:
         ab:22:cd:ae:96:53:05:8e:9e:6a:cd:0f:69:f6:91:51:c6:e9:
         b9:04:40:f3:b3:33:0d:be:75:39:29:f6:cc:31:b4:17:90:25:
         0a:dd:57:6c:94:3c:d8:b7:84:77:69:fb:f6:23:79:fa:0c:69:
         a2:d0:a6:6d:41:75:7a:f4:18:90:50:a1:26:3c:1c:cb:b3:ff:
         49:8f:a3:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVt5DKdm4Pfph09Wz7biDuBeWCP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQ0I3RDcxMThERTlBOEVGNTk2QjMxN0UwNUYxQUJF
MzY0NjZGMTAeFw0yNDA0MDQwNjM3MjRaFw0yNTA0MDMwNjQyMjRaMDMxMTAvBgNV
BAMTKDJDOTRENDlFNDYyOTYwNTdERUFEMUZBRTlBRTg5Q0M2NTlFQ0MzRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDglOQjxO6Y5bTEU82MnedJuxYb
rxsNwMq2e9zXCEmFk0elFr0Fhan5aypFrdspP6H7iFbY+fK7DsnIvOh0FvB+zLj4
PnGKV+7ciw8Ma1Mp9zqHsLBG1jAaU3ZuI8agM3JY43k7yeFtrc5Qx0CeaEr5kAc6
tLpz9WgoPOYKwupbyC2PyH8OpkMm3tITM82MxGpKlsDpDnvVs6wEq9sIEGYu3bdF
c/CwxMsGg4q9YdADF5zhj+st1b1++YdIfk2ESLEzoagqX8/92BfGWgEZmT9gPTVp
6CLBxEzJyWUhofTTaobXWWHnrcDPxIoJXHUz3PPH+Rz+GCirrZQGiN6JbqH5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULJTUnkYpYFferR+umuicxlnsw+4wHwYDVR0j
BBgwFoAU7Ly31xGN6ajvWWsxfgXxq+NkZvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFydWdwTnZSNEdXdEI3UDlUTEQ5c3M0SG1kM2lXRHZONlg3Q3pHUnA2
U3kvMS9FQ0JDQjdENzExOERFOUE4RUY1OTZCMzE3RTA1RjFBQkUzNjQ2NkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDQkNCN0Q3MTE4REU5QThF
RjU5NkIzMTdFMDVGMUFCRTM2NDY2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxcnVncE52UjRHV3RCN1A5VExEOXNzNEhtZDNpV0R2TjZYN0N6R1JwNlN5LzEv
MzEzOTMwMmUzODM5MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvlkiMA0GCSqGSIb3DQEBCwUAA4IBAQCr6K4xJMHQ
GD5jZLc7bB6S8T686W8sFifkh9dMXReeR40moCxaf05FFeyPMeuBkj+f8vyvS0Dj
JkgNalL48uFBdoQpoCzZMwXtBSfY38O7Fo/wfGkE/tiUqX15RJL5DiQ15xG8fjIc
KTWTRtglXrRBaKFEL9C3uz7y7naGOtYK1Xh1RaWKF9+uQr0rSC+xduxL52JPHt3P
hmoS8wULjMgHG1tupq6RV7pu7poWXwT6+LisO2SrIs2ullMFjp5qzQ9p9pFRxum5
BEDzszMNvnU5KfbMMbQXkCUK3VdslDzYt4R3afv2I3n6DGmi0KZtQXV69BiQUKEm
PBzLs/9Jj6PS
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:10 2024 by rpki-client on console-ams.rpki-client.org