Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a3a2f33322d3332203d3e20323730333635.roa
File:                     323830343a366165383a3a2f33322d3332203d3e20323730333635.roa (raw, json)
Hash identifier:          g8iaC5IwJXsqxj7chEHOHEt5yF5cMV3akMgC0+nbHyk=
Subject key identifier:   5E:80:92:C0:F7:D0:75:28:75:BA:ED:8A:D2:04:47:53:C5:F2:6F:74
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       1CD040792566C63D0D7AFEE23509358123F7F50A
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a3a2f33322d3332203d3e20323730333635.roa
Signing time:             Thu 06 Mar 2025 06:52:46 +0000
ROA not before:           Thu 06 Mar 2025 06:47:46 +0000
ROA not after:            Thu 05 Mar 2026 06:52:46 +0000
asID:                     270365
IP address blocks:        2804:6ae8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d0:40:79:25:66:c6:3d:0d:7a:fe:e2:35:09:35:81:23:f7:f5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Mar  6 06:47:46 2025 GMT
            Not After : Mar  5 06:52:46 2026 GMT
        Subject: CN=5E8092C0F7D0752875BAED8AD2044753C5F26F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:78:55:bd:51:b6:cd:b7:34:6a:ad:f9:f9:
                    72:a5:55:b0:a0:ee:3a:4b:b5:04:78:40:80:9a:52:
                    12:94:ea:97:30:13:2b:47:af:45:8f:5b:85:b7:c7:
                    d7:b3:7c:d8:1a:9d:ae:fc:7f:19:ce:61:29:d8:47:
                    80:f3:22:d6:36:11:e5:58:69:ab:63:12:61:c2:3b:
                    df:0f:4b:a2:70:16:e0:85:4f:ad:59:59:ec:c0:c1:
                    ec:64:d5:bd:1f:77:dc:58:27:68:03:83:00:39:98:
                    dc:11:cb:60:99:ae:0b:d4:c9:57:a6:26:29:cd:05:
                    bb:78:64:13:7d:02:71:87:fa:30:03:46:df:9d:7e:
                    04:ef:a9:79:f6:95:78:b7:b1:40:6b:48:57:c1:a9:
                    e6:a0:de:81:3e:d6:a3:0f:42:fd:0f:e1:1c:36:e6:
                    bf:3c:c7:4f:37:7e:35:07:aa:d3:8c:1d:f1:1b:ca:
                    d2:6e:9d:d0:6f:d4:f2:12:18:4c:15:fa:9b:5c:54:
                    37:a2:53:0a:eb:e2:bc:8a:3d:10:d1:be:87:88:63:
                    1a:d5:02:7f:7d:15:80:48:a1:e6:d8:27:23:3a:b1:
                    b3:8a:f1:67:e9:48:11:6c:62:5b:c1:a7:96:8e:b7:
                    ac:ba:d1:32:46:d6:a2:a8:3e:ac:99:af:ba:34:1a:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:80:92:C0:F7:D0:75:28:75:BA:ED:8A:D2:04:47:53:C5:F2:6F:74
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/323830343a366165383a3a2f33322d3332203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ae8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:c2:f3:e0:c3:56:a8:08:26:49:23:27:7b:55:c1:62:16:
         07:96:6e:09:5c:de:3f:ab:e9:6c:a2:a0:37:65:f3:ee:a0:16:
         f1:75:fd:a6:e5:a6:fb:5c:34:7c:6a:72:cb:fb:27:1d:9c:3a:
         0c:97:f9:f4:31:d9:d1:58:7e:5f:f8:15:92:4f:eb:b6:be:a3:
         01:c8:77:33:9c:f5:af:38:b8:1f:e4:d4:1b:d5:9d:66:cf:37:
         d2:02:54:20:6c:25:52:6a:e2:3b:9a:8f:55:b9:ce:b7:26:5c:
         bb:19:cc:69:59:af:21:93:5d:cf:df:7e:c8:23:92:04:0e:a7:
         19:ea:f6:49:d1:f6:a9:08:5d:b6:66:38:7c:d8:c4:b2:ba:a5:
         06:a7:71:52:94:df:c5:b3:16:dc:b6:59:d4:e4:3c:4f:81:b3:
         b6:85:7e:4f:6e:f0:6a:74:1e:32:0e:93:5b:97:62:0e:16:e5:
         6c:d1:56:d0:73:a0:16:33:a7:e9:b2:45:e3:32:f9:47:03:97:
         cb:d5:04:88:69:1a:eb:23:fb:c5:58:ed:93:c7:5c:a2:dc:ab:
         de:7a:e5:61:9b:f4:d3:98:92:3e:b3:3b:1c:b5:b9:4b:86:e3:
         2a:36:6d:8d:dc:8d:c5:7d:c4:f0:b3:c1:ac:36:37:db:01:6e:
         51:94:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:05 2025 by rpki-client