Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139312e3132382e3234382e302f32342d3332203d3e20323730333635.roa
File:                     3139312e3132382e3234382e302f32342d3332203d3e20323730333635.roa (raw, json)
Hash identifier:          ZL58v+tnK8pZApmHd1TvaSbqFMkkOkn4yozzqmPajbQ=
Subject key identifier:   A6:8E:0C:ED:C1:2D:0C:F6:59:5D:E2:59:0D:F8:36:50:BC:0A:97:E6
Certificate issuer:       /CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
Certificate serial:       747B3F5284204B3063239E99D74FEC3F4B39376E
Authority key identifier: EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139312e3132382e3234382e302f32342d3332203d3e20323730333635.roa
Signing time:             Mon 01 Jun 2026 16:14:31 +0000
ROA not before:           Mon 01 Jun 2026 16:09:31 +0000
ROA not after:            Mon 31 May 2027 16:14:31 +0000
asID:                     270365
IP address blocks:        191.128.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl
                          rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7b:3f:52:84:20:4b:30:63:23:9e:99:d7:4f:ec:3f:4b:39:37:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1
        Validity
            Not Before: Jun  1 16:09:31 2026 GMT
            Not After : May 31 16:14:31 2027 GMT
        Subject: CN=A68E0CEDC12D0CF6595DE2590DF83650BC0A97E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d4:e0:73:6d:57:00:cc:b4:0f:a1:73:fd:26:
                    0b:ef:d7:fa:2a:57:ca:c7:dd:03:47:89:e7:46:f5:
                    b7:10:90:aa:59:d8:d8:7c:b4:5d:88:0e:64:9e:d9:
                    54:34:33:8c:30:2c:cd:03:fa:d6:f4:78:bb:f0:4e:
                    df:79:4a:25:bb:c7:15:ad:df:54:7c:73:26:ba:45:
                    c3:55:ce:c4:bd:7a:ee:b1:9c:c5:36:ce:b6:94:b4:
                    1d:2e:72:b1:c0:9d:ac:ef:1d:61:ac:fe:b7:e5:49:
                    5a:49:07:c3:79:f4:41:5f:7c:e3:75:ea:16:63:17:
                    4d:c7:dc:65:c8:39:96:79:f4:81:95:18:c0:fd:36:
                    b5:bf:d6:43:c7:e1:be:66:74:69:0a:f3:d5:7f:75:
                    00:f8:5d:c2:43:e0:2e:6a:28:ce:20:a6:68:82:3c:
                    9a:09:74:27:43:97:1f:e6:b9:f2:d2:0d:6d:6c:ae:
                    80:dd:c6:b3:21:4e:c9:0e:4c:35:48:4b:da:dd:68:
                    57:38:17:c0:5f:19:70:7c:60:0b:a1:36:77:3c:9b:
                    8b:c3:42:77:a5:25:86:9c:dd:a5:e8:75:78:f4:ad:
                    4a:57:05:88:a3:fd:e2:c0:95:0b:29:ad:5b:c2:c8:
                    b2:ab:e7:57:20:9a:5e:f4:be:de:38:46:f7:2a:15:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8E:0C:ED:C1:2D:0C:F6:59:5D:E2:59:0D:F8:36:50:BC:0A:97:E6
            X509v3 Authority Key Identifier:
                keyid:EC:BC:B7:D7:11:8D:E9:A8:EF:59:6B:31:7E:05:F1:AB:E3:64:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECBCB7D7118DE9A8EF596B317E05F1ABE36466F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqrugpNvR4GWtB7P9TLD9ss4Hmd3iWDvN6X7CzGRp6Sy/1/3139312e3132382e3234382e302f32342d3332203d3e20323730333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.128.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:59:9a:cf:21:b3:b6:03:89:97:f3:65:0c:9a:6f:1c:8b:
         0e:eb:14:fd:4e:ba:80:aa:5a:bf:fc:2c:53:45:dc:26:b1:80:
         a1:1b:05:6d:65:45:02:c3:fb:ab:0e:85:d7:2f:cd:c1:53:e0:
         5f:bb:30:7d:40:f3:92:7a:cc:40:6e:66:86:0c:50:e2:e4:8c:
         0f:7d:c2:48:29:f4:f6:6a:3d:73:d1:7a:7e:48:a6:36:e7:54:
         ab:20:4b:bc:9c:b0:9d:b2:a7:72:e3:fc:2f:3f:a6:88:cd:ba:
         59:73:22:5a:0c:2f:2b:36:e9:ee:4b:fe:ce:98:6f:7a:18:cf:
         03:5e:03:6b:31:c3:c7:fd:23:df:c5:7e:c2:b3:3b:5d:08:bc:
         9b:2d:90:b4:45:0b:0c:bd:4c:b9:bf:fe:c3:f7:d1:91:dd:2c:
         31:12:11:0c:8b:a5:8b:32:d9:64:b1:02:7d:59:77:3c:06:a9:
         c5:c3:b3:99:18:33:c2:41:4a:aa:c1:63:d4:76:b3:63:ea:bc:
         95:0f:5e:aa:2c:b7:cb:df:db:d7:cc:36:14:2f:6e:95:2a:f7:
         1a:c7:64:e6:1a:61:13:e4:7d:d1:88:58:5e:b8:b7:5b:7e:89:
         3c:44:6a:74:53:54:f6:4d:9b:5e:af:ad:55:17:c2:a2:92:f5:
         74:60:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:01:35 2026 by rpki-client