Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa
File:                     3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa (raw, json)
Hash identifier:          EpOMEUmUld0qqBrmaSr+kQCzDIYoGvYL0Ul22h7pbL8=
Subject key identifier:   6B:1B:7C:53:53:BC:B0:85:A7:97:AC:B9:25:40:1A:FD:1B:F1:53:B8
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       30BADADC225E562C82B6BDCC1989150AD75EFE55
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa
Signing time:             Thu 05 Mar 2026 14:07:27 +0000
ROA not before:           Thu 05 Mar 2026 14:02:27 +0000
ROA not after:            Thu 04 Mar 2027 14:07:27 +0000
asID:                     270690
IP address blocks:        190.120.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 04:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ba:da:dc:22:5e:56:2c:82:b6:bd:cc:19:89:15:0a:d7:5e:fe:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Mar  5 14:02:27 2026 GMT
            Not After : Mar  4 14:07:27 2027 GMT
        Subject: CN=6B1B7C5353BCB085A797ACB925401AFD1BF153B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1c:38:a4:7a:a9:1f:b5:68:f2:23:2d:43:23:
                    26:69:81:9a:43:8e:46:24:7b:ea:16:d3:87:a3:90:
                    a0:5f:66:4a:c9:b6:88:4c:31:98:ff:72:1c:0a:58:
                    11:d0:5b:e1:e5:56:69:eb:c6:99:9a:53:29:67:42:
                    99:a9:12:57:72:9b:53:4d:82:50:5f:92:42:a3:d2:
                    3e:4a:4f:46:d0:14:5c:ff:61:62:bb:d3:a4:f5:36:
                    67:f2:6e:d9:65:00:83:b6:ee:b9:6e:7b:3c:ae:55:
                    3a:cf:58:69:af:00:33:cb:9a:00:4f:4f:42:a3:c7:
                    e8:1a:1c:85:93:fd:51:1a:73:90:f8:69:d1:f9:4f:
                    78:e0:fe:8d:07:d6:00:19:75:83:11:b2:0a:d3:d2:
                    05:fd:d2:e6:ff:6f:30:60:f5:10:5e:0c:96:c2:36:
                    d3:85:ab:59:40:8c:54:87:4b:2f:55:dc:ad:53:79:
                    73:74:f1:db:5c:2f:8c:b5:4b:71:3c:13:0b:2d:41:
                    85:f7:15:14:3d:0c:4a:fa:53:3c:ab:3b:22:92:75:
                    8b:41:39:9b:5f:23:db:f5:4a:ba:d7:73:fe:dd:88:
                    85:9b:0f:c9:76:0b:f4:82:06:21:74:8a:1f:0c:71:
                    fc:a1:da:a3:49:0f:fa:7b:c0:26:55:e8:db:3a:ea:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1B:7C:53:53:BC:B0:85:A7:97:AC:B9:25:40:1A:FD:1B:F1:53:B8
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33342e302f32342d3234203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:df:1b:75:88:dd:af:eb:bf:66:ce:3a:0f:3c:2e:2a:b1:66:
         34:b6:78:85:3d:15:27:97:b0:b8:77:a0:4b:e7:4f:88:7a:11:
         37:2f:02:64:db:ea:15:eb:0c:8b:3c:40:4a:55:18:81:e6:d9:
         4b:fb:af:b1:6b:08:d1:6b:94:83:d6:0a:a2:e5:72:08:39:d8:
         6c:f7:a4:73:43:a6:5c:0d:15:90:96:38:97:00:94:2c:33:f0:
         c6:34:2d:37:96:1e:84:70:48:2d:b8:de:cd:78:b0:35:0c:26:
         34:04:0a:b9:c5:3d:4f:a8:3d:40:75:e2:ab:8b:50:90:f6:a8:
         a0:ff:6e:ee:bb:b0:6d:27:dc:fa:ab:24:01:6d:f0:62:bd:e0:
         6b:6a:4e:d0:70:a4:88:a2:de:4e:29:85:f6:be:15:1a:0f:e1:
         1a:bb:7f:d6:91:06:c2:22:be:fe:a3:41:fa:04:a3:01:be:ae:
         d2:f1:5c:8b:94:17:7c:cb:87:42:f1:83:a0:e7:85:ea:47:52:
         46:12:c4:4e:53:f7:24:9b:89:0f:a0:6e:d0:b2:02:d9:26:56:
         12:b5:9e:66:1a:81:5c:a9:d9:4b:da:c6:dc:23:69:16:e7:c6:
         73:fb:bf:ae:5f:db:97:5a:27:a5:92:83:75:8a:2e:86:41:fd:
         76:28:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:34:14 2026 by rpki-client