Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3137392e3138392e302e302f32302d3234203d3e203238333039.roa
File:                     3137392e3138392e302e302f32302d3234203d3e203238333039.roa (raw, json)
Hash identifier:          l1sdn70E8ZLAgBDfSHB5K7ILUNjNVTjytEt0di/PdJM=
Subject key identifier:   CD:19:D4:5A:BF:D8:33:44:0F:14:6E:61:80:35:0B:B1:12:D2:E2:39
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       6D2D631EF37AC572484AC3EDE21BCC1414F01E52
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3137392e3138392e302e302f32302d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:23 +0000
ROA not before:           Wed 03 Apr 2024 20:57:23 +0000
ROA not after:            Wed 02 Apr 2025 21:02:23 +0000
asID:                     28309
IP address blocks:        179.189.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2d:63:1e:f3:7a:c5:72:48:4a:c3:ed:e2:1b:cc:14:14:f0:1e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:23 2024 GMT
            Not After : Apr  2 21:02:23 2025 GMT
        Subject: CN=CD19D45ABFD833440F146E6180350BB112D2E239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:91:b9:a7:16:35:6c:cf:2f:1c:6e:53:75:
                    9b:a0:b2:ff:96:b8:07:b4:92:61:7f:8a:1e:74:7d:
                    76:b9:56:22:a4:2d:74:2c:a6:44:0a:a6:24:78:e1:
                    ad:4f:4e:e4:34:b2:72:0c:ec:65:43:b6:fb:f7:44:
                    86:c8:da:0f:ba:11:0a:cf:1f:61:89:45:9f:87:a3:
                    2f:05:11:90:a1:78:51:6a:12:a5:ff:f2:bd:2a:63:
                    70:36:55:ff:d7:0d:6f:ed:c2:c7:1b:59:00:17:3c:
                    da:4f:cc:fa:59:2b:c5:72:69:e0:e6:7f:a1:a4:78:
                    5e:de:db:97:28:c7:85:32:84:9b:9d:b3:74:83:95:
                    d6:0d:58:2c:16:d9:d2:ee:16:85:23:6a:69:c2:bc:
                    bf:17:0e:4e:44:2b:88:99:36:d9:61:fe:bd:74:44:
                    0c:1d:fe:80:e1:6a:54:69:ab:6c:b4:db:8c:b6:91:
                    1b:54:e9:74:11:31:89:a2:b9:34:30:0e:77:7c:2f:
                    19:24:15:85:74:ce:6b:51:5c:4e:e1:8a:45:e7:87:
                    a7:d1:83:aa:7b:dd:31:a5:be:96:4f:bb:bf:3e:a9:
                    ca:da:6d:60:8e:d5:bd:94:11:8c:fb:53:41:c2:98:
                    08:ef:a0:f3:4d:0e:89:a3:cb:63:a1:e7:b5:c7:1e:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:D4:5A:BF:D8:33:44:0F:14:6E:61:80:35:0B:B1:12:D2:E2:39
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3137392e3138392e302e302f32302d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:78:d5:d7:75:5f:ad:11:64:5a:31:b7:5c:b9:ed:2b:f8:
         cb:3c:f0:d4:ac:be:44:05:cc:0a:59:42:90:a4:a8:8c:f7:a0:
         ba:6b:b8:9f:b0:6e:ae:0d:64:28:e3:c5:9a:5b:82:0c:e2:b8:
         d5:88:5d:85:04:4a:66:93:55:5c:cb:1a:13:c8:bb:26:7a:73:
         3a:f5:0e:f7:fb:6c:90:c2:ec:b5:69:60:76:40:80:ac:b2:36:
         ae:52:d1:c4:aa:79:52:ef:3c:97:b1:7e:ea:c3:e9:a0:be:41:
         86:34:95:5a:97:a1:1c:06:a2:93:51:d2:09:c6:c8:dc:55:71:
         67:45:86:39:e1:a9:17:e1:9e:14:3d:4b:9e:b9:75:51:a6:5b:
         5e:a2:8e:7b:86:82:ef:12:3d:ad:d9:9f:0c:71:46:99:40:8f:
         aa:db:75:ca:c7:28:6a:4e:64:f1:13:df:87:95:44:2d:f8:3b:
         dd:b2:91:1d:43:e3:04:b8:95:9c:fa:b3:6c:7f:39:92:db:aa:
         97:1d:eb:90:86:0c:ff:8c:bb:d9:b3:c3:18:c6:7d:d5:d9:92:
         0c:27:b2:5f:4f:a2:29:98:60:cb:0e:cd:a8:0b:68:d4:04:b0:
         75:84:c2:6e:e8:4c:02:97:d3:7f:45:7a:3e:28:ad:9b:52:1d:
         fd:b1:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org