Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36342e302f32302d3230203d3e203238333039.roa
File:                     3138372e34342e36342e302f32302d3230203d3e203238333039.roa (raw, json)
Hash identifier:          6kr6DX7LHq4R1nc1k8uEDaEVZc3vXQu27Q63pVv3TgE=
Subject key identifier:   E3:21:85:07:5D:EA:0D:81:FC:A7:C9:3C:CB:FC:BF:56:50:14:B6:B2
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       1FC47323801CEA6008F5DAE4D62E14FE66889C07
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36342e302f32302d3230203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:22 +0000
ROA not before:           Wed 03 Apr 2024 20:57:22 +0000
ROA not after:            Wed 02 Apr 2025 21:02:22 +0000
asID:                     28309
IP address blocks:        187.44.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c4:73:23:80:1c:ea:60:08:f5:da:e4:d6:2e:14:fe:66:88:9c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:22 2024 GMT
            Not After : Apr  2 21:02:22 2025 GMT
        Subject: CN=E32185075DEA0D81FCA7C93CCBFCBF565014B6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:08:76:a4:a8:a3:12:66:52:2a:78:05:31:
                    6f:93:40:c1:a3:56:47:fb:11:62:c5:98:b0:2c:04:
                    eb:ff:80:54:b7:fd:dd:33:3f:32:e6:97:fe:bc:27:
                    1d:cc:a3:8b:ff:c3:68:46:25:e0:3d:93:91:f2:1b:
                    34:c1:a6:91:bc:cc:0c:b7:d6:6d:db:8c:38:d3:5c:
                    e6:d5:0b:8c:3a:5a:27:a2:4b:75:a8:84:95:83:e0:
                    81:3b:43:2f:db:e5:70:76:f2:ac:9a:be:b1:25:64:
                    c1:70:e2:05:e8:26:15:74:9a:b3:3e:24:9b:fd:48:
                    3a:de:55:19:88:05:c3:6c:9f:8f:c4:9f:91:51:41:
                    aa:6e:13:0f:6a:a2:38:e8:2f:2b:c3:1f:64:bf:9f:
                    55:8b:ce:39:78:48:0e:7b:83:f6:8f:6d:87:a9:dd:
                    39:7c:cc:89:5c:1c:0e:3c:61:01:ee:e6:73:f3:73:
                    31:e3:7c:13:34:7c:23:5c:26:ca:47:6c:d0:db:63:
                    77:d1:91:d4:70:ae:36:e5:5f:06:d9:b2:91:44:12:
                    16:7f:5d:cf:4c:a6:10:a9:b9:a9:00:ba:86:03:54:
                    03:dd:6b:a2:d7:a1:83:22:93:72:90:1d:8a:ed:de:
                    56:b2:a1:1c:12:05:15:f7:ce:f5:62:87:e1:64:d7:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:85:07:5D:EA:0D:81:FC:A7:C9:3C:CB:FC:BF:56:50:14:B6:B2
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36342e302f32302d3230203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:af:c0:89:e8:3c:e8:c2:ed:aa:eb:1e:09:c2:1c:96:61:bc:
         96:6d:ac:a1:a4:02:89:ea:8d:dc:30:1d:c6:5e:2c:24:e9:4f:
         ea:a2:b6:38:63:08:fd:ab:89:57:b3:9c:03:18:41:ea:a8:22:
         81:29:04:17:cd:36:44:5f:31:95:52:89:06:32:0e:5c:87:81:
         25:94:a9:1b:40:30:12:3f:25:aa:67:ed:6a:72:6f:b0:cb:a4:
         3d:3e:94:02:94:ff:58:0e:60:b8:be:e7:63:fc:13:75:ef:84:
         8b:f4:92:1a:63:6d:9c:f5:c7:a6:f8:0e:44:70:99:66:5b:01:
         a7:bf:d8:81:f6:68:53:97:81:0d:ac:54:4f:5a:9b:58:34:bd:
         ff:90:cf:04:80:74:0c:24:2e:85:3a:ba:13:03:7e:61:d5:ae:
         bc:57:c2:81:ce:c6:7e:f2:99:51:06:83:98:9a:d6:fc:2b:74:
         55:17:a3:9c:c7:4d:ff:07:98:53:ed:b9:7e:f9:3f:6c:7e:fb:
         fc:31:79:f8:1a:b0:90:af:84:bc:d2:af:41:3b:e0:f4:26:6d:
         5f:7b:9d:61:46:06:81:50:10:ce:a3:db:e3:49:c4:d2:e2:4b:
         44:62:fa:29:52:b3:ac:08:c1:8f:48:cc:4b:67:6f:4c:ee:58:
         0b:56:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org