Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36362e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e36362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          mD10h4upirLTnq6b1XnrmQfeQdbGIIv2CRixgaaM4B4=
Subject key identifier:   7D:D6:2C:5C:1F:74:2B:C7:15:F4:BE:1F:D1:0D:FC:92:35:A7:7F:45
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       11FEFBC0F45279C2EE2F6ABBEEBFD569F8B65A8D
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36362e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:19 +0000
ROA not before:           Wed 03 Apr 2024 20:57:19 +0000
ROA not after:            Wed 02 Apr 2025 21:02:19 +0000
asID:                     28309
IP address blocks:        187.44.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fe:fb:c0:f4:52:79:c2:ee:2f:6a:bb:ee:bf:d5:69:f8:b6:5a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:19 2024 GMT
            Not After : Apr  2 21:02:19 2025 GMT
        Subject: CN=7DD62C5C1F742BC715F4BE1FD10DFC9235A77F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:e9:44:02:78:5d:90:a6:14:c9:37:3c:cd:
                    79:ee:73:9c:42:81:a7:95:90:25:ac:18:20:5f:f6:
                    ed:8a:d2:49:96:e3:fb:cb:ad:83:e7:1e:89:00:3e:
                    fb:9f:51:a8:17:18:22:19:10:5c:ea:2d:cc:87:7f:
                    5d:01:93:17:9f:d7:a2:af:5d:89:9c:f6:a8:20:c0:
                    ac:dd:af:f9:f9:53:4a:db:c5:74:a4:a7:0f:d3:39:
                    f8:3d:05:03:7e:9d:07:f9:89:54:96:cc:45:c4:6f:
                    2c:d9:32:6a:c6:85:6c:fd:9d:f0:60:21:76:70:70:
                    ad:a0:92:75:c2:2f:ea:c2:0c:0e:f0:18:11:0a:7b:
                    31:58:b9:3b:e7:7a:3e:27:3a:8e:4c:25:c7:22:75:
                    1a:c3:39:b2:a5:7e:45:d9:70:45:ba:72:f4:9a:e3:
                    e0:98:6f:26:d1:b2:95:70:94:4e:8c:01:04:ac:a7:
                    f1:80:09:8b:d0:ff:df:30:33:03:9c:c5:62:7a:01:
                    74:6e:72:e1:a0:55:22:c7:8a:20:87:ea:c5:3e:81:
                    4f:91:3d:d3:44:8b:7b:6e:66:52:bc:b9:4d:8a:fc:
                    b6:11:09:3b:e0:d8:5f:46:81:e6:40:02:b7:b0:a7:
                    0c:35:7a:4f:52:d4:7a:0e:a9:ec:f3:a8:00:9d:77:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:2C:5C:1F:74:2B:C7:15:F4:BE:1F:D1:0D:FC:92:35:A7:7F:45
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:53:fd:21:34:d8:21:0c:a4:01:c1:c5:42:a1:24:90:af:
         1e:ab:9c:18:87:96:bb:c4:d2:f9:79:70:27:ae:44:16:ce:6e:
         d6:5e:d3:d5:bd:ee:35:8c:11:3e:70:48:e2:48:26:ea:f1:fe:
         ad:b2:b1:1f:78:08:d8:4c:50:8f:7e:2e:b1:f1:39:c4:4e:41:
         dc:be:35:1b:e9:3a:8c:92:29:90:0b:c6:c4:e6:cf:35:fd:6e:
         3d:f6:61:f8:eb:60:e9:4b:00:83:39:cf:04:46:ee:67:e4:a3:
         6f:5a:dc:5a:55:63:c6:39:a8:01:0d:20:f7:33:a3:aa:9d:d1:
         c3:58:48:fa:51:fd:6a:e0:1a:c6:f8:09:e0:dd:54:da:28:07:
         3b:4e:19:9b:46:59:5b:95:c8:9e:d6:6a:aa:47:b0:c3:df:24:
         10:67:f0:62:b5:6e:b0:c8:2d:84:ab:fe:ae:03:e2:de:d9:f4:
         3e:3b:84:92:e1:6e:19:49:78:7a:55:a0:d7:38:4b:50:85:1c:
         4c:8d:d1:78:04:83:84:71:16:9d:51:19:3a:89:02:24:dd:76:
         11:ec:63:41:47:b5:e4:2e:fc:8e:cd:75:d7:ef:fa:74:fc:6a:
         f2:82:57:ec:40:49:e5:d9:44:ae:84:f8:25:e5:09:09:2d:83:
         b2:f1:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:59 2024 by rpki-client on console-fra.rpki-client.org