Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36362e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e36362e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          AwwSQ/Vpia8cQuJWbbLO/sCAQc4jtiTmeEdFc3zSrn8=
Subject key identifier:   CA:9A:83:06:B3:8C:42:9D:86:40:28:8E:BC:97:59:DB:57:40:66:99
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       69EEDD5D494A7AFF0460CDAAED5A9C19412CEF43
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36362e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:21 +0000
ROA not before:           Wed 03 Apr 2024 20:57:21 +0000
ROA not after:            Wed 02 Apr 2025 21:02:21 +0000
asID:                     28309
IP address blocks:        187.44.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ee:dd:5d:49:4a:7a:ff:04:60:cd:aa:ed:5a:9c:19:41:2c:ef:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:21 2024 GMT
            Not After : Apr  2 21:02:21 2025 GMT
        Subject: CN=CA9A8306B38C429D8640288EBC9759DB57406699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:d4:00:2f:93:c7:f7:d7:93:d9:63:b9:a8:
                    82:20:76:b0:70:48:b6:02:3f:d9:13:15:80:a5:c9:
                    c1:48:4f:02:85:aa:df:34:a8:1f:f6:0b:53:18:8b:
                    a3:3e:49:8e:87:7e:12:f2:2f:ca:36:b6:e0:77:d0:
                    cb:e1:02:f5:f6:17:7b:51:9f:ab:a5:88:f8:6d:6e:
                    69:10:a9:2d:82:10:cc:58:6a:b8:e3:e8:43:a3:c6:
                    60:7d:6c:40:cb:68:c6:45:bd:7e:d0:b8:5b:44:51:
                    c5:6d:a2:85:b9:f9:53:2e:c3:fe:25:4c:e1:44:86:
                    2d:19:42:4a:1e:a5:f4:63:88:66:b6:60:6d:21:b5:
                    1f:5c:7c:bc:44:61:ad:ae:2f:3a:45:7f:a9:67:49:
                    3d:92:62:d3:33:0d:e2:c4:e7:4e:d9:30:c4:f0:25:
                    cd:87:e6:57:11:52:26:6a:ba:53:98:50:bc:8b:d7:
                    b6:04:d3:4b:03:d5:f6:07:37:0e:6b:e9:27:0b:ba:
                    17:6b:39:fe:f3:9d:bd:c4:4f:cf:c8:0d:e7:b7:31:
                    18:71:87:21:e8:58:8e:a4:f1:82:60:27:ab:a1:3c:
                    48:34:7d:c1:4e:91:31:9d:4e:c4:49:06:2b:ad:b0:
                    a1:db:e0:79:d8:0d:38:3c:4f:fd:2d:6b:8a:c2:db:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9A:83:06:B3:8C:42:9D:86:40:28:8E:BC:97:59:DB:57:40:66:99
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36362e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:55:45:14:78:ac:15:52:0f:3e:a6:05:ad:f6:6c:82:f1:e6:
         12:a2:36:21:5b:31:09:cc:17:8d:c2:8b:a6:45:b2:fd:8e:35:
         22:7d:7e:4a:c6:13:ab:c7:43:cc:ab:0b:b1:01:30:08:31:c8:
         27:08:01:e9:11:99:6c:95:55:77:11:5a:e4:f4:f9:20:01:8a:
         06:7e:7d:2b:4e:59:9b:94:aa:46:9f:72:3d:1a:df:71:47:1e:
         e6:31:c1:cf:97:34:0d:c3:b2:e7:f2:e9:ef:ad:ec:2b:6d:f0:
         98:18:4c:f4:bc:67:3a:c1:2e:bf:8a:a8:3d:dd:b8:30:79:b8:
         b4:1b:bc:4b:44:d1:4b:c3:7f:12:88:c6:23:66:b5:fa:ab:c3:
         4a:0f:42:4e:32:3d:3c:30:fb:ba:7b:0d:83:8f:85:7c:bd:51:
         63:c4:00:e9:e5:ec:32:02:62:e1:34:1d:a6:d2:26:a3:80:46:
         7a:2b:f0:11:0c:45:9b:79:7e:9d:24:65:90:4e:40:6a:16:5e:
         65:89:0d:c5:64:bc:b6:89:16:a1:1b:b0:80:8c:aa:f5:e8:27:
         4b:5a:a1:8b:de:6c:7f:26:cc:00:18:9c:40:40:07:82:ed:09:
         47:a4:78:f1:10:e7:73:57:73:1b:b9:b5:f0:8f:34:00:c7:1a:
         bf:e2:fb:2c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUae7dXUlKev8EYM2q7VqcGUEs70MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRTkxRjQwNTIxNjRGNUE4NTU0MTY1Mzg5MzdCRkI3
NTkwNzhFMDAeFw0yNDA0MDMyMDU3MjFaFw0yNTA0MDIyMTAyMjFaMDMxMTAvBgNV
BAMTKENBOUE4MzA2QjM4QzQyOUQ4NjQwMjg4RUJDOTc1OURCNTc0MDY2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkB9QAL5PH99eT2WO5qIIgdrBw
SLYCP9kTFYClycFITwKFqt80qB/2C1MYi6M+SY6HfhLyL8o2tuB30MvhAvX2F3tR
n6uliPhtbmkQqS2CEMxYarjj6EOjxmB9bEDLaMZFvX7QuFtEUcVtooW5+VMuw/4l
TOFEhi0ZQkoepfRjiGa2YG0htR9cfLxEYa2uLzpFf6lnST2SYtMzDeLE507ZMMTw
Jc2H5lcRUiZqulOYULyL17YE00sD1fYHNw5r6ScLuhdrOf7znb3ET8/IDee3MRhx
hyHoWI6k8YJgJ6uhPEg0fcFOkTGdTsRJBiutsKHb4HnYDTg8T/0ta4rC26j/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUypqDBrOMQp2GQCiOvJdZ21dAZpkwHwYDVR0j
BBgwFoAUnb6R9AUhZPWoVUFlOJN7+3WQeOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMS85REJFOTFGNDA1MjE2NEY1QTg1NTQxNjUzODkzN0JGQjc1OTA3OEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQkU5MUY0MDUyMTY0RjVB
ODU1NDE2NTM4OTM3QkZCNzU5MDc4RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzEv
MzEzODM3MmUzNDM0MmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALssQjANBgkqhkiG9w0BAQsFAAOCAQEAFVVFFHisFVIP
PqYFrfZsgvHmEqI2IVsxCcwXjcKLpkWy/Y41In1+SsYTq8dDzKsLsQEwCDHIJwgB
6RGZbJVVdxFa5PT5IAGKBn59K05Zm5SqRp9yPRrfcUce5jHBz5c0DcOy5/Lp763s
K23wmBhM9LxnOsEuv4qoPd24MHm4tBu8S0TRS8N/EojGI2a1+qvDSg9CTjI9PDD7
unsNg4+FfL1RY8QA6eXsMgJi4TQdptImo4BGeivwEQxFm3l+nSRlkE5AahZeZYkN
xWS8tokWoRuwgIyq9egnS1qhi95sfybMABicQEAHgu0JR6R48RDnc1dzG7m18I80
AMcav+L7LA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:37 2024 by rpki-client on console-ams.rpki-client.org