Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36372e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e36372e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          HwsprsAqRadUGcLrjmkv4dkXqk5MjBXLzC5mue7ncTM=
Subject key identifier:   13:83:8F:88:F2:C6:F3:9E:C8:AC:98:4E:0E:63:CE:E9:7B:FB:F9:2D
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       18D949C05818D9A96763A2941462A080A42FCE24
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36372e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:19 +0000
ROA not before:           Wed 03 Apr 2024 20:57:19 +0000
ROA not after:            Wed 02 Apr 2025 21:02:19 +0000
asID:                     28309
IP address blocks:        187.44.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d9:49:c0:58:18:d9:a9:67:63:a2:94:14:62:a0:80:a4:2f:ce:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:19 2024 GMT
            Not After : Apr  2 21:02:19 2025 GMT
        Subject: CN=13838F88F2C6F39EC8AC984E0E63CEE97BFBF92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:f5:9e:cf:c8:c7:ce:bd:f2:e9:83:6a:2d:
                    06:f2:46:31:d7:81:36:76:66:5a:58:32:b8:19:13:
                    3d:ff:a9:cb:34:2f:0b:c4:89:11:ef:07:97:db:89:
                    d5:21:c3:81:62:2f:29:06:b8:2d:78:ac:cc:56:a6:
                    07:ae:f6:db:4f:b0:b1:4d:a0:90:72:c1:e6:b9:a8:
                    f5:61:cb:d1:e7:19:fd:be:f8:6c:21:d8:c5:1b:19:
                    ab:41:6a:4d:e9:3c:d9:5c:e4:7c:4f:1a:10:7a:c0:
                    bb:f0:c0:61:0f:58:4d:73:26:a6:aa:21:0a:22:d3:
                    89:88:42:c4:d2:6e:02:3d:12:89:ee:3e:24:cd:c3:
                    46:8b:88:c2:23:24:3d:c5:81:8f:57:56:8d:ad:e8:
                    8c:10:e3:26:59:54:0f:29:9d:a5:e1:58:d3:17:b8:
                    e6:0d:1a:ac:79:6c:08:4b:8c:50:da:1b:b2:c0:cb:
                    af:db:cb:58:be:e8:93:51:86:4f:bf:ea:07:45:15:
                    5c:e1:7b:77:5b:2f:66:b4:a8:90:e6:53:29:ec:b4:
                    54:f5:e5:a3:fc:db:a6:00:de:d1:9c:ea:d7:d9:bd:
                    5c:a6:e2:1d:d3:e7:16:7f:35:74:67:ab:6d:b2:e8:
                    9a:d9:b3:61:53:55:7e:04:ee:51:b4:51:3c:1f:58:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:83:8F:88:F2:C6:F3:9E:C8:AC:98:4E:0E:63:CE:E9:7B:FB:F9:2D
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36372e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:42:e2:7a:5a:e5:d9:85:df:b1:7a:e8:bb:3e:b3:d8:39:ff:
         f3:62:13:34:c2:bc:55:31:2e:55:98:87:aa:19:fd:7b:5d:74:
         fe:6f:ec:f3:ef:3c:43:80:e7:6b:ab:bc:f9:4b:ba:3e:d8:fd:
         7e:1f:38:f6:1d:a1:63:a4:ba:21:41:e7:ef:98:63:65:3e:88:
         b5:95:0a:b2:ae:58:a8:92:4e:78:a9:99:5a:e0:a0:e2:d1:5b:
         5e:b0:22:d3:81:5c:32:d1:14:d1:44:0b:23:e8:1e:dc:45:6a:
         a0:fb:c2:8d:37:46:ea:3f:b6:88:a4:6a:88:01:57:4e:01:e7:
         d1:9b:2f:2c:94:5f:72:01:b5:61:be:15:76:0d:ca:53:57:27:
         17:a1:ca:be:75:4b:52:47:9d:a5:c8:c2:75:ac:44:e8:0f:98:
         3a:96:bc:77:a6:a8:3b:6c:42:f1:fc:e3:59:87:45:ef:af:76:
         41:ec:dd:0c:b2:f7:2e:d1:f3:ea:9e:7e:55:9b:64:5d:d2:a6:
         b5:5f:84:4c:1b:5c:77:85:8c:59:40:46:02:3f:2e:4f:91:55:
         70:e2:75:65:09:44:84:09:c3:f7:35:5d:99:98:34:e0:f6:1c:
         53:03:0f:25:5f:b0:ed:33:60:eb:02:05:b3:75:4c:46:e2:ba:
         57:ac:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org