Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36382e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e36382e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          5v83eLv1PELKRmxmcykjjZVYYSwyQCyZYg8UJ/yxrNU=
Subject key identifier:   58:FF:F8:82:C5:FE:C7:FE:CC:93:83:B9:53:B2:73:F4:49:E9:4C:70
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       7B50D7766A0E04054775FE200A06A373AE7BDB62
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36382e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:19 +0000
ROA not before:           Wed 03 Apr 2024 20:57:19 +0000
ROA not after:            Wed 02 Apr 2025 21:02:19 +0000
asID:                     28309
IP address blocks:        187.44.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:50:d7:76:6a:0e:04:05:47:75:fe:20:0a:06:a3:73:ae:7b:db:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:19 2024 GMT
            Not After : Apr  2 21:02:19 2025 GMT
        Subject: CN=58FFF882C5FEC7FECC9383B953B273F449E94C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:78:a0:76:6a:80:42:fb:76:e3:ea:51:ed:
                    3e:07:80:b3:8c:1b:5a:b3:15:b3:d0:3c:99:a8:ec:
                    e7:c5:53:5f:f4:58:82:17:ab:cb:a9:29:75:7f:5f:
                    0e:5a:bf:c8:63:0f:08:86:b7:fd:3f:ac:fe:05:f5:
                    e5:aa:a8:50:85:07:81:ba:12:31:53:2b:0b:59:ec:
                    b3:9d:d6:07:e5:d0:f2:05:95:83:3f:58:38:4d:dd:
                    63:03:11:d5:d7:d3:b0:5c:3f:a0:eb:52:c4:ff:03:
                    e0:19:75:5c:6c:ae:19:d5:80:dd:04:50:5d:59:22:
                    d9:f4:9b:bf:2a:08:21:d9:50:fd:fd:06:23:05:cf:
                    bc:2b:09:8b:3e:62:2d:18:b6:51:76:81:bb:8f:a4:
                    59:3b:ce:a5:81:69:89:42:e9:f9:53:04:c5:4d:69:
                    62:f6:ba:ff:20:b9:53:42:f9:08:04:29:cf:63:49:
                    90:e9:c3:33:fe:62:93:67:bb:c8:5a:b8:29:75:a4:
                    5e:87:86:57:5c:ea:ae:38:07:1e:5e:78:df:f8:64:
                    e6:94:c5:f9:9a:36:e6:ae:ae:3e:cf:20:d5:92:96:
                    aa:c7:59:ca:33:71:4f:77:44:b5:3c:d8:a4:67:58:
                    63:25:66:9b:cd:e3:ce:26:23:09:59:09:17:f5:1d:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FF:F8:82:C5:FE:C7:FE:CC:93:83:B9:53:B2:73:F4:49:E9:4C:70
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e36382e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:60:37:d2:8a:34:01:97:2d:85:6d:2c:6f:24:bc:d1:00:2a:
         56:3c:40:54:98:87:c2:26:fc:dc:d4:e8:8c:50:34:d5:94:b9:
         7c:af:2a:d0:0a:b3:a7:81:54:82:53:e0:6c:8a:85:62:c1:0c:
         96:36:53:fe:f7:cc:02:38:2a:c3:a0:2c:e4:c6:61:b3:54:0e:
         b3:93:b7:2a:64:58:9d:01:a8:c1:35:f8:84:95:fd:38:7e:bf:
         66:37:d6:98:2b:bd:89:10:8e:5d:f7:c6:0b:0f:69:dd:16:d7:
         99:60:55:5e:85:5c:c7:ed:37:2c:ef:67:3c:6a:a7:29:79:f3:
         f0:89:3e:ca:f8:fe:e2:f2:9a:56:42:87:73:4c:8f:1e:89:5d:
         be:da:5f:51:35:11:58:a5:f1:02:ad:46:a0:47:c1:73:a6:ca:
         f4:89:52:c3:dc:d9:24:0e:dc:06:4e:e1:c6:a3:c1:20:86:92:
         ed:77:f4:fa:09:ba:08:87:4a:46:e5:0a:bc:28:ef:35:17:88:
         a9:9a:91:d0:3c:46:bf:33:e9:97:04:bf:e0:d2:f6:16:ab:3a:
         73:f0:e1:34:c5:ce:bd:67:7c:25:a8:9d:62:40:d6:a1:d6:eb:
         3d:4f:84:4b:b4:4a:32:1f:d8:36:c3:01:b0:4b:7e:88:df:e7:
         9f:5e:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org