Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37312e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e37312e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          zYNdxZvzY9DzojhrHMT8L/aDg4wL34yaUFTox9nE6Dc=
Subject key identifier:   E6:30:60:6F:31:20:97:8C:C5:A4:90:C7:69:6E:FF:2A:15:61:14:BE
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       6264210EF6345BB846E489188B0295DD7A10774B
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37312e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:22 +0000
ROA not before:           Wed 03 Apr 2024 20:57:22 +0000
ROA not after:            Wed 02 Apr 2025 21:02:22 +0000
asID:                     28309
IP address blocks:        187.44.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:64:21:0e:f6:34:5b:b8:46:e4:89:18:8b:02:95:dd:7a:10:77:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:22 2024 GMT
            Not After : Apr  2 21:02:22 2025 GMT
        Subject: CN=E630606F3120978CC5A490C7696EFF2A156114BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:31:f7:e7:8e:69:5e:70:8b:89:05:79:9e:
                    4f:45:61:cf:67:c5:2d:f9:a3:67:3b:2b:fd:ed:c0:
                    03:c6:44:8b:b7:70:89:2a:71:7c:3e:91:ec:fd:15:
                    dc:a4:4f:ef:99:b1:b3:ba:92:ba:8c:78:dd:78:12:
                    0d:fe:5b:c8:91:82:f1:8d:75:cf:80:d6:16:3a:f4:
                    44:3b:60:66:ea:3e:be:04:28:7f:0d:97:62:9d:12:
                    d9:56:13:b6:b6:6e:23:6e:60:ff:76:95:9c:d5:e4:
                    ec:fc:51:c8:a7:29:16:1e:fe:a3:40:4e:ff:17:53:
                    34:bb:ff:0b:72:df:c1:74:55:e3:15:ac:81:9c:32:
                    f0:32:fd:52:6f:a2:49:a6:0f:ce:10:b0:d4:7f:6e:
                    20:35:7a:97:0d:1a:32:6e:c6:88:dc:72:dd:2d:e2:
                    12:cf:2b:d7:eb:0f:a1:c8:47:d2:8f:54:e4:f7:d9:
                    b6:f7:8d:4f:84:d8:32:f1:42:3f:29:64:8a:36:74:
                    79:13:a4:58:28:23:30:15:34:aa:fd:97:66:d8:89:
                    ca:f6:c1:0e:3c:90:08:56:89:b0:5e:22:12:47:63:
                    95:9f:6d:eb:50:d6:20:57:09:66:71:0b:82:05:a2:
                    85:92:60:39:8a:06:12:18:0c:52:ad:ee:01:ed:9b:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:30:60:6F:31:20:97:8C:C5:A4:90:C7:69:6E:FF:2A:15:61:14:BE
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37312e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:51:41:79:aa:45:16:dd:59:4d:16:e3:f4:2a:14:ad:81:c7:
         ff:fc:74:5d:9d:60:05:66:9d:e8:d1:f5:06:7e:cf:b4:c6:3d:
         ff:50:4d:f3:b7:73:36:4d:a1:b6:7c:8f:68:94:df:79:dc:1f:
         a4:2a:1e:a5:ac:28:be:d1:5e:2a:b4:2b:a9:cc:17:51:e3:e9:
         43:31:30:b9:92:6d:1d:05:1e:33:b2:ac:7f:50:ee:6e:d0:af:
         ba:be:43:2f:c6:69:ff:70:59:7d:64:1f:c7:bd:6e:fe:aa:2f:
         3a:2e:48:f2:6e:35:f3:ef:8d:30:13:8d:04:4b:df:a4:a1:28:
         8c:50:1a:90:2c:aa:17:fc:58:7e:03:01:01:d5:fc:99:bc:44:
         87:ca:fe:b1:46:5c:41:a7:c2:de:bf:c6:51:71:ad:10:54:6e:
         91:8b:3c:6d:bf:94:02:0c:4d:c6:9e:28:30:70:af:8f:b7:45:
         d5:0b:f5:b6:bb:16:e8:94:35:c4:ef:00:af:3e:8a:a4:7c:fe:
         af:6a:54:ae:12:3b:f5:65:51:ce:a8:fe:02:4c:ac:58:d7:ea:
         0f:33:d4:86:7f:44:f6:62:8f:33:5b:4e:56:e5:52:d0:32:58:
         3b:15:a6:64:79:4d:d4:c4:41:c9:6f:4f:bf:b7:4b:b3:df:02:
         01:08:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org