Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37342e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e37342e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          HLxGaEwSwO30k/UTGKHpg6xEdvOBIwhOSIFiKkadkmI=
Subject key identifier:   0B:CB:33:1D:32:9E:76:DF:23:9E:77:41:EE:BB:FF:9B:96:77:6B:E4
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       3530A3D2DD749B88BC54E3A17EAEE7E842C1FC17
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37342e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:24 +0000
ROA not before:           Wed 03 Apr 2024 20:57:24 +0000
ROA not after:            Wed 02 Apr 2025 21:02:24 +0000
asID:                     28309
IP address blocks:        187.44.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:a3:d2:dd:74:9b:88:bc:54:e3:a1:7e:ae:e7:e8:42:c1:fc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:24 2024 GMT
            Not After : Apr  2 21:02:24 2025 GMT
        Subject: CN=0BCB331D329E76DF239E7741EEBBFF9B96776BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:44:0c:02:a6:1d:78:5e:2e:97:48:b5:1b:
                    93:40:ec:81:79:db:42:40:05:41:fd:ff:52:8c:e6:
                    e4:70:59:ac:d1:47:2b:dc:f5:b0:68:79:3a:f4:45:
                    a4:d0:b2:7d:b1:f9:c5:e6:0a:51:a4:6b:38:1e:b3:
                    04:31:3f:27:cb:c6:b3:a7:b5:0c:68:75:bc:c7:d3:
                    a8:8f:02:41:7f:0b:11:76:c3:b1:70:28:d1:4a:b2:
                    d3:a6:5f:59:21:f5:22:0b:8f:8b:25:95:dc:cb:bf:
                    16:30:9c:76:a3:ce:cf:09:cc:7d:27:0e:50:92:fb:
                    fc:a2:d0:5b:72:fd:f0:e5:9b:5f:90:b8:32:50:76:
                    7d:74:49:88:3e:c4:22:e0:40:8c:63:24:a1:b4:91:
                    1c:e8:94:69:cd:01:46:bb:70:67:12:4f:cc:f9:cb:
                    d5:12:1c:dc:f4:bc:c0:9d:65:52:1c:81:d1:1b:9e:
                    f3:77:46:6a:8b:86:2d:d6:9e:51:8c:e7:51:dd:d8:
                    ab:83:93:b4:08:2e:9a:94:5a:ea:3b:fc:7f:fe:c5:
                    65:1f:d1:04:10:ad:07:45:79:31:03:ea:5b:3d:41:
                    7c:fd:cf:e6:d8:b5:93:cf:bf:dc:97:62:87:c8:81:
                    3d:b9:c2:ae:10:19:88:5d:35:8e:03:83:15:9b:49:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:33:1D:32:9E:76:DF:23:9E:77:41:EE:BB:FF:9B:96:77:6B:E4
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37342e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:be:08:08:ce:d7:45:c9:0a:ac:11:92:df:db:5f:e6:c4:5d:
         af:14:27:03:c2:97:ae:64:b9:53:15:d2:5c:18:85:19:62:4a:
         f0:44:c4:e3:38:75:de:a7:66:81:2a:5b:17:d5:83:98:9e:ea:
         c8:8a:dd:ff:7c:62:dc:69:60:6f:21:ad:fb:4b:0c:55:59:c5:
         01:ef:4b:eb:00:58:f5:2b:13:72:f8:b2:12:0e:82:c8:c2:77:
         4e:02:5c:3f:23:97:77:8b:18:f7:c2:ca:7f:9d:c3:28:af:ab:
         53:c6:2e:71:b2:2b:d3:70:29:b4:aa:ef:c2:42:6f:23:06:4a:
         d1:58:5d:45:84:8b:c7:68:a8:ef:a5:b3:f2:19:10:e5:68:4d:
         99:4e:c1:75:ea:82:7e:c4:45:40:ff:45:74:35:6c:8f:02:b3:
         59:1a:7b:fa:d9:76:c7:0c:06:12:0d:01:0a:df:a3:28:72:d7:
         5e:91:ad:19:01:2a:8d:c1:82:86:c2:2b:78:61:f1:b6:e2:24:
         22:6c:7e:d1:1e:63:05:3b:f6:6f:66:38:4f:d8:83:de:f5:9b:
         4c:fe:c9:76:91:80:1f:2a:ef:85:cc:49:ae:5a:92:96:02:10:
         4a:f1:80:20:2d:14:38:01:3b:8e:d7:12:64:c8:35:56:83:bb:
         db:cd:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org