Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37362e302f32322d3232203d3e203238333039.roa
File:                     3138372e34342e37362e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          mh9Zje610ge4MFoVZYMm4poZDGc2EYf1MpL/qewmVXI=
Subject key identifier:   91:37:7C:C5:EF:53:75:9B:34:27:17:CE:37:50:93:70:D2:A8:9A:C3
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       37B6435711E2B4CD266014F75DD9042E674EFAB3
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37362e302f32322d3232203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:20 +0000
ROA not before:           Wed 03 Apr 2024 20:57:20 +0000
ROA not after:            Wed 02 Apr 2025 21:02:20 +0000
asID:                     28309
IP address blocks:        187.44.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:43:57:11:e2:b4:cd:26:60:14:f7:5d:d9:04:2e:67:4e:fa:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:20 2024 GMT
            Not After : Apr  2 21:02:20 2025 GMT
        Subject: CN=91377CC5EF53759B342717CE37509370D2A89AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:ab:70:bc:ec:d8:56:e9:d3:d9:af:83:dc:
                    2b:8c:a4:34:4d:bd:93:3a:a0:5d:05:69:41:24:c6:
                    37:ff:eb:89:4e:a7:21:f0:a4:95:c7:64:39:cf:99:
                    30:c7:73:2a:51:99:19:21:b5:d2:b4:08:7b:b5:11:
                    65:8a:fe:db:3a:50:7a:cd:42:ba:56:9b:13:ed:66:
                    90:05:09:d3:5e:f0:03:22:0e:ba:be:af:c1:9e:89:
                    70:d1:e8:52:a6:5f:1d:be:2b:a2:27:f0:df:6d:a9:
                    fb:f2:b0:bc:c8:f1:71:1c:cf:de:01:17:16:7d:d8:
                    97:a1:e3:e9:c8:a0:4d:ec:c3:74:a9:9f:0b:7d:1e:
                    dd:92:60:b9:23:9d:11:cc:1d:b6:60:52:21:e5:93:
                    58:32:df:8c:c3:44:af:e1:3b:99:ca:8e:ea:41:be:
                    c0:5a:90:47:ea:32:05:51:e5:d2:a5:5f:e6:c7:aa:
                    c6:53:9d:11:6a:79:69:e4:61:7d:bc:67:75:fb:69:
                    e1:2b:bc:c8:16:b5:a4:82:2d:88:ad:3c:14:e7:5d:
                    5f:cf:5e:fd:91:3b:f1:0e:e5:5b:03:3a:85:91:ec:
                    ee:84:45:c1:e6:39:93:72:09:21:79:f3:93:71:19:
                    5c:4c:98:92:dd:eb:41:9f:fc:67:a6:05:0f:52:58:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:7C:C5:EF:53:75:9B:34:27:17:CE:37:50:93:70:D2:A8:9A:C3
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37362e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:d8:37:b0:b7:df:db:0b:50:ed:6f:fe:fa:b9:d1:84:0b:
         9c:1a:72:f8:01:2a:2f:17:15:ff:87:c4:ec:f6:0e:2d:91:a4:
         b9:f6:f8:61:e0:16:d3:28:70:28:e2:b7:09:ff:75:eb:aa:fe:
         2d:90:8c:11:a6:82:08:bf:ac:20:72:b2:3b:c2:94:de:b9:8d:
         9e:a3:67:7f:87:2e:1a:7c:2f:b6:ed:1e:39:51:1f:57:9c:90:
         bc:e0:85:41:d7:49:9d:6c:33:49:24:f5:29:e7:bb:56:ed:8e:
         6e:89:a9:3f:20:c8:05:c6:0e:45:d1:97:fb:df:2c:2a:c5:60:
         9f:8d:7f:7b:98:68:0c:2b:bf:e2:28:ea:2f:23:32:0e:71:b2:
         32:63:c6:33:45:2d:e4:30:0f:43:b1:9f:05:61:fb:52:69:0c:
         79:a1:4a:8d:58:41:fb:29:18:0a:57:cf:8c:83:c0:16:6b:ac:
         b4:ee:aa:cf:32:19:7d:ad:b7:9b:af:b7:10:67:1a:f2:dd:2f:
         a9:7b:5b:5a:60:9d:39:ad:f2:d5:d1:f2:1c:dc:6c:2a:5a:b2:
         c0:e6:bb:82:54:60:c5:46:5e:e0:5e:9d:cd:1a:2e:2e:a5:4e:
         1e:f2:12:25:0f:88:be:9e:44:fb:5a:a2:a4:2a:30:09:5a:aa:
         a0:34:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:37 2024 by rpki-client on console-ams.rpki-client.org