Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37362e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e37362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          fR7Vr/oPAE23Sqcl5JJEXZ5MvOGFKJ+u+Z5gIwmNomY=
Subject key identifier:   88:11:35:8B:93:C8:E2:AE:89:EC:82:F2:19:2F:D1:66:64:49:C6:94
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       473D7E136054A91626D6B5F8BA7340BF5B5843A1
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37362e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:26 +0000
ROA not before:           Wed 03 Apr 2024 20:57:26 +0000
ROA not after:            Wed 02 Apr 2025 21:02:26 +0000
asID:                     28309
IP address blocks:        187.44.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3d:7e:13:60:54:a9:16:26:d6:b5:f8:ba:73:40:bf:5b:58:43:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:26 2024 GMT
            Not After : Apr  2 21:02:26 2025 GMT
        Subject: CN=8811358B93C8E2AE89EC82F2192FD1666449C694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:63:0a:3e:c1:30:a0:63:40:8b:f5:d5:04:
                    04:a6:d2:c0:1d:8a:4a:2b:ab:28:c4:66:54:72:2b:
                    34:5f:d7:15:65:cf:47:4d:1c:a1:15:21:25:48:1f:
                    df:96:24:e6:df:b3:ad:ff:b5:8f:9c:3d:5b:d1:8d:
                    54:4e:9f:14:c5:f7:36:50:59:7f:75:4d:e9:b2:b5:
                    00:01:54:b5:88:b9:f2:fb:6f:36:be:03:86:a6:bd:
                    64:f6:0b:4c:e5:9c:e2:09:46:9e:67:ff:d1:eb:fa:
                    ec:a6:c2:0a:a5:85:09:b8:f3:fe:14:75:e2:11:00:
                    27:19:73:21:6e:29:aa:db:0c:ab:fd:f5:fc:c9:be:
                    e8:df:1e:32:e7:9d:40:f1:58:ea:c4:8d:20:44:07:
                    4f:53:0a:a9:3e:2f:d5:22:5a:5e:c0:f4:a6:59:e5:
                    23:31:0d:a9:96:45:c8:e2:f6:59:5c:49:80:a1:fd:
                    d7:ea:76:5e:b9:08:d3:9f:0c:b2:02:4b:cc:da:e1:
                    b9:46:91:7a:2e:f3:71:6e:91:c4:5b:92:a6:bc:f2:
                    73:57:43:f8:f7:bb:1a:65:86:e7:e0:4d:6e:f8:e1:
                    96:7f:ac:f4:dc:ce:ed:3e:7a:f0:11:0b:82:ec:f6:
                    63:54:19:fd:86:f4:57:5a:8d:65:cf:e8:b5:16:86:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:35:8B:93:C8:E2:AE:89:EC:82:F2:19:2F:D1:66:64:49:C6:94
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138372e34342e37362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:96:cd:55:c3:3b:62:37:11:b9:82:c2:f8:47:16:d1:b6:7d:
         ff:9a:b5:7d:93:80:98:80:15:ac:94:8c:29:68:64:fe:6c:55:
         a1:d0:40:c4:fd:21:77:92:2d:41:45:1a:38:69:10:c1:9a:f8:
         27:b1:c4:bd:80:dc:4b:4c:f9:94:3d:e8:8f:0a:a0:0e:bd:c2:
         31:98:34:29:13:fb:8e:3d:55:c8:c6:0c:93:a8:c1:5a:8c:c9:
         2e:81:d4:c2:ff:82:dd:a2:2d:fc:35:84:0a:f0:ec:d7:e6:2a:
         16:61:9e:07:aa:76:96:22:c0:f7:ff:78:d5:21:61:8b:82:12:
         9a:fd:48:a0:b1:b5:91:40:84:cd:20:9b:9b:fb:4e:d5:b5:86:
         61:87:b1:0d:53:70:fc:d9:7b:63:88:ab:b7:51:63:c3:7f:83:
         28:87:56:e8:1d:32:89:63:9e:62:31:3c:de:69:59:1f:69:cc:
         9d:2c:ed:80:da:d5:13:de:11:08:b5:1f:d9:42:25:e9:8d:f0:
         6b:2f:57:8b:76:97:d2:65:6b:b3:1b:12:f3:2e:60:9d:b5:f4:
         6e:25:14:b9:16:89:14:92:82:a7:26:e7:b1:ea:8a:15:54:d0:
         fb:de:49:7d:d9:2a:6c:0b:a5:35:67:9c:39:18:7d:b2:88:72:
         47:ad:fa:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURz1+E2BUqRYm1rX4unNAv1tYQ6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRTkxRjQwNTIxNjRGNUE4NTU0MTY1Mzg5MzdCRkI3
NTkwNzhFMDAeFw0yNDA0MDMyMDU3MjZaFw0yNTA0MDIyMTAyMjZaMDMxMTAvBgNV
BAMTKDg4MTEzNThCOTNDOEUyQUU4OUVDODJGMjE5MkZEMTY2NjQ0OUM2OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDReGMKPsEwoGNAi/XVBASm0sAd
ikorqyjEZlRyKzRf1xVlz0dNHKEVISVIH9+WJObfs63/tY+cPVvRjVROnxTF9zZQ
WX91TemytQABVLWIufL7bza+A4amvWT2C0zlnOIJRp5n/9Hr+uymwgqlhQm48/4U
deIRACcZcyFuKarbDKv99fzJvujfHjLnnUDxWOrEjSBEB09TCqk+L9UiWl7A9KZZ
5SMxDamWRcji9llcSYCh/dfqdl65CNOfDLICS8za4blGkXou83FukcRbkqa88nNX
Q/j3uxplhufgTW744ZZ/rPTczu0+evARC4Ls9mNUGf2G9FdajWXP6LUWhs1XAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiBE1i5PI4q6J7ILyGS/RZmRJxpQwHwYDVR0j
BBgwFoAUnb6R9AUhZPWoVUFlOJN7+3WQeOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMS85REJFOTFGNDA1MjE2NEY1QTg1NTQxNjUzODkzN0JGQjc1OTA3OEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQkU5MUY0MDUyMTY0RjVB
ODU1NDE2NTM4OTM3QkZCNzU5MDc4RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzEv
MzEzODM3MmUzNDM0MmUzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbssTDANBgkqhkiG9w0BAQsFAAOCAQEAJ5bNVcM7YjcR
uYLC+EcW0bZ9/5q1fZOAmIAVrJSMKWhk/mxVodBAxP0hd5ItQUUaOGkQwZr4J7HE
vYDcS0z5lD3ojwqgDr3CMZg0KRP7jj1VyMYMk6jBWozJLoHUwv+C3aIt/DWECvDs
1+YqFmGeB6p2liLA9/941SFhi4ISmv1IoLG1kUCEzSCbm/tO1bWGYYexDVNw/Nl7
Y4irt1Fjw3+DKIdW6B0yiWOeYjE83mlZH2nMnSztgNrVE94RCLUf2UIl6Y3way9X
i3aX0mVrsxsS8y5gnbX0biUUuRaJFJKCpybnseqKFVTQ+95JfdkqbAulNWecORh9
sohyR636EA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org