Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33322e302f32302d3230203d3e203238333039.roa
File:                     3138392e33382e33322e302f32302d3230203d3e203238333039.roa (raw, json)
Hash identifier:          9GnLBsI1mXNx55gWbxmks4vIR5APKaKddH5kGBX4S5A=
Subject key identifier:   3F:4E:BE:36:E9:BB:0E:7A:B7:8B:0F:89:3B:91:E6:80:8D:60:97:31
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       23D47C209EBCD3D0D2B72824B3B3CF11449B1629
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33322e302f32302d3230203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:24 +0000
ROA not before:           Wed 03 Apr 2024 20:57:24 +0000
ROA not after:            Wed 02 Apr 2025 21:02:24 +0000
asID:                     28309
IP address blocks:        189.38.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d4:7c:20:9e:bc:d3:d0:d2:b7:28:24:b3:b3:cf:11:44:9b:16:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:24 2024 GMT
            Not After : Apr  2 21:02:24 2025 GMT
        Subject: CN=3F4EBE36E9BB0E7AB78B0F893B91E6808D609731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:af:54:01:c9:67:a0:23:fc:a6:4a:43:a4:
                    2d:b2:25:0c:6a:c6:f0:e7:49:b3:d0:ca:9c:b2:46:
                    24:65:e3:83:19:e4:78:ca:86:df:d2:06:cf:83:0d:
                    7e:6b:ec:a3:ad:cb:77:f3:fc:39:b7:f0:2c:1c:97:
                    15:a1:14:9c:32:44:f3:68:a2:bb:ac:c3:cc:2c:eb:
                    17:0c:b1:fc:bb:75:b7:13:1b:fc:a9:78:6e:f5:77:
                    3c:29:93:b5:4a:f1:37:2c:5a:58:e5:b8:d6:c1:52:
                    8c:a5:74:2d:20:75:12:81:da:0d:8b:df:64:89:47:
                    8c:ac:cc:be:e9:8d:cc:fe:61:78:f8:ee:97:c7:e6:
                    b4:f4:9a:b3:16:6a:87:d2:02:05:79:b8:5c:b3:11:
                    16:45:1d:c7:c7:42:3d:e4:2e:93:b3:5a:18:c1:83:
                    20:ed:7a:7a:57:85:27:a3:9f:b5:0f:e1:b3:27:3f:
                    9f:76:18:ea:c9:da:52:d3:f8:3e:ca:63:af:21:c3:
                    99:44:32:3f:ba:4d:a1:a6:2f:96:83:b1:62:2c:a9:
                    e3:e7:2f:ae:a6:7b:b1:a0:f9:be:4d:90:0f:06:4f:
                    63:27:80:4e:d0:82:ee:74:4e:85:d2:bb:1e:01:9f:
                    78:0b:80:02:de:64:9f:7d:a7:82:f7:20:2f:99:1a:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:BE:36:E9:BB:0E:7A:B7:8B:0F:89:3B:91:E6:80:8D:60:97:31
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33322e302f32302d3230203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:22:6c:4e:e1:ff:b0:58:75:48:ef:de:e1:05:c2:a9:22:14:
         43:8f:ad:62:4a:60:d7:e7:ad:55:1e:45:d9:5b:15:2e:98:f1:
         53:88:5b:3c:2f:6c:9f:52:5f:6e:b5:ea:35:15:d7:dd:9e:e3:
         46:ed:4e:00:21:7b:eb:59:1e:2f:87:d5:64:59:da:42:f4:9b:
         66:ab:8c:6d:d2:73:7a:e1:ea:a2:cd:d0:d0:0f:1c:e8:c9:47:
         6f:42:99:2c:1f:63:01:19:d2:39:d1:de:82:9b:4a:2d:23:6e:
         bd:95:a8:26:be:36:ee:14:24:47:71:70:c6:15:2d:c7:0c:2c:
         0b:7e:77:7e:ba:5c:05:b0:01:d1:f0:3d:65:f6:53:c4:ab:28:
         42:6e:cc:36:22:8a:37:63:19:83:bb:44:f9:d5:dc:b8:a8:44:
         fa:f7:9f:10:fd:78:51:98:b5:fc:5e:4f:4d:b5:77:d8:6d:5f:
         02:47:a3:5b:ea:4f:0c:c8:93:d0:46:99:51:93:00:44:d6:4d:
         03:32:fe:5b:17:fd:07:96:65:73:f4:6f:b2:0b:06:65:1b:bc:
         24:31:18:51:21:1d:ba:f6:d5:5f:b5:fb:5c:16:34:21:50:da:
         91:27:e8:ed:1f:81:0d:0b:56:3d:60:6b:a9:37:cd:1b:1a:3f:
         4e:fb:08:61
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUI9R8IJ6809DStygks7PPEUSbFikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRTkxRjQwNTIxNjRGNUE4NTU0MTY1Mzg5MzdCRkI3
NTkwNzhFMDAeFw0yNDA0MDMyMDU3MjRaFw0yNTA0MDIyMTAyMjRaMDMxMTAvBgNV
BAMTKDNGNEVCRTM2RTlCQjBFN0FCNzhCMEY4OTNCOTFFNjgwOEQ2MDk3MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iK9UAclnoCP8pkpDpC2yJQxq
xvDnSbPQypyyRiRl44MZ5HjKht/SBs+DDX5r7KOty3fz/Dm38CwclxWhFJwyRPNo
orusw8ws6xcMsfy7dbcTG/ypeG71dzwpk7VK8TcsWljluNbBUoyldC0gdRKB2g2L
32SJR4yszL7pjcz+YXj47pfH5rT0mrMWaofSAgV5uFyzERZFHcfHQj3kLpOzWhjB
gyDtenpXhSejn7UP4bMnP592GOrJ2lLT+D7KY68hw5lEMj+6TaGmL5aDsWIsqePn
L66me7Gg+b5NkA8GT2MngE7Qgu50ToXSux4Bn3gLgALeZJ99p4L3IC+ZGuLRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUP06+Num7Dnq3iw+JO5HmgI1glzEwHwYDVR0j
BBgwFoAUnb6R9AUhZPWoVUFlOJN7+3WQeOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMS85REJFOTFGNDA1MjE2NEY1QTg1NTQxNjUzODkzN0JGQjc1OTA3OEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQkU5MUY0MDUyMTY0RjVB
ODU1NDE2NTM4OTM3QkZCNzU5MDc4RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzEv
MzEzODM5MmUzMzM4MmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0mIDANBgkqhkiG9w0BAQsFAAOCAQEAEiJsTuH/sFh1
SO/e4QXCqSIUQ4+tYkpg1+etVR5F2VsVLpjxU4hbPC9sn1JfbrXqNRXX3Z7jRu1O
ACF761keL4fVZFnaQvSbZquMbdJzeuHqos3Q0A8c6MlHb0KZLB9jARnSOdHegptK
LSNuvZWoJr427hQkR3FwxhUtxwwsC353frpcBbAB0fA9ZfZTxKsoQm7MNiKKN2MZ
g7tE+dXcuKhE+vefEP14UZi1/F5PTbV32G1fAkejW+pPDMiT0EaZUZMARNZNAzL+
Wxf9B5Zlc/RvsgsGZRu8JDEYUSEduvbVX7X7XBY0IVDakSfo7R+BDQtWPWBrqTfN
Gxo/TvsIYQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:25 2024 by rpki-client on console-ams.rpki-client.org