Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33322e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33322e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          U06FdA+4TOpkLKeEdZoYoiN9QX4RAJIaWhw5eoPJJuc=
Subject key identifier:   B7:EF:4E:11:02:AD:B3:DF:98:3C:FD:72:90:BF:94:D9:F2:9A:5A:BB
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       01C5D29640F86606B2A538848B8A3EE6EF27B4B8
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33322e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:17 +0000
ROA not before:           Wed 03 Apr 2024 20:57:17 +0000
ROA not after:            Wed 02 Apr 2025 21:02:17 +0000
asID:                     28309
IP address blocks:        189.38.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c5:d2:96:40:f8:66:06:b2:a5:38:84:8b:8a:3e:e6:ef:27:b4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:17 2024 GMT
            Not After : Apr  2 21:02:17 2025 GMT
        Subject: CN=B7EF4E1102ADB3DF983CFD7290BF94D9F29A5ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:98:6a:16:ef:91:f6:0f:7f:ca:48:db:e4:
                    21:69:d8:13:18:0a:84:ca:74:2c:a9:a1:f1:00:45:
                    9b:c6:8c:c1:1d:a5:73:54:fd:b4:f4:c2:fd:a9:14:
                    80:33:f1:f8:b9:cb:5d:90:d4:5c:98:30:91:4e:c3:
                    4c:1b:a5:41:f8:a8:9a:89:95:d3:e5:ca:c7:fb:c4:
                    5d:c3:21:71:42:8f:51:fa:20:f5:4a:c9:b0:a9:8a:
                    01:65:4a:d5:8b:2f:91:29:85:5f:47:c0:d7:f4:c8:
                    33:32:3c:d2:2a:7e:e4:8c:6c:a0:e1:7c:22:5d:32:
                    b9:5f:60:65:c7:48:29:85:09:29:eb:fd:95:d0:78:
                    ad:c9:b0:c3:7e:d4:6d:d6:1c:8d:d2:4f:c1:2a:42:
                    08:a2:c7:b3:18:3e:4d:1a:30:32:08:a7:33:62:c8:
                    01:14:9c:bf:b6:77:09:cb:1d:a0:71:2a:67:95:42:
                    17:15:a9:d2:09:02:3e:65:92:05:5d:d3:32:85:52:
                    3d:a4:cb:49:f4:0c:50:8f:62:a8:cc:c6:5c:6c:c2:
                    21:85:09:da:fb:ae:cd:d5:03:a4:02:fa:c8:40:76:
                    d2:44:7e:e4:b6:52:47:9e:0a:18:d9:81:f5:b6:ce:
                    64:c6:54:c0:b4:08:75:54:87:bc:8b:01:a0:29:a0:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:4E:11:02:AD:B3:DF:98:3C:FD:72:90:BF:94:D9:F2:9A:5A:BB
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33322e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ed:79:78:ab:ff:24:8a:ca:c0:2c:0d:87:bf:06:e5:48:8b:
         50:86:1c:c4:22:9d:0e:e5:19:1e:c9:7d:76:c3:d1:c3:01:d8:
         2f:71:6a:64:f0:66:71:bb:2c:d8:aa:51:a4:3e:4a:b9:4a:8a:
         80:98:94:92:a2:e2:69:34:60:0e:1c:05:5b:16:c2:16:ee:76:
         da:6b:56:3f:02:7f:44:46:45:aa:c4:4e:37:5a:36:71:13:51:
         51:da:5b:fa:b0:c1:7b:fe:be:94:f3:09:dd:a9:cf:53:2c:15:
         94:e8:c9:66:72:a8:e0:55:f0:47:a1:09:f7:9a:69:6d:1e:a3:
         62:b8:18:ce:df:5b:5d:6c:20:f0:9c:2f:e0:9b:f6:51:f2:2f:
         34:2e:fe:6f:7b:bb:8b:4b:b7:97:dd:2d:82:5d:6d:4a:fd:ef:
         3b:60:67:25:f9:fd:14:f1:99:33:8b:82:53:c0:54:32:9e:76:
         25:c7:eb:5d:0f:24:64:4b:00:cc:ec:92:c6:e5:e6:3f:ca:a6:
         67:07:f7:28:2d:47:63:8b:e9:c0:0c:23:0e:b0:15:23:e4:5e:
         68:5d:a8:de:98:ac:bb:a3:a4:4a:f1:c6:f7:f9:64:ef:1e:e5:
         ce:b4:29:43:ab:49:8d:33:9f:81:33:53:c2:7b:7e:c6:fa:59:
         b3:b2:df:c0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAcXSlkD4ZgaypTiEi4o+5u8ntLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRTkxRjQwNTIxNjRGNUE4NTU0MTY1Mzg5MzdCRkI3
NTkwNzhFMDAeFw0yNDA0MDMyMDU3MTdaFw0yNTA0MDIyMTAyMTdaMDMxMTAvBgNV
BAMTKEI3RUY0RTExMDJBREIzREY5ODNDRkQ3MjkwQkY5NEQ5RjI5QTVBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oZhqFu+R9g9/ykjb5CFp2BMY
CoTKdCypofEARZvGjMEdpXNU/bT0wv2pFIAz8fi5y12Q1FyYMJFOw0wbpUH4qJqJ
ldPlysf7xF3DIXFCj1H6IPVKybCpigFlStWLL5EphV9HwNf0yDMyPNIqfuSMbKDh
fCJdMrlfYGXHSCmFCSnr/ZXQeK3JsMN+1G3WHI3ST8EqQgiix7MYPk0aMDIIpzNi
yAEUnL+2dwnLHaBxKmeVQhcVqdIJAj5lkgVd0zKFUj2ky0n0DFCPYqjMxlxswiGF
Cdr7rs3VA6QC+shAdtJEfuS2UkeeChjZgfW2zmTGVMC0CHVUh7yLAaApoDcRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUt+9OEQKts9+YPP1ykL+U2fKaWrswHwYDVR0j
BBgwFoAUnb6R9AUhZPWoVUFlOJN7+3WQeOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMS85REJFOTFGNDA1MjE2NEY1QTg1NTQxNjUzODkzN0JGQjc1OTA3OEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQkU5MUY0MDUyMTY0RjVB
ODU1NDE2NTM4OTM3QkZCNzU5MDc4RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzEv
MzEzODM5MmUzMzM4MmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0mIDANBgkqhkiG9w0BAQsFAAOCAQEAou15eKv/JIrK
wCwNh78G5UiLUIYcxCKdDuUZHsl9dsPRwwHYL3FqZPBmcbss2KpRpD5KuUqKgJiU
kqLiaTRgDhwFWxbCFu522mtWPwJ/REZFqsRON1o2cRNRUdpb+rDBe/6+lPMJ3anP
UywVlOjJZnKo4FXwR6EJ95ppbR6jYrgYzt9bXWwg8Jwv4Jv2UfIvNC7+b3u7i0u3
l90tgl1tSv3vO2BnJfn9FPGZM4uCU8BUMp52JcfrXQ8kZEsAzOySxuXmP8qmZwf3
KC1HY4vpwAwjDrAVI+ReaF2o3pisu6OkSvHG9/lk7x7lzrQpQ6tJjTOfgTNTwnt+
xvpZs7LfwA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:18 2024 by rpki-client on console-ams.rpki-client.org