Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33332e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33332e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          0vol0PqmQLwOCjsrLkGhwljpvnQ3yc18XW8B9sZSF5k=
Subject key identifier:   4D:8F:29:7F:02:7E:2F:59:66:24:63:51:E4:D3:21:8F:A6:37:18:4D
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       275538290CCC9E38F33755D531C9BC204956BA54
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33332e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:20 +0000
ROA not before:           Wed 03 Apr 2024 20:57:20 +0000
ROA not after:            Wed 02 Apr 2025 21:02:20 +0000
asID:                     28309
IP address blocks:        189.38.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:55:38:29:0c:cc:9e:38:f3:37:55:d5:31:c9:bc:20:49:56:ba:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:20 2024 GMT
            Not After : Apr  2 21:02:20 2025 GMT
        Subject: CN=4D8F297F027E2F5966246351E4D3218FA637184D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:d1:79:0b:64:98:f2:b6:8c:de:f5:67:41:
                    10:24:ea:8b:f4:96:47:c3:be:cd:1d:96:a5:92:82:
                    91:a0:b9:0d:6e:66:2c:ec:6b:a3:46:2b:ac:d0:09:
                    5c:76:6b:e2:49:50:9e:f3:fc:70:59:f7:ba:54:fe:
                    b4:95:29:06:42:df:e0:b3:47:ab:d6:7e:20:65:1c:
                    01:fb:a7:da:5f:1f:f9:0c:0c:fd:77:73:57:4a:e8:
                    d5:90:11:68:00:00:cc:65:f9:59:fd:09:4d:03:af:
                    f0:a8:a4:c5:9d:1a:cb:7c:d6:92:84:92:b6:1d:77:
                    72:3f:63:db:9e:19:a5:2d:54:8e:91:52:c4:4f:57:
                    11:7b:63:8e:43:41:23:f0:32:29:36:56:4d:a5:86:
                    09:56:08:92:db:80:d7:e1:23:fc:dd:41:f0:ea:2d:
                    5d:10:80:2e:20:ca:ab:84:da:d3:ae:9f:66:52:a2:
                    f1:cc:d3:9e:0d:c4:05:b8:d0:d9:ed:1e:59:4c:c4:
                    9e:3b:d7:e0:f4:53:da:85:58:95:47:1e:20:f4:9c:
                    99:ba:b8:af:68:e0:f6:db:93:af:cf:ea:53:68:d8:
                    60:5b:b6:01:39:a4:56:e1:c7:d1:44:80:90:bb:a6:
                    47:1e:3b:ab:44:75:5b:a4:6c:0e:3a:6d:ed:71:ac:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8F:29:7F:02:7E:2F:59:66:24:63:51:E4:D3:21:8F:A6:37:18:4D
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33332e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:59:1c:3b:e2:12:be:f2:45:36:a6:9f:db:95:58:4b:bf:
         40:cf:75:26:09:a4:2e:c7:b9:42:77:13:0d:4f:54:74:e4:21:
         8a:19:8d:4e:8d:2c:aa:0b:28:0e:63:95:0e:4d:46:cf:8d:2d:
         72:f7:5f:88:6f:93:43:56:94:17:5b:5d:df:c6:2e:41:16:9b:
         b2:81:41:1c:3f:33:e9:3a:71:75:de:8c:a9:45:20:61:54:05:
         9a:9e:2b:ac:2e:4f:13:76:5f:3e:ff:9f:1c:d1:e8:2e:aa:d7:
         b6:cd:27:82:b6:78:0b:a8:39:75:15:85:7f:9d:90:53:53:e8:
         45:75:2c:16:cc:11:5b:a9:fb:32:d1:6a:30:35:09:93:85:fa:
         c4:c6:c6:28:e6:a6:aa:af:48:bb:e5:80:51:3c:70:28:28:9d:
         76:21:d8:96:81:91:a1:44:82:e1:ef:a0:04:5c:29:c9:e5:97:
         a8:ff:92:b6:af:ef:34:e4:83:49:19:b8:6d:f7:76:4d:2d:c5:
         34:1a:76:b6:2e:dc:ca:f8:43:30:8e:68:a0:12:78:27:61:68:
         7d:5f:12:07:57:71:4d:34:f3:78:06:1f:ed:c5:99:c4:7c:28:
         f2:98:23:e1:26:28:20:98:81:0c:42:05:80:68:fc:94:7e:63:
         9d:84:80:49
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJ1U4KQzMnjjzN1XVMcm8IElWulQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRTkxRjQwNTIxNjRGNUE4NTU0MTY1Mzg5MzdCRkI3
NTkwNzhFMDAeFw0yNDA0MDMyMDU3MjBaFw0yNTA0MDIyMTAyMjBaMDMxMTAvBgNV
BAMTKDREOEYyOTdGMDI3RTJGNTk2NjI0NjM1MUU0RDMyMThGQTYzNzE4NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKNF5C2SY8raM3vVnQRAk6ov0
lkfDvs0dlqWSgpGguQ1uZizsa6NGK6zQCVx2a+JJUJ7z/HBZ97pU/rSVKQZC3+Cz
R6vWfiBlHAH7p9pfH/kMDP13c1dK6NWQEWgAAMxl+Vn9CU0Dr/CopMWdGst81pKE
krYdd3I/Y9ueGaUtVI6RUsRPVxF7Y45DQSPwMik2Vk2lhglWCJLbgNfhI/zdQfDq
LV0QgC4gyquE2tOun2ZSovHM054NxAW40NntHllMxJ471+D0U9qFWJVHHiD0nJm6
uK9o4Pbbk6/P6lNo2GBbtgE5pFbhx9FEgJC7pkceO6tEdVukbA46be1xrMyVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTY8pfwJ+L1lmJGNR5NMhj6Y3GE0wHwYDVR0j
BBgwFoAUnb6R9AUhZPWoVUFlOJN7+3WQeOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMS85REJFOTFGNDA1MjE2NEY1QTg1NTQxNjUzODkzN0JGQjc1OTA3OEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQkU5MUY0MDUyMTY0RjVB
ODU1NDE2NTM4OTM3QkZCNzU5MDc4RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzEv
MzEzODM5MmUzMzM4MmUzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0mITANBgkqhkiG9w0BAQsFAAOCAQEAI49ZHDviEr7y
RTamn9uVWEu/QM91JgmkLse5QncTDU9UdOQhihmNTo0sqgsoDmOVDk1Gz40tcvdf
iG+TQ1aUF1td38YuQRabsoFBHD8z6Tpxdd6MqUUgYVQFmp4rrC5PE3ZfPv+fHNHo
LqrXts0ngrZ4C6g5dRWFf52QU1PoRXUsFswRW6n7MtFqMDUJk4X6xMbGKOamqq9I
u+WAUTxwKCiddiHYloGRoUSC4e+gBFwpyeWXqP+Stq/vNOSDSRm4bfd2TS3FNBp2
ti7cyvhDMI5ooBJ4J2FofV8SB1dxTTTzeAYf7cWZxHwo8pgj4SYoIJiBDEIFgGj8
lH5jnYSASQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org