Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33342e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e33342e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          7AMb7lFPvTurPZIh+Qs9FNijK78koTyozHcOILspyxs=
Subject key identifier:   A0:A8:2C:6E:B7:5F:62:73:3B:D6:5F:FC:EF:75:2D:3B:C6:F6:DA:CB
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       4DFD914310E430A126518A6ED44603E3B5E9AC7C
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33342e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:22 +0000
ROA not before:           Wed 03 Apr 2024 20:57:22 +0000
ROA not after:            Wed 02 Apr 2025 21:02:22 +0000
asID:                     28309
IP address blocks:        189.38.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fd:91:43:10:e4:30:a1:26:51:8a:6e:d4:46:03:e3:b5:e9:ac:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:22 2024 GMT
            Not After : Apr  2 21:02:22 2025 GMT
        Subject: CN=A0A82C6EB75F62733BD65FFCEF752D3BC6F6DACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fe:62:0b:28:3f:11:56:c0:30:8b:4b:2e:d1:
                    2b:45:0e:69:49:c8:8d:db:07:d0:61:9d:7d:07:65:
                    0d:d9:4d:3a:e0:7f:83:74:0a:6a:99:1d:53:38:f4:
                    ed:ca:cf:c8:8b:d3:b6:e0:cb:6b:c9:3b:3d:66:56:
                    e2:51:19:67:8c:96:6e:95:99:9b:20:5b:d8:99:5a:
                    00:4f:35:b9:2c:83:35:07:0b:77:3c:3a:37:8f:e9:
                    57:1b:55:5a:85:06:e6:fe:04:53:ad:9f:e9:0d:57:
                    c2:ce:26:9f:92:7c:e1:32:0d:73:f0:94:f6:b8:c0:
                    94:74:ef:63:65:6e:d5:03:e4:52:9c:fc:57:1c:c0:
                    8d:68:7d:14:ea:ff:ef:a6:03:a3:3b:df:40:2b:ce:
                    2b:5b:71:3b:19:45:14:26:72:7e:14:8f:1b:4e:ac:
                    6e:13:3f:73:98:95:3b:1d:c6:38:dc:25:5b:4d:b7:
                    5a:ed:eb:2e:de:b6:49:8f:86:21:c1:57:7f:a1:60:
                    c8:06:72:ec:b5:c2:7e:b8:ec:c7:cd:e2:88:0c:60:
                    d7:23:46:d1:63:75:44:f9:fa:d2:13:a3:64:bb:66:
                    8c:18:21:02:c4:16:4e:30:2d:46:fe:9d:89:d8:b5:
                    35:b0:13:46:15:74:79:fc:6e:47:09:25:0d:2b:b9:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:2C:6E:B7:5F:62:73:3B:D6:5F:FC:EF:75:2D:3B:C6:F6:DA:CB
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33342e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:10:f8:aa:67:7b:43:b4:58:43:99:7d:52:95:e7:25:13:bc:
         cc:27:91:c4:27:d2:3e:f1:70:5a:3b:9f:a8:26:78:f8:59:9e:
         55:12:2a:9a:45:c9:07:51:4b:13:5f:61:b9:6a:73:4e:79:7f:
         b3:81:94:12:2e:1f:35:8b:08:c7:04:7f:75:75:ed:18:6a:77:
         59:9f:8d:d5:5e:8c:ca:41:c6:b4:b8:0a:2a:0e:9e:63:82:8a:
         1d:36:e6:43:66:01:89:11:2e:a2:fa:9a:19:8c:0e:ea:5a:be:
         ef:af:85:32:19:4a:e1:af:80:f8:86:08:41:ff:5d:4b:b5:10:
         18:b0:e4:e1:61:de:2b:13:36:6c:87:37:7e:ba:9b:c5:28:91:
         1f:a4:dd:31:8c:f3:ec:ef:66:df:75:e7:06:c0:51:e3:f0:86:
         63:d4:ac:5d:e6:eb:f1:cc:83:63:a8:16:6f:fb:c4:63:b0:55:
         28:6d:4d:76:22:de:1d:57:f9:fd:16:9d:d8:3e:6c:3a:0e:07:
         fb:4e:8f:59:a6:b6:ff:9e:65:6d:e6:fe:3f:8a:56:34:8e:95:
         83:52:12:0d:51:25:66:b3:4e:9b:cf:33:b6:cd:ac:cc:fc:4b:
         26:85:f0:bd:d9:99:1b:f6:32:5e:ce:ec:02:1c:b9:cd:a2:92:
         2c:d7:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org