Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33342e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33342e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          86iEYixjs9sUBO0IdBGnX60kEL2tJkgqOZzpEGXu8HM=
Subject key identifier:   B9:BA:AB:C8:DD:54:90:8B:74:AE:19:13:72:71:51:61:4B:78:17:32
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       69CAA07E56312A259EEF5EC184634823E087103E
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33342e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:21 +0000
ROA not before:           Wed 03 Apr 2024 20:57:21 +0000
ROA not after:            Wed 02 Apr 2025 21:02:21 +0000
asID:                     28309
IP address blocks:        189.38.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ca:a0:7e:56:31:2a:25:9e:ef:5e:c1:84:63:48:23:e0:87:10:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:21 2024 GMT
            Not After : Apr  2 21:02:21 2025 GMT
        Subject: CN=B9BAABC8DD54908B74AE1913727151614B781732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:f1:17:4d:53:07:3d:3e:00:54:ee:84:7e:
                    ca:ec:85:6a:53:12:ab:e8:21:11:80:6b:1f:8c:16:
                    fc:78:df:5e:6b:af:53:d3:e7:4f:32:68:fb:77:ab:
                    9c:ab:5a:4a:bd:f8:52:88:45:aa:e5:9a:26:09:0f:
                    61:ee:80:a4:d9:56:75:f2:d4:41:5f:b7:d4:11:8d:
                    e2:ed:c2:c5:3e:52:15:0a:ef:dc:0b:01:db:9a:17:
                    09:97:6a:d1:49:47:b0:7c:91:81:dc:4c:7c:b4:3f:
                    a5:09:96:8b:32:fa:11:a0:af:5b:c7:fb:e4:90:81:
                    50:61:3b:3d:d9:4e:f0:20:ee:96:83:0a:fb:65:b5:
                    6a:1a:e4:71:2b:e1:a6:02:92:51:ae:27:60:d9:c4:
                    62:88:5c:0c:59:ca:4b:df:15:38:82:81:c9:ab:d7:
                    bd:11:70:72:31:aa:80:61:b5:9b:de:48:4e:92:17:
                    eb:69:bc:8f:1b:40:62:df:c5:12:40:3e:cd:91:93:
                    bd:48:c4:4e:73:1d:1e:cc:ec:f3:bc:d0:75:6e:1a:
                    1f:1a:1c:89:38:7b:35:14:08:a5:5f:87:9f:15:56:
                    5c:85:8a:d0:07:43:e3:b0:93:7c:be:f8:2a:46:ec:
                    5b:48:9f:46:ff:b0:c8:7a:32:99:51:8d:aa:ae:ae:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BA:AB:C8:DD:54:90:8B:74:AE:19:13:72:71:51:61:4B:78:17:32
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33342e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:61:a5:6a:a7:35:8b:56:a3:aa:62:fa:4a:7b:d5:e3:d7:98:
         fb:3f:24:83:00:88:84:ec:0c:1f:bb:d3:ee:ce:25:b4:62:ec:
         53:75:f0:13:e4:a5:70:3f:a6:28:d6:72:64:81:1b:6a:c0:46:
         be:de:73:04:d2:de:38:fe:30:b3:09:9d:6f:b0:48:91:e9:11:
         3f:6d:dc:08:52:af:c5:54:c5:4b:a6:5a:3a:cc:8b:b0:82:ec:
         d7:1d:e1:0e:49:9d:60:54:74:fd:60:27:bd:3c:fc:fa:dc:c0:
         34:c8:10:71:dc:16:82:5b:8f:59:e9:2f:0c:db:a2:30:e0:f0:
         25:5e:70:d3:f9:3a:d4:d0:24:8b:18:44:e8:20:2d:cd:ce:e9:
         b0:37:cb:a4:6c:32:71:37:9a:fb:35:e1:a5:5c:66:da:d4:45:
         27:4a:3b:7d:2b:d0:7f:2f:42:eb:a1:03:19:2b:55:a8:70:1e:
         d7:44:c8:f8:b2:4b:25:c3:38:e7:67:8a:84:62:2f:fc:1e:6d:
         22:4a:86:95:41:b5:b4:50:ae:e4:67:f0:06:77:de:4d:db:16:
         b8:d7:39:15:f2:b1:51:66:86:8a:00:60:3e:e2:a8:95:53:39:
         2f:4c:a0:cb:da:49:8f:3d:11:ab:66:63:18:9e:0f:b3:2a:19:
         dc:2d:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org