Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33362e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e33362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          ToBXOi2IwXuCUmmJJWChF4dzb82BlW1XtFQftGJJL6A=
Subject key identifier:   58:13:26:4C:78:12:DB:E1:D9:ED:A3:5A:E6:F6:C2:E3:0A:B5:B9:E2
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       236886A8004F6775BA28A1D4516A090E51DD7C3F
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33362e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:20 +0000
ROA not before:           Wed 03 Apr 2024 20:57:20 +0000
ROA not after:            Wed 02 Apr 2025 21:02:20 +0000
asID:                     28309
IP address blocks:        189.38.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:68:86:a8:00:4f:67:75:ba:28:a1:d4:51:6a:09:0e:51:dd:7c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:20 2024 GMT
            Not After : Apr  2 21:02:20 2025 GMT
        Subject: CN=5813264C7812DBE1D9EDA35AE6F6C2E30AB5B9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:01:8c:13:22:7a:a6:9a:3b:36:d6:4e:ce:
                    74:02:4f:9f:c5:33:ad:f4:1f:26:2b:cc:e3:c6:94:
                    12:b2:a3:78:51:5b:2e:06:b8:ae:1d:73:a2:cb:12:
                    ea:ee:1d:37:3e:5f:a6:d4:4b:ae:cf:01:99:cc:61:
                    a1:7a:37:5f:ec:39:c1:ca:bb:76:66:f9:6e:e5:6d:
                    69:9d:66:12:45:5f:b2:52:62:3d:3e:d5:01:68:4f:
                    78:03:69:d2:db:01:5d:f5:39:ac:e2:5e:4c:22:9a:
                    a3:f9:82:b2:03:81:0b:74:37:99:71:a1:cc:a5:ff:
                    dd:e7:6a:21:05:b3:c0:22:7b:2d:5e:10:2f:b0:db:
                    58:eb:54:80:9e:d9:bc:6b:fe:d3:12:d9:c6:0f:0f:
                    4f:8d:e6:7f:f7:60:29:e5:f8:50:cc:5e:59:10:8a:
                    f1:30:42:58:12:d1:08:61:b0:02:99:c1:d5:ca:aa:
                    60:85:da:5a:f1:9c:8b:f9:54:e3:45:00:7d:1b:b9:
                    6e:b7:54:75:28:01:80:27:45:06:95:9c:4e:b4:ff:
                    13:49:8a:df:15:a6:db:3b:f9:5d:eb:c9:7d:73:4f:
                    08:e2:05:34:5a:47:ef:db:5a:50:e2:d1:a1:51:84:
                    53:fa:88:37:de:24:a5:c4:df:4d:06:3a:b7:fa:30:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:13:26:4C:78:12:DB:E1:D9:ED:A3:5A:E6:F6:C2:E3:0A:B5:B9:E2
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:9a:31:f2:69:f8:d5:28:0f:74:11:06:c2:43:2f:ad:ec:7d:
         a8:35:5a:78:03:a8:b7:29:a2:12:23:7d:af:05:0e:54:60:05:
         d7:09:42:49:90:0d:4f:20:cc:1b:d0:31:84:02:2a:0a:ae:92:
         28:52:19:a9:ee:20:a5:1b:b8:58:62:bc:18:7c:b3:1d:7a:c0:
         11:fd:07:81:11:a6:a8:a7:15:b7:bd:87:7d:21:c3:73:cf:bf:
         a2:51:69:73:e1:f4:2c:87:85:8f:a3:8e:d6:a2:6a:7b:12:aa:
         3f:d4:0a:af:f1:48:03:5e:5b:26:12:55:0b:5a:dc:7b:e4:e3:
         fa:23:e1:d3:f5:3a:8d:13:f0:ed:c3:44:40:5f:6f:ae:c9:74:
         ff:20:15:0a:49:f6:db:1e:9e:1f:9a:85:2c:f3:a2:a9:ae:c2:
         f6:f8:fc:20:c0:bd:4e:65:aa:a2:67:61:79:76:54:60:cb:9b:
         78:35:f8:50:48:4c:9a:d2:10:79:f1:4c:d7:cf:36:ed:86:c9:
         52:17:a4:db:5a:79:7a:83:d6:ac:90:fc:8f:0c:45:a6:d1:35:
         c5:ae:da:98:b3:74:c9:65:45:36:fd:da:85:53:bd:de:4e:09:
         44:7c:10:e1:96:97:97:42:cc:3f:27:09:37:b5:d2:ea:ea:c2:
         68:e1:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org