Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33382e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33382e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          0qEtzabjEUt9w99KIySBqLAioStd8W/mIz07w8vZtzg=
Subject key identifier:   4F:4F:8F:C9:1C:1B:4D:0A:2B:75:C0:24:A5:FD:4C:B2:7D:4B:7D:67
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       56882C51F1A9EFE4FDE538785AC48E48B4BD26CF
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33382e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:26 +0000
ROA not before:           Wed 03 Apr 2024 20:57:26 +0000
ROA not after:            Wed 02 Apr 2025 21:02:26 +0000
asID:                     28309
IP address blocks:        189.38.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:88:2c:51:f1:a9:ef:e4:fd:e5:38:78:5a:c4:8e:48:b4:bd:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:26 2024 GMT
            Not After : Apr  2 21:02:26 2025 GMT
        Subject: CN=4F4F8FC91C1B4D0A2B75C024A5FD4CB27D4B7D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:c8:44:7d:01:08:d0:fb:32:dd:ce:6c:f1:
                    37:b4:e3:2a:52:a3:b2:fa:89:1a:27:97:af:8e:b6:
                    96:09:d3:d2:31:50:89:c8:38:68:1d:da:16:ea:0e:
                    25:74:76:15:18:80:e0:66:d0:29:f5:48:46:7e:5e:
                    e0:28:9f:cd:e0:50:f6:01:2c:bd:14:e8:ac:70:61:
                    ba:d4:67:61:ad:f6:b3:a1:f9:71:b3:a4:20:06:c8:
                    20:dd:86:b3:e7:69:0e:d6:16:d1:b2:6b:49:ff:97:
                    12:65:c7:df:6a:4a:f1:14:a1:9a:14:d7:38:f0:ee:
                    0b:5b:df:07:e2:a7:72:de:f4:4f:54:28:f3:3e:d6:
                    5a:13:61:09:af:b9:51:45:37:24:37:41:f2:d4:3c:
                    5c:44:78:10:bf:5d:79:0d:20:1c:69:aa:33:cb:12:
                    d6:49:ab:ad:97:53:83:4e:6b:1f:2a:d1:1a:19:75:
                    b9:d4:10:50:76:4c:2c:e2:08:bc:aa:17:76:59:70:
                    d2:fb:e3:01:17:45:e7:fd:77:3d:85:06:78:60:88:
                    df:37:0f:e9:8a:b4:22:cc:f0:e7:c1:87:1b:27:29:
                    b4:f7:ec:90:63:1e:ed:e8:ac:57:c4:37:2e:0f:05:
                    c2:74:3f:9e:a5:a0:f8:c4:a3:9b:91:d0:df:93:dd:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4F:8F:C9:1C:1B:4D:0A:2B:75:C0:24:A5:FD:4C:B2:7D:4B:7D:67
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e33382e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:27:4d:89:06:93:e4:d9:16:bb:3d:a6:48:a8:45:f2:7a:cd:
         88:bd:c3:ce:13:1b:74:0f:9d:3e:74:e3:11:2c:8f:32:14:01:
         93:0a:1c:d3:41:a2:63:3c:8f:ea:83:fb:09:68:69:0f:a6:7b:
         06:70:3b:65:28:19:3a:49:79:a7:1b:1c:0b:e8:f0:85:b2:7a:
         37:35:08:46:49:44:e4:97:2d:18:51:75:8b:15:e7:99:47:c8:
         56:fc:ed:df:24:ef:bb:fb:c4:f4:cc:f8:b7:6e:fc:08:58:3a:
         78:bb:a6:13:63:15:a2:d8:97:22:cc:63:e4:0c:a8:4a:8b:1e:
         b3:36:93:74:eb:80:09:3c:cf:6f:1b:30:8e:c1:37:79:a6:43:
         32:3b:de:23:c3:0a:0d:4e:9e:aa:35:e8:2b:c1:16:da:2d:e1:
         71:d1:0a:e8:50:fd:13:da:00:00:4d:e1:bd:2f:88:74:50:07:
         2f:5b:0a:27:60:62:aa:bc:ee:88:aa:72:6d:ed:27:74:cb:f5:
         99:1e:db:87:4b:d5:e0:71:fd:7d:75:38:0a:8c:5c:44:eb:71:
         af:27:36:3e:b8:c7:54:c0:71:04:63:f1:3d:b8:0c:6f:ed:a0:
         e3:d7:f0:a3:a1:24:05:83:97:32:54:8d:6f:28:29:74:ab:37:
         50:5f:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org