Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34302e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e34302e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          eQ26ThPy8d5trjF0Ifg6VIzBQLQDdlMGk2OWrUNWz/w=
Subject key identifier:   7F:7C:DE:84:F6:3F:09:16:81:3F:02:D6:71:A5:CD:5C:D0:3B:D4:35
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       47D393868F64D4F8E7B3729342A1E7F74A181425
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34302e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:18 +0000
ROA not before:           Wed 03 Apr 2024 20:57:18 +0000
ROA not after:            Wed 02 Apr 2025 21:02:18 +0000
asID:                     28309
IP address blocks:        189.38.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d3:93:86:8f:64:d4:f8:e7:b3:72:93:42:a1:e7:f7:4a:18:14:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:18 2024 GMT
            Not After : Apr  2 21:02:18 2025 GMT
        Subject: CN=7F7CDE84F63F0916813F02D671A5CD5CD03BD435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:c8:e0:73:d1:92:b8:93:fe:f4:84:0b:90:
                    b2:ed:68:c5:ac:7c:35:5f:90:5e:26:fe:78:f8:82:
                    21:50:68:59:84:bd:7a:c1:8d:f4:4e:67:0f:12:f4:
                    cc:82:3d:bf:fc:11:d9:b0:32:46:bc:e9:cd:05:35:
                    33:50:5e:59:bc:58:4d:30:45:18:e0:42:81:96:e1:
                    1e:fb:b8:72:e4:34:d4:d3:f5:b6:fd:e5:6f:e4:15:
                    d2:9d:5a:fb:58:bb:6f:d6:e6:18:40:f5:bc:d0:ca:
                    53:ae:7f:99:27:cb:eb:bc:eb:5c:74:5e:c5:93:e1:
                    6e:41:0f:42:c8:0b:91:73:de:d2:09:f4:07:f2:01:
                    59:cb:d0:14:ab:03:5f:5c:a1:bc:c3:97:89:c7:7b:
                    d5:e6:26:41:6e:25:91:73:ba:d1:57:db:b4:62:a4:
                    fe:f6:73:86:04:4a:7f:6c:be:19:5a:80:81:bb:13:
                    12:42:40:aa:f5:b4:99:25:07:11:e3:bd:71:bd:d8:
                    86:b2:cf:4a:71:26:fb:ff:06:88:38:ff:20:e8:bd:
                    8b:db:40:dc:46:21:8e:b2:b9:d9:6e:6d:ac:37:6c:
                    67:74:84:22:dd:eb:59:c4:bc:8f:e5:f4:1f:c4:9c:
                    cd:ab:6e:aa:f6:92:c1:80:c3:4e:76:7e:3a:14:aa:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7C:DE:84:F6:3F:09:16:81:3F:02:D6:71:A5:CD:5C:D0:3B:D4:35
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34302e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:27:15:36:20:c9:5f:4d:dd:ab:cb:f4:d2:7d:e0:24:65:b2:
         23:56:91:ee:07:1c:d0:83:a7:5a:14:28:d3:45:91:ee:de:a2:
         ec:80:49:34:19:4d:02:28:70:c9:7d:35:99:96:0b:b0:d3:b7:
         5e:71:9d:f3:33:77:27:d0:42:e3:f2:df:ff:05:96:39:46:35:
         f4:8f:10:fb:0f:c2:12:57:fc:47:82:db:9b:65:7d:da:63:89:
         fc:cc:53:c8:21:f3:f0:1c:e0:62:bc:f9:4c:b0:f2:c7:1c:62:
         a3:13:5e:df:37:d3:ab:49:0e:80:a6:ad:15:d4:ca:b0:39:ed:
         1e:b6:78:36:ec:68:dc:f9:43:e3:0a:ed:a1:88:9c:7e:c2:5c:
         af:8a:87:8e:8c:45:5f:b4:1c:46:59:56:16:b4:3f:63:1e:10:
         45:04:09:59:a4:e7:47:e9:ec:59:7d:ef:d9:fb:48:19:7e:ff:
         9e:e6:10:b8:c8:9c:b9:d6:13:9e:1e:5f:bd:ef:8e:9f:35:52:
         65:e6:fd:e4:94:ef:73:c9:57:1c:94:20:83:9e:d3:bc:0e:9a:
         14:57:0c:9f:c4:c4:ac:89:7d:1d:12:74:11:7c:a9:df:01:ad:
         08:f4:62:d3:d3:b3:c9:5a:20:b4:9a:b1:3e:22:02:63:7e:58:
         90:05:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org