Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34302e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34302e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          ZKtcALuWLG/n59m2F2hUtBgYrAWd8pDW8Nz2IdapKBg=
Subject key identifier:   23:D0:52:66:9E:35:FE:AC:72:AA:82:9D:34:53:E2:C7:B7:C7:3F:D8
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       8797B1F4CEC61C556CEC091B40522298605C21
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34302e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:27 +0000
ROA not before:           Wed 03 Apr 2024 20:57:27 +0000
ROA not after:            Wed 02 Apr 2025 21:02:27 +0000
asID:                     28309
IP address blocks:        189.38.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            87:97:b1:f4:ce:c6:1c:55:6c:ec:09:1b:40:52:22:98:60:5c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:27 2024 GMT
            Not After : Apr  2 21:02:27 2025 GMT
        Subject: CN=23D052669E35FEAC72AA829D3453E2C7B7C73FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:6e:db:cf:cd:87:9c:a6:e9:53:2c:c5:92:
                    5c:08:1e:e2:f1:23:a2:1f:d9:d6:14:bf:28:55:4b:
                    41:c7:e5:36:90:ee:53:c1:d7:3a:f7:ac:ab:23:9a:
                    f5:7d:bd:1a:67:99:4b:1a:78:c4:d6:5a:31:45:68:
                    4e:72:e6:e0:c8:39:4b:bf:7c:72:fe:99:fd:00:f4:
                    66:a6:ba:6c:c0:74:af:13:bd:dd:9a:4c:e1:f8:7f:
                    58:91:ea:54:c6:5c:ab:8d:c3:fb:1f:24:a3:e5:20:
                    2d:33:fb:fa:11:ee:d1:58:32:43:80:d8:dc:59:c2:
                    ef:a1:7e:1e:e2:f9:bb:c7:6c:b4:f3:95:62:27:b7:
                    b8:aa:7a:a3:5b:63:e9:21:b5:f6:ec:9f:05:02:94:
                    6b:f3:be:b6:01:40:c5:9f:2e:cd:e5:36:16:c3:b1:
                    9c:48:8c:93:a6:c2:d8:a3:94:2f:89:95:9b:f9:7b:
                    79:bb:14:09:c6:91:28:1f:69:76:8a:9c:e7:d2:de:
                    71:1c:e5:f3:eb:d6:51:2a:8b:82:30:2d:17:e3:db:
                    35:7e:ea:29:77:fb:02:cb:e3:71:23:ba:53:9b:f0:
                    4a:ec:a7:09:51:b0:ce:1e:c5:25:41:75:3d:b4:0b:
                    dd:5b:bf:83:8d:6a:52:34:7e:2b:18:f0:b1:04:3f:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D0:52:66:9E:35:FE:AC:72:AA:82:9D:34:53:E2:C7:B7:C7:3F:D8
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34302e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:a7:70:61:59:9c:08:3a:1a:61:0f:60:ef:7d:46:2b:4c:
         c5:da:03:e7:cd:ab:ed:47:9c:b9:66:d2:59:eb:ab:7d:c5:0c:
         86:5a:b7:31:d1:37:7d:5f:b3:9e:42:4a:2c:60:be:bf:07:31:
         a5:ff:83:0c:67:78:57:eb:6c:c5:50:6b:d5:bd:57:95:02:76:
         4e:59:be:d1:a3:9b:cf:81:f4:a4:ad:42:02:d5:03:20:28:ad:
         94:53:2c:92:e7:9e:24:cf:ec:19:b1:73:5a:dd:b6:32:fd:88:
         c5:7e:54:5a:98:4c:d1:b0:1f:9a:4f:b6:d1:5d:73:ea:ed:90:
         47:11:cb:9f:6e:6f:31:31:23:5d:13:35:88:d6:f5:3e:ef:c7:
         37:01:85:96:36:31:1d:7d:5a:70:9e:d6:dd:5e:61:7b:97:9a:
         b2:24:d1:07:18:78:12:49:78:a2:48:15:53:4a:f7:bc:8f:7a:
         7d:bf:a9:a8:5c:31:16:fd:b7:b5:e4:ea:9d:15:f4:a1:dd:79:
         ee:06:68:05:84:6b:61:91:2e:0a:1a:3e:d8:5a:f6:d6:ee:c9:
         33:55:3a:9d:3c:79:4a:0a:88:7d:c9:ce:47:db:e9:49:95:68:
         46:00:da:cd:cf:77:dc:2b:20:f4:ad:c8:47:69:72:4c:15:f1:
         2d:a2:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org