Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34322e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34322e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          gUGkwu6Q2LfxYaRfTqHMJgAvEbSsZtWF1mo+j/536Ak=
Subject key identifier:   66:CF:3A:3C:12:B1:86:28:A2:65:E2:5A:35:62:CE:47:58:A7:B0:81
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       26A73AF0EC37DB2985489881B817EF950516F7D1
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34322e302f32342d3234203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:20 +0000
ROA not before:           Wed 03 Apr 2024 20:57:20 +0000
ROA not after:            Wed 02 Apr 2025 21:02:20 +0000
asID:                     28309
IP address blocks:        189.38.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a7:3a:f0:ec:37:db:29:85:48:98:81:b8:17:ef:95:05:16:f7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:20 2024 GMT
            Not After : Apr  2 21:02:20 2025 GMT
        Subject: CN=66CF3A3C12B18628A265E25A3562CE4758A7B081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:49:3f:11:e6:97:de:48:8e:37:da:e0:ef:
                    62:c3:d7:50:57:43:4e:52:56:06:bf:a4:39:38:2d:
                    a7:27:7a:8f:87:7f:a4:9b:5e:9b:68:40:04:1f:58:
                    7a:30:b6:97:22:d3:78:da:0d:45:fa:36:84:13:fb:
                    04:47:eb:4f:d8:30:4b:82:14:c8:ed:aa:ce:48:fb:
                    b7:8a:d2:2e:02:a9:df:8a:6d:30:25:be:cf:5f:32:
                    88:9e:3a:0b:7e:8b:cb:e7:8d:03:ba:a6:6c:bd:bd:
                    76:4a:21:49:d1:45:2a:02:51:72:92:80:5a:6c:06:
                    c0:45:ea:95:ea:d6:97:6f:72:5f:ec:b5:91:ac:6a:
                    d8:dd:4a:7e:ea:58:50:d8:44:96:e6:fb:73:57:4e:
                    c6:18:60:43:87:53:99:a9:89:1d:c7:e7:91:62:7b:
                    a9:e8:73:ee:ed:f5:06:a9:06:66:62:61:5d:0f:16:
                    89:e7:34:2f:45:1a:03:c1:85:43:82:ba:d1:eb:3e:
                    2b:d1:36:d2:c9:0c:f4:99:05:31:40:22:45:c5:1f:
                    90:69:8d:6a:68:c9:85:73:82:5f:3c:f8:77:6b:1d:
                    d4:6e:e9:0c:d7:24:5d:ae:de:06:c4:f4:7c:3d:1e:
                    98:01:5f:c4:95:ce:a0:23:ac:fb:81:40:ee:65:e7:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CF:3A:3C:12:B1:86:28:A2:65:E2:5A:35:62:CE:47:58:A7:B0:81
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34322e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:10:78:fc:dd:2a:e9:f3:06:6c:b2:05:52:51:16:d6:b4:79:
         95:6a:a7:9e:fb:b8:82:92:41:43:0f:88:fa:31:8a:03:a3:6e:
         ae:71:00:b4:d3:56:a5:d2:b6:cd:55:2e:b0:09:35:7e:d0:ea:
         44:1c:3d:23:dd:fd:5b:8c:b5:56:40:d9:74:d1:21:44:3b:7e:
         88:4f:3a:2d:fd:2a:1b:90:b8:75:96:0e:4b:24:8d:ab:f5:dd:
         11:6b:3d:95:e9:b5:d1:9d:f7:f0:4a:95:bf:23:af:ec:6b:93:
         84:de:9c:98:81:d5:fc:21:b8:41:f1:1f:e2:40:2c:22:1b:a8:
         51:31:62:9d:de:c0:c6:25:3a:30:fe:70:35:00:5d:2f:7b:fd:
         ec:8f:83:58:69:e2:cb:11:2f:9c:5e:ba:f4:fd:cd:b8:dc:00:
         e3:12:80:52:99:a2:14:9f:92:de:79:37:12:a5:50:ab:0d:8d:
         d1:4c:59:ff:d3:4f:2d:0f:07:63:46:a2:e1:f4:94:8c:2a:97:
         ab:a1:b7:64:08:fd:2b:14:c7:b6:cd:3b:73:64:4e:3d:c5:c1:
         7e:3f:9f:a1:05:45:8d:5d:5c:31:b8:24:10:95:ae:36:65:39:
         e2:1d:fd:db:8c:e3:69:31:b7:95:4f:44:b9:e8:35:86:8b:7e:
         1b:5c:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org