Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34362e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e34362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          RmlJfR1ujQmJWELREOYAqzwoiKeK9P17cb5Rwj+2lcA=
Subject key identifier:   BE:DA:A8:3D:78:DE:23:AC:00:97:CD:CE:A2:48:F5:2F:CE:BD:AD:13
Certificate issuer:       /CN=9DBE91F4052164F5A855416538937BFB759078E0
Certificate serial:       6B6AEDF381438533F991CF94C8CF267459B80BDB
Authority key identifier: 9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34362e302f32332d3233203d3e203238333039.roa
Signing time:             Wed 03 Apr 2024 21:02:26 +0000
ROA not before:           Wed 03 Apr 2024 20:57:26 +0000
ROA not after:            Wed 02 Apr 2025 21:02:26 +0000
asID:                     28309
IP address blocks:        189.38.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl
                          rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:ed:f3:81:43:85:33:f9:91:cf:94:c8:cf:26:74:59:b8:0b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE91F4052164F5A855416538937BFB759078E0
        Validity
            Not Before: Apr  3 20:57:26 2024 GMT
            Not After : Apr  2 21:02:26 2025 GMT
        Subject: CN=BEDAA83D78DE23AC0097CDCEA248F52FCEBDAD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:82:d6:dd:72:6f:b6:c8:48:a1:8c:d1:41:
                    30:20:9f:60:d3:a7:04:b5:65:94:b9:cf:61:67:99:
                    75:f2:a1:45:53:c4:55:82:d0:12:be:2e:46:7e:4b:
                    d5:de:de:dd:8b:fb:ad:cc:5a:b3:80:eb:ea:8b:d0:
                    3d:74:1f:be:67:c5:69:5d:1f:17:a8:59:0d:35:fe:
                    66:1f:15:3c:4e:6b:1d:32:4a:2d:50:90:dd:22:29:
                    50:71:05:8e:a2:e1:fd:90:7a:28:fb:d9:1d:2d:62:
                    b3:22:3c:80:89:f4:fb:0b:76:50:34:a5:85:c9:ac:
                    3f:d5:02:9c:44:af:c3:dc:ce:2f:c9:cd:2c:3c:30:
                    5b:fe:7e:c6:64:2e:28:67:fd:35:4f:0d:f7:e4:bf:
                    b4:0d:72:78:43:45:fb:6f:76:8f:04:78:55:3b:d8:
                    33:69:03:2f:59:25:0a:1b:3f:74:58:97:ac:74:7b:
                    28:b5:ac:17:1c:0e:64:a2:4d:fb:04:e0:8b:0c:15:
                    a5:f8:ad:56:16:d4:ac:fc:5b:63:b1:70:b9:4d:38:
                    3b:83:e5:0e:eb:32:62:39:64:84:2e:c4:37:0e:47:
                    24:95:fa:8b:3c:40:72:84:42:dd:09:60:77:cf:f3:
                    12:f6:1f:ff:f3:c3:71:b9:bc:d8:8d:85:b1:c2:32:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DA:A8:3D:78:DE:23:AC:00:97:CD:CE:A2:48:F5:2F:CE:BD:AD:13
            X509v3 Authority Key Identifier:
                keyid:9D:BE:91:F4:05:21:64:F5:A8:55:41:65:38:93:7B:FB:75:90:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/9DBE91F4052164F5A855416538937BFB759078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DBE91F4052164F5A855416538937BFB759078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/1/3138392e33382e34362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:81:56:8b:db:1d:40:38:70:c3:80:57:c0:39:c1:1d:cb:18:
         d7:f8:9a:7a:0b:d6:e6:cd:b8:e7:5f:28:bd:0d:81:0b:cb:0d:
         4b:7f:9c:af:2e:de:13:73:10:54:81:aa:b3:56:f1:7b:81:8b:
         c5:96:ee:1c:39:86:55:f8:74:75:55:0c:6a:34:89:03:57:b3:
         43:7a:e2:70:bb:97:5a:d1:55:dc:d9:05:f8:64:e9:34:c5:b6:
         d9:dc:a5:c5:0e:1c:70:54:54:d4:07:95:b9:16:ab:8a:ae:05:
         1e:95:97:14:a1:b1:dd:de:a7:69:94:bc:d8:7b:38:b5:c2:32:
         dd:08:1a:0b:11:1e:57:02:b0:0d:5d:89:61:31:f0:a0:ec:d3:
         dd:16:e2:78:af:e4:d3:75:67:99:3a:75:9f:0e:6e:8a:5c:5b:
         b1:70:c5:a9:40:98:ef:b6:76:74:b2:86:00:3b:6b:5b:4d:8f:
         67:d2:71:59:86:13:e6:6b:39:d9:e7:b5:d6:a6:54:96:bc:4d:
         c2:59:38:db:50:d6:8c:c9:15:48:7a:21:01:f2:3b:cf:06:1d:
         07:72:04:ef:2f:9b:4e:6a:bc:01:9c:b5:a6:50:d3:5f:51:5a:
         55:b4:6f:14:93:4f:b4:6e:99:0c:98:f8:a5:1c:9e:08:34:7c:
         34:f4:79:b6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUa2rt84FDhTP5kc+UyM8mdFm4C9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRTkxRjQwNTIxNjRGNUE4NTU0MTY1Mzg5MzdCRkI3
NTkwNzhFMDAeFw0yNDA0MDMyMDU3MjZaFw0yNTA0MDIyMTAyMjZaMDMxMTAvBgNV
BAMTKEJFREFBODNENzhERTIzQUMwMDk3Q0RDRUEyNDhGNTJGQ0VCREFEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGYLW3XJvtshIoYzRQTAgn2DT
pwS1ZZS5z2FnmXXyoUVTxFWC0BK+LkZ+S9Xe3t2L+63MWrOA6+qL0D10H75nxWld
HxeoWQ01/mYfFTxOax0ySi1QkN0iKVBxBY6i4f2Qeij72R0tYrMiPICJ9PsLdlA0
pYXJrD/VApxEr8Pczi/JzSw8MFv+fsZkLihn/TVPDffkv7QNcnhDRftvdo8EeFU7
2DNpAy9ZJQobP3RYl6x0eyi1rBccDmSiTfsE4IsMFaX4rVYW1Kz8W2OxcLlNODuD
5Q7rMmI5ZIQuxDcORySV+os8QHKEQt0JYHfP8xL2H//zw3G5vNiNhbHCMjX3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUvtqoPXjeI6wAl83Ookj1L869rRMwHwYDVR0j
BBgwFoAUnb6R9AUhZPWoVUFlOJN7+3WQeOAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMS85REJFOTFGNDA1MjE2NEY1QTg1NTQxNjUzODkzN0JGQjc1OTA3OEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQkU5MUY0MDUyMTY0RjVB
ODU1NDE2NTM4OTM3QkZCNzU5MDc4RTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzEv
MzEzODM5MmUzMzM4MmUzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb0mLjANBgkqhkiG9w0BAQsFAAOCAQEAEoFWi9sdQDhw
w4BXwDnBHcsY1/iaegvW5s24518ovQ2BC8sNS3+cry7eE3MQVIGqs1bxe4GLxZbu
HDmGVfh0dVUMajSJA1ezQ3ricLuXWtFV3NkF+GTpNMW22dylxQ4ccFRU1AeVuRar
iq4FHpWXFKGx3d6naZS82Hs4tcIy3QgaCxEeVwKwDV2JYTHwoOzT3RbieK/k03Vn
mTp1nw5uilxbsXDFqUCY77Z2dLKGADtrW02PZ9JxWYYT5ms52ee11qZUlrxNwlk4
21DWjMkVSHohAfI7zwYdB3IE7y+bTmq8AZy1plDTX1FaVbRvFJNPtG6ZDJj4pRye
CDR8NPR5tg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org