Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32302d3231203d3e20323634343835.roa
File:                     3138392e39312e3134342e302f32302d3231203d3e20323634343835.roa (raw, json)
Hash identifier:          KxAdyxhNKmy68KWW0PxVCmDcCCrVjS/JnBSbGjqmwzc=
Subject key identifier:   86:F3:80:08:D2:F6:C9:20:C0:08:00:3A:16:07:0A:6F:47:85:98:8A
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       3DB1A735174D69732A785399331190A15CFC06F3
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32302d3231203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:14:12 +0000
ROA not before:           Fri 11 Oct 2024 17:09:12 +0000
ROA not after:            Fri 10 Oct 2025 17:14:12 +0000
asID:                     264485
IP address blocks:        189.91.144.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b1:a7:35:17:4d:69:73:2a:78:53:99:33:11:90:a1:5c:fc:06:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:09:12 2024 GMT
            Not After : Oct 10 17:14:12 2025 GMT
        Subject: CN=86F38008D2F6C920C008003A16070A6F4785988A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:1b:61:52:32:4f:4f:3b:8c:dd:53:27:22:
                    2c:34:40:28:b5:a7:9a:ea:4b:34:66:eb:65:fe:c5:
                    a9:2f:6a:2e:b6:b4:3f:de:27:d6:f3:e2:79:61:17:
                    71:fa:52:e4:1a:ed:4d:e6:4d:98:55:01:5f:58:aa:
                    54:49:c4:70:63:5f:13:ba:cd:15:64:71:91:67:5a:
                    1a:d1:41:ce:7d:55:1f:0e:e6:37:f6:06:50:c9:8d:
                    fd:95:2e:21:20:89:fd:72:30:f1:e7:21:f8:d7:f5:
                    6a:86:ed:38:33:0a:11:38:35:70:3a:58:be:45:f3:
                    d9:bf:a7:46:20:83:32:c0:88:f5:f5:6e:07:2a:06:
                    28:dd:25:4b:3d:bc:56:53:e9:3e:29:00:24:ef:97:
                    17:d8:bf:8c:09:fc:af:ea:4e:4a:c7:5b:6d:a8:3b:
                    2b:19:b5:e7:9f:c0:af:88:e5:fe:ff:35:41:56:ad:
                    b1:a4:c7:35:92:7d:e1:59:10:18:68:7d:5c:6c:06:
                    aa:ed:d1:69:3f:f7:17:88:e2:df:43:12:c0:90:57:
                    44:e5:bf:73:14:a4:3a:82:f4:3c:09:bf:09:34:6a:
                    96:c7:12:47:ab:be:76:95:98:c7:f7:51:09:4a:bb:
                    00:b8:cb:99:6b:3c:6e:47:14:9a:b0:e0:b9:a6:ef:
                    19:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F3:80:08:D2:F6:C9:20:C0:08:00:3A:16:07:0A:6F:47:85:98:8A
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32302d3231203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:33:04:d3:d4:ca:a8:98:c8:b2:c7:6e:20:9d:c7:94:ed:d4:
         43:84:d0:d7:b0:44:92:f3:f4:28:8b:23:13:10:aa:cc:71:c8:
         82:5a:81:c6:b0:be:6a:65:73:64:52:80:30:be:3d:b4:9f:8e:
         08:81:a2:6f:4b:fd:35:30:ee:ff:47:29:20:34:fc:17:f6:b3:
         1f:fd:d9:6b:95:c7:4c:77:4c:18:3a:b7:cb:75:d4:81:c8:7a:
         8a:66:e7:bf:ce:84:6c:f3:11:c4:1f:41:68:6c:b4:ad:34:e8:
         72:ab:fd:9b:36:9a:b5:0f:b7:ef:cd:a1:99:89:46:c1:ca:e3:
         2f:98:17:d3:ce:8e:9c:b3:c9:c9:cf:18:f8:d6:8e:c2:90:18:
         10:cd:81:9c:4a:1b:c0:63:42:41:3e:22:fd:71:52:b4:2f:49:
         f2:f9:4b:4c:d7:40:ce:45:e9:2e:b3:b3:d3:ce:9d:af:be:14:
         8d:a2:db:17:4e:76:cd:ec:0d:18:27:a4:04:13:48:66:47:83:
         62:c9:61:03:7e:22:6a:00:cb:f9:f5:ca:c1:27:78:9d:8e:1d:
         a5:54:af:c2:29:e5:60:da:2c:36:62:56:5f:b7:c7:c7:fb:4f:
         3c:e3:50:f4:9e:dc:c3:86:1b:3a:d9:03:19:92:7e:d7:4e:ed:
         93:a3:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org