Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          o+26edTaTlGS07pLCfkjtbNlKT8q6QWkkEgDGKsviEo=
Subject key identifier:   15:CE:85:00:24:51:D4:E7:31:9E:94:EC:B2:0D:CB:14:47:45:34:AE
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       57DE63DAC7CFAE3E5BF74492E9B357D52EB237E4
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:10:31 +0000
ROA not before:           Fri 11 Oct 2024 17:05:31 +0000
ROA not after:            Fri 10 Oct 2025 17:10:31 +0000
asID:                     264485
IP address blocks:        189.91.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:de:63:da:c7:cf:ae:3e:5b:f7:44:92:e9:b3:57:d5:2e:b2:37:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:05:31 2024 GMT
            Not After : Oct 10 17:10:31 2025 GMT
        Subject: CN=15CE85002451D4E7319E94ECB20DCB14474534AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:5d:34:3b:51:d6:28:90:f7:92:89:5c:4f:
                    66:17:39:d2:7f:1e:c8:7e:12:ae:db:05:f9:f4:3f:
                    08:de:c5:54:df:8e:b5:72:99:f3:bf:28:ca:b9:79:
                    6b:bc:c7:16:c3:e8:25:89:ce:f9:56:a3:6c:69:7b:
                    08:04:95:06:8b:40:58:7e:99:21:fa:9c:b4:13:47:
                    41:44:3f:8e:9f:bd:d8:90:59:22:d4:1f:7e:02:39:
                    2d:59:2a:f6:4b:94:f9:a8:b8:7e:6d:bb:41:59:31:
                    b6:f3:c1:76:4b:ce:04:11:16:f7:a9:52:df:5a:a0:
                    ce:f5:2a:ee:c3:49:da:92:fe:22:1b:ab:47:2e:95:
                    96:54:f2:8e:7a:fa:7a:f3:fb:17:66:db:5d:fe:50:
                    6d:57:c2:2b:22:c8:40:32:c7:c3:c2:fa:46:c8:b5:
                    06:ff:c8:3d:8d:df:4c:df:3e:e7:6c:c9:2b:2d:31:
                    d5:b5:1e:93:d1:32:fa:f0:cf:b2:cb:70:d9:e2:e7:
                    5e:be:7b:9c:0f:5c:09:0b:13:40:8b:3f:0e:10:b6:
                    d6:ed:4c:81:de:1b:3c:ed:42:c0:1f:74:fb:25:20:
                    a1:fd:67:9a:73:2f:aa:59:8a:99:2c:e8:aa:f7:da:
                    0d:75:c3:57:e8:99:79:33:f3:52:af:ea:f8:a9:2f:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CE:85:00:24:51:D4:E7:31:9E:94:EC:B2:0D:CB:14:47:45:34:AE
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:a0:5e:41:78:2c:8f:6f:40:30:42:d0:66:8f:99:d6:9c:
         fa:7d:45:80:a0:ba:d6:33:93:42:dd:41:78:a4:67:f9:3f:c6:
         b2:26:17:2c:78:5a:0a:ac:72:43:ab:44:00:7a:0a:8a:c4:6c:
         81:6b:c4:eb:a0:60:d4:8a:6f:0a:9c:3b:93:9a:e1:90:f3:3a:
         d3:ed:ac:0c:c7:a5:29:7d:59:55:63:c6:82:e0:30:81:7e:18:
         18:94:23:45:c6:8a:65:e3:ef:f8:3e:48:f0:06:60:af:e3:04:
         03:26:a9:c9:5e:db:61:31:00:6e:d3:10:58:3d:f7:11:f2:78:
         2c:97:47:5f:d2:ab:ef:16:c4:3e:12:86:89:4c:b6:5a:85:ce:
         9f:17:6a:f8:ec:41:c5:53:cf:c2:6d:2b:10:40:c4:78:aa:29:
         c3:50:a5:c4:bf:4f:ae:91:65:a2:b9:72:3e:35:a6:a2:5c:56:
         ab:fa:d0:e7:39:0d:88:04:7d:84:91:66:6b:46:c3:36:f9:47:
         c8:54:d3:f1:67:8e:dc:31:f9:32:0b:32:9d:0d:90:6e:c8:78:
         bb:93:d1:dd:31:aa:4a:6d:57:05:df:e1:65:3b:e6:5e:87:c9:
         f7:29:af:04:ad:61:80:22:21:da:97:74:c5:87:15:6d:b6:0d:
         3a:2f:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org