Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134352e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134352e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          D9dQeLMbQ7d2I9XE5A4fU2StyyVTVJFlsoB0EfTpvOw=
Subject key identifier:   D2:81:1B:31:13:17:3A:59:62:CA:D5:62:08:6E:A7:EA:21:59:41:72
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       54C63116CF5C9998EA498991E4F1E7E1A017E3E5
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134352e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:10:38 +0000
ROA not before:           Fri 11 Oct 2024 17:05:38 +0000
ROA not after:            Fri 10 Oct 2025 17:10:38 +0000
asID:                     264485
IP address blocks:        189.91.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c6:31:16:cf:5c:99:98:ea:49:89:91:e4:f1:e7:e1:a0:17:e3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:05:38 2024 GMT
            Not After : Oct 10 17:10:38 2025 GMT
        Subject: CN=D2811B3113173A5962CAD562086EA7EA21594172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:ef:a7:58:36:75:31:4c:04:09:ff:9b:f3:
                    4e:70:82:f3:de:b1:4b:d2:29:49:3e:b0:14:df:97:
                    c1:44:82:a1:88:ea:7d:82:ce:4d:6e:09:cd:c2:f6:
                    ee:8d:61:22:91:8e:b0:67:ab:79:28:c4:a8:5f:64:
                    3f:dd:b3:4d:81:36:57:51:40:2e:a5:2f:3e:55:6f:
                    2b:d7:29:63:b8:3c:ea:43:80:00:fa:ad:6f:7f:e2:
                    67:b3:da:59:ab:ef:88:29:8a:28:81:4a:a8:4e:41:
                    28:63:aa:16:e3:b2:b3:05:76:38:c5:6a:92:7d:2f:
                    00:da:6b:81:62:4d:eb:97:f0:b9:d3:97:ff:b9:72:
                    70:16:9f:93:bc:5a:e0:5c:c9:68:ff:b7:e3:87:cd:
                    1b:96:3f:a5:10:ce:82:1d:a7:d9:25:1b:90:69:5d:
                    56:6f:9b:7a:69:0f:07:ab:18:86:98:62:0a:c3:11:
                    7a:20:bd:3c:a6:19:34:36:84:94:90:e9:e2:94:39:
                    d4:a6:da:43:d2:ad:16:d8:85:2d:2a:17:ad:ab:74:
                    6d:0f:e7:41:3b:41:5a:9f:43:ae:54:d7:8a:9c:1c:
                    51:8c:99:43:44:f2:2e:2a:79:31:2a:0d:93:ba:69:
                    31:e8:9b:b7:2b:94:45:d0:d1:63:ee:06:47:ca:38:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:1B:31:13:17:3A:59:62:CA:D5:62:08:6E:A7:EA:21:59:41:72
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134352e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:bb:6b:99:bf:1f:a6:89:36:d8:ff:44:83:d7:4a:6e:f7:
         d9:ea:2c:f9:f7:96:0b:fc:23:b7:b1:b3:61:2b:54:21:4d:ca:
         5c:ea:ab:6d:6c:06:0e:1b:62:5e:fb:62:08:87:06:a9:cf:f3:
         e8:04:15:14:4d:87:d7:dd:72:fe:ba:7b:ab:3a:87:c9:67:6e:
         bc:f3:00:2e:5c:2a:db:8c:57:67:fb:87:4c:de:2f:74:94:d5:
         23:68:b7:a0:9f:dd:b5:9c:9e:71:5c:2a:c3:01:e8:86:e3:8c:
         e7:98:c5:52:78:23:2c:11:73:05:6d:66:29:6e:b8:a2:94:be:
         05:20:5a:b2:45:d0:f5:88:3f:f6:08:73:cb:11:89:b4:1c:00:
         66:24:b3:98:7d:2f:78:20:eb:26:c6:0c:11:eb:a4:a5:4e:e7:
         7e:8f:0a:a8:77:3f:de:73:94:d4:80:1a:6b:88:83:fc:6a:06:
         c3:97:72:f5:3e:eb:e3:0b:e6:f8:48:5d:41:5d:7e:ef:92:7c:
         a7:90:b2:b3:fc:4c:77:4e:0c:12:b7:56:e2:df:c3:60:6b:10:
         6f:2d:43:bb:fa:8e:01:e5:0a:9b:a0:56:41:6b:03:cc:51:e3:
         2d:7c:11:53:df:c5:d2:53:50:05:7b:e7:33:9e:9c:22:3c:26:
         85:58:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org