Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          ehCB3teHWWUWaXts24JfQqMmiQ2RnxpTSgsBn3mqfk4=
Subject key identifier:   70:52:85:0A:87:66:C3:CE:DC:55:C6:E7:DE:8B:DC:5B:15:53:5E:0B
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       6A1DC3EB6CD82DC846DD0D544FCA294583CD7F5E
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:10:55 +0000
ROA not before:           Fri 11 Oct 2024 17:05:55 +0000
ROA not after:            Fri 10 Oct 2025 17:10:55 +0000
asID:                     264485
IP address blocks:        189.91.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1d:c3:eb:6c:d8:2d:c8:46:dd:0d:54:4f:ca:29:45:83:cd:7f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:05:55 2024 GMT
            Not After : Oct 10 17:10:55 2025 GMT
        Subject: CN=7052850A8766C3CEDC55C6E7DE8BDC5B15535E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:73:ac:23:9d:b1:4a:dd:b3:32:b2:8d:f1:
                    00:f8:12:11:d5:9a:50:9c:a7:46:4c:19:89:88:0b:
                    a0:99:89:34:49:51:a9:79:c4:36:95:2c:07:7a:f3:
                    cc:ff:d1:38:49:5b:71:78:05:69:8a:95:b5:af:72:
                    e8:c9:7f:3c:7a:3e:ad:1a:ff:dc:42:12:95:97:8e:
                    08:1b:88:45:c5:7f:ff:12:ce:33:7a:db:23:e5:85:
                    7d:64:7c:88:c2:dc:47:89:c6:82:67:81:06:74:8f:
                    c5:65:87:e0:32:34:b0:59:42:df:b8:bd:64:93:39:
                    42:4c:65:54:fb:76:e1:3d:1e:74:34:6e:12:12:9e:
                    9e:51:16:29:c0:b4:9d:c9:28:ab:f3:ce:e9:40:20:
                    1b:48:91:ea:97:df:4f:68:38:2e:13:6f:3a:45:fe:
                    33:a2:b4:0a:3b:d4:09:2a:d6:c9:aa:0b:63:2d:59:
                    58:f5:62:c3:f8:05:d2:61:33:ce:b0:86:dc:ea:bd:
                    e3:56:2e:a5:6a:a8:05:42:18:15:ef:87:5b:64:c8:
                    6c:e5:15:eb:e0:ee:ba:08:38:f7:d3:a8:c2:34:65:
                    4f:64:a2:96:69:c4:bb:59:d2:69:4b:99:3c:d7:0b:
                    fc:5d:e6:c9:0c:88:22:c7:a5:d7:38:00:0e:fe:d3:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:85:0A:87:66:C3:CE:DC:55:C6:E7:DE:8B:DC:5B:15:53:5E:0B
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:1f:a8:16:7a:b6:5c:a1:fe:df:26:c4:85:5c:1a:05:22:b8:
         ad:84:4f:ed:2e:dd:79:23:52:f7:31:2b:80:ed:b2:12:0d:46:
         dc:17:5f:0c:14:3b:48:0c:d9:c6:4f:e6:ff:f2:e6:1d:3b:be:
         fa:9f:97:eb:21:dc:75:ef:b9:7d:b1:aa:f7:be:35:c7:af:ab:
         91:8e:19:41:98:dc:b5:f3:54:75:00:6e:6d:2e:65:0f:de:46:
         a4:76:64:d6:4d:fe:be:9c:c3:45:d6:0e:25:b1:b8:f9:51:50:
         ed:d1:69:b6:c1:55:0a:56:6f:36:38:20:00:03:b4:63:60:97:
         53:31:47:3e:79:7a:30:42:45:ad:26:79:6d:2f:7a:c1:cb:d9:
         20:98:43:bd:50:24:02:42:58:3d:4f:2f:83:6b:9d:97:c5:fe:
         ef:b8:86:2d:0c:ab:f3:4b:6d:41:c0:e7:7a:f5:c1:06:41:1e:
         62:de:32:2b:ac:62:76:0f:ab:aa:30:63:69:b4:a4:78:42:78:
         11:30:14:f9:2e:6f:60:6f:91:3e:eb:5c:8b:91:30:ec:de:5b:
         b0:51:24:8f:3f:1c:0d:6d:6a:60:b6:a6:8c:15:b6:3f:47:2e:
         cb:ac:19:d8:ce:1e:7f:64:59:ce:35:fb:f7:3d:23:40:bd:64:
         29:3e:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org