Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          xoSxnUgy9yC6XvUx9M8mCgjgpU4ZjUJ6oeMkxJYI6tA=
Subject key identifier:   11:02:D1:FB:12:0C:3D:20:03:7C:66:6F:B3:BE:7A:02:A5:63:45:64
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       31C6476D7090790BD571DF0A33569EAE664E115E
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:11:00 +0000
ROA not before:           Fri 11 Oct 2024 17:06:00 +0000
ROA not after:            Fri 10 Oct 2025 17:11:00 +0000
asID:                     264485
IP address blocks:        189.91.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c6:47:6d:70:90:79:0b:d5:71:df:0a:33:56:9e:ae:66:4e:11:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:06:00 2024 GMT
            Not After : Oct 10 17:11:00 2025 GMT
        Subject: CN=1102D1FB120C3D20037C666FB3BE7A02A5634564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:56:f8:db:11:d8:d8:b6:9e:93:84:8f:f9:
                    3d:6d:97:25:8c:9b:9f:4e:a8:ea:73:58:3f:85:5b:
                    b2:43:1e:6c:0b:74:bd:5a:a7:93:8d:4a:7d:02:46:
                    d3:21:1f:94:08:33:18:16:ee:8c:cc:49:36:79:1d:
                    87:1a:54:51:76:84:68:48:c8:9a:fd:53:13:70:2d:
                    96:45:ae:c8:55:67:21:2a:43:d0:40:70:6c:53:80:
                    fd:06:1b:1f:61:20:13:2e:df:63:8c:4b:aa:11:35:
                    6d:cd:3f:a1:10:cd:bd:0b:18:4c:6e:67:6d:33:60:
                    fc:f1:85:05:f6:82:50:61:1b:5c:e8:a3:1c:11:aa:
                    54:80:ce:46:04:ea:af:84:2a:ac:96:28:c0:8c:ad:
                    fb:c4:f8:ab:6d:57:1a:30:2a:e8:64:13:6a:25:7c:
                    34:90:7d:8e:87:7c:94:98:da:9d:a3:24:7b:f8:df:
                    77:d7:c0:15:66:2f:60:01:27:4b:b1:24:e3:cd:57:
                    99:39:c6:56:52:e3:37:55:97:f5:e5:b2:0c:85:03:
                    9a:16:9a:d2:9e:ff:b1:52:72:fc:29:78:93:f3:3a:
                    e5:ab:8d:24:c8:ca:40:8c:32:51:94:aa:bd:1c:df:
                    7f:c0:74:1c:2e:43:4c:ee:af:75:36:b4:7b:ad:12:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:02:D1:FB:12:0C:3D:20:03:7C:66:6F:B3:BE:7A:02:A5:63:45:64
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:46:a1:3c:e8:95:26:3a:ed:c6:2f:cb:a6:37:d4:a9:42:6e:
         d2:fa:6f:c1:82:c8:33:49:80:d4:8c:22:43:d1:fa:ce:d5:45:
         4f:34:85:f4:47:30:f7:f1:47:18:87:f4:35:27:99:be:d5:87:
         5d:68:12:c7:cf:2d:65:b6:28:e2:8c:95:48:04:05:60:72:99:
         24:11:80:06:49:e0:d0:f4:b5:f8:2c:26:e4:51:69:10:b8:6b:
         9e:84:23:1a:c3:14:ef:b5:ff:76:5c:bb:08:1e:7a:56:1d:5f:
         8b:00:1f:78:05:b2:e3:03:4b:e4:65:8c:33:c6:ef:e5:ee:13:
         96:24:a8:ea:b7:2e:c0:bd:6f:25:1c:6d:5c:60:b4:86:df:b7:
         32:d9:50:98:ff:52:46:96:c0:e4:5e:0f:16:2d:56:58:83:79:
         f8:90:ad:dc:3c:1f:ec:7a:5e:5c:93:38:62:b6:a1:cb:13:8c:
         c8:ef:31:1a:49:1e:d9:6f:02:8a:4e:82:38:cc:00:7d:6f:e0:
         ae:40:2d:c7:72:d9:b8:0b:31:5d:f4:9a:12:22:d2:5f:ce:24:
         81:cf:00:71:ad:d9:b1:16:48:3c:34:e2:c4:88:fd:12:fd:f2:
         ab:b2:8b:3a:79:94:08:b8:c9:0e:cd:7f:03:e0:4f:61:71:f7:
         a7:d6:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:51 2024 by rpki-client on console-fra.rpki-client.org