Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          TRm8FmgjiliRQJy82aAWRTQ0eJU25iaiDl0tQvwpQOA=
Subject key identifier:   82:04:F2:DB:38:0C:6D:7D:E5:E1:75:58:68:4F:8A:C4:C7:FB:11:53
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       596E9B84A10DDFE2278A180964055D785437A4A5
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:11:09 +0000
ROA not before:           Fri 11 Oct 2024 17:06:09 +0000
ROA not after:            Fri 10 Oct 2025 17:11:09 +0000
asID:                     264485
IP address blocks:        189.91.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6e:9b:84:a1:0d:df:e2:27:8a:18:09:64:05:5d:78:54:37:a4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:06:09 2024 GMT
            Not After : Oct 10 17:11:09 2025 GMT
        Subject: CN=8204F2DB380C6D7DE5E17558684F8AC4C7FB1153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:21:90:56:73:43:82:5a:cb:99:e9:a6:4e:
                    51:da:a3:9e:c0:14:25:33:df:2e:99:ec:bf:98:05:
                    23:b8:16:93:e5:ee:75:46:67:e5:45:f4:20:bd:b6:
                    2d:91:11:42:a8:56:a0:de:9d:13:14:32:32:e2:68:
                    8e:df:75:29:af:bc:30:8f:34:2e:48:ca:a7:24:b4:
                    59:d1:cc:ed:77:35:fc:17:2f:2a:e0:82:43:82:c4:
                    52:42:63:d5:c0:a4:d0:8d:1a:74:70:ee:37:87:6d:
                    5c:34:58:d0:c3:67:02:e0:9e:82:39:8b:ae:d5:32:
                    cf:f3:30:71:c0:64:f5:f3:ad:39:4a:c0:25:79:68:
                    48:e3:b8:26:d3:2a:b2:a8:1b:2e:fb:d8:52:d0:55:
                    79:27:ec:4d:4a:82:5b:51:30:3b:c1:7d:31:00:f9:
                    e0:79:d5:ca:63:f0:43:7f:7c:32:04:7c:49:a1:ef:
                    8d:54:4d:15:54:24:61:25:ce:cf:18:be:24:86:38:
                    f1:89:ff:45:e5:8e:46:fa:66:ff:93:58:d8:39:b1:
                    db:ba:a3:32:a5:e2:a5:c6:d9:b4:17:6c:fa:43:fb:
                    54:5e:96:23:e9:85:05:05:dd:e1:f0:ec:7b:9e:88:
                    d6:8d:68:56:76:34:a8:4f:5c:b7:53:65:80:0b:5a:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:04:F2:DB:38:0C:6D:7D:E5:E1:75:58:68:4F:8A:C4:C7:FB:11:53
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0d:82:94:03:2e:9f:65:e3:11:46:75:5d:1a:02:28:8f:a8:
         2e:9b:e4:7c:9c:e6:73:e6:f3:32:7d:b0:84:43:67:c7:49:2f:
         3c:ff:46:d0:5c:b0:c3:9b:d5:8c:30:30:8a:8c:e4:db:2b:d0:
         fd:b9:39:b1:6e:a0:a6:9b:20:8d:af:d0:21:8e:70:d2:88:5d:
         f1:22:d4:b9:d2:d8:0a:53:10:3c:53:40:fc:ba:c0:20:00:71:
         1a:b4:93:4e:93:f3:8e:38:9c:e6:dd:2a:3d:84:a4:e2:69:a2:
         6c:38:8c:f8:4d:80:38:49:f6:55:8b:35:54:b8:f1:a5:16:80:
         01:da:6f:3a:37:2d:92:1d:b7:bf:4c:81:43:6a:c8:75:81:e4:
         ed:05:4f:57:52:ae:86:54:78:b0:0e:19:fb:3b:3b:45:02:3c:
         f8:65:f4:29:77:c3:28:48:16:81:73:14:b0:45:1e:24:07:9b:
         ac:b8:6c:2b:1e:81:5b:24:fb:9c:2b:ba:f3:86:47:f8:d4:42:
         c9:46:78:7e:a8:27:f4:38:2c:34:7a:6b:01:0a:2b:3d:d6:b6:
         3d:55:4c:28:9c:2c:49:ca:b2:d2:cc:87:bd:b0:0c:c2:54:60:
         dd:bd:d1:e8:a0:48:8e:ee:cb:32:a0:55:e4:40:50:04:31:91:
         29:1d:9f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org