Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          UAFTjgttyFSwTZWHs5RsSOAV73KwmFVDvgIZIod9Qfk=
Subject key identifier:   08:33:01:AF:F9:8C:9B:32:61:1C:D6:73:F5:70:EC:46:56:53:2B:DA
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       4BEE7645E3E58E6EFA46679772B0C94A7CCCC83E
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:11:15 +0000
ROA not before:           Fri 11 Oct 2024 17:06:15 +0000
ROA not after:            Fri 10 Oct 2025 17:11:15 +0000
asID:                     264485
IP address blocks:        189.91.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ee:76:45:e3:e5:8e:6e:fa:46:67:97:72:b0:c9:4a:7c:cc:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:06:15 2024 GMT
            Not After : Oct 10 17:11:15 2025 GMT
        Subject: CN=083301AFF98C9B32611CD673F570EC4656532BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:32:ef:9a:0e:69:ec:6d:63:d6:5f:40:81:
                    27:ff:27:20:48:f0:38:0e:48:fc:6c:c6:8f:04:6e:
                    63:ed:af:40:36:79:2e:38:2e:51:9f:9f:af:54:00:
                    b8:a5:39:a8:d9:bd:f5:9b:be:f2:70:48:89:22:9f:
                    97:ea:63:7b:d4:af:8a:c9:86:29:8e:b5:f2:a5:66:
                    77:f4:32:85:04:c0:6e:86:fa:fb:d4:ff:b7:95:bf:
                    0f:15:2e:04:e6:87:ab:b8:6c:06:06:15:fc:13:a9:
                    f1:2d:b2:08:a2:ae:07:d2:be:be:8f:8a:a1:d4:1b:
                    f9:2e:65:cd:1a:8b:ae:55:e6:91:2e:cc:c5:41:c7:
                    24:88:49:ad:c2:8b:a6:2c:2f:a0:d9:17:34:b0:c9:
                    db:2c:d7:a5:31:5e:75:0a:d5:bd:5b:4b:38:ce:c1:
                    53:f3:a6:cb:2b:6b:02:44:a1:9b:a4:28:ad:c8:16:
                    39:b8:99:fe:01:dd:f5:50:4c:eb:95:11:8f:55:1d:
                    0a:95:8a:b2:32:62:56:22:ce:57:c6:fe:90:d5:9e:
                    e4:74:0e:60:20:29:42:82:24:d5:4d:c9:d2:6e:8c:
                    57:f2:8f:8c:1f:2a:6c:4d:5b:51:eb:57:11:ed:c0:
                    c3:ee:b7:4d:26:8e:fb:a8:f6:52:e6:39:2b:5d:73:
                    99:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:33:01:AF:F9:8C:9B:32:61:1C:D6:73:F5:70:EC:46:56:53:2B:DA
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:04:6a:b8:71:f4:01:57:71:ba:f2:d4:ad:ee:6c:75:9b:6f:
         bc:79:86:20:84:64:3e:69:df:41:2e:52:70:01:44:a2:e6:2b:
         ae:0c:ab:f2:06:62:fb:f4:21:f3:be:dc:67:10:cb:58:9c:d4:
         4f:45:09:91:1e:3c:33:f0:10:a0:93:29:7a:d1:c0:57:5c:b2:
         40:03:ae:48:54:fb:4e:c3:47:84:6f:0c:50:a5:d7:a8:16:1b:
         19:43:20:13:4c:89:e3:ab:24:87:db:92:8a:83:37:2a:2d:1d:
         21:27:8a:a7:01:f7:57:cf:a0:c1:98:3a:62:15:b0:46:7d:73:
         10:f4:22:5f:c3:bd:96:9d:92:88:33:37:9d:6c:f1:6a:8b:25:
         87:b8:2c:89:ee:55:6e:ca:de:7e:64:9b:bf:d1:92:9a:0d:1b:
         ba:71:92:b2:1a:31:35:b5:35:c7:05:e0:3e:33:80:67:ae:a4:
         b5:35:66:04:29:6d:4d:e5:40:17:f6:3f:6c:ea:c5:18:78:55:
         f6:ab:98:ff:af:1c:ae:16:38:92:8d:73:fb:dd:e3:24:69:bf:
         04:f9:dc:b3:ca:05:f8:25:da:11:ac:ee:c5:99:94:c2:a3:b7:
         57:3f:43:67:68:3b:16:09:f2:13:bb:0b:65:34:03:03:8c:f3:
         b8:f6:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org