Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          GUdUeXrNPfZHLkuLDd663emeyEjFZzWOMgYX78v/Ip8=
Subject key identifier:   6E:67:42:0B:93:5B:4C:67:76:24:49:45:A0:72:B4:67:1A:A6:34:6F
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       52592289E480103F33DA204A69E8AA7F00227B9A
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:11:24 +0000
ROA not before:           Fri 11 Oct 2024 17:06:24 +0000
ROA not after:            Fri 10 Oct 2025 17:11:24 +0000
asID:                     264485
IP address blocks:        189.91.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:59:22:89:e4:80:10:3f:33:da:20:4a:69:e8:aa:7f:00:22:7b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:06:24 2024 GMT
            Not After : Oct 10 17:11:24 2025 GMT
        Subject: CN=6E67420B935B4C6776244945A072B4671AA6346F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:c7:e4:ba:99:1d:a4:ac:f1:f7:55:8b:f8:
                    53:70:33:2a:07:01:c5:c1:c3:fc:41:b3:52:11:71:
                    a9:12:9d:94:cd:68:ab:bb:0f:02:31:09:49:76:0c:
                    d5:11:0a:1b:ed:3e:b9:24:39:86:41:75:98:a4:be:
                    4f:cf:e8:f8:ea:e5:ff:24:e0:c9:2e:5d:c3:74:56:
                    96:f6:1a:12:18:92:60:2d:73:1d:47:33:e5:41:8a:
                    5e:50:65:41:69:69:08:3b:64:4d:87:9d:4e:d2:13:
                    d6:d8:73:6e:92:15:87:80:e6:5b:7a:f5:29:6d:8b:
                    b3:e4:d7:3f:41:6f:e6:a3:d1:1e:8b:de:eb:7b:38:
                    f4:94:36:99:1b:1b:b4:b9:5b:83:2a:8d:39:53:29:
                    23:82:28:e3:bf:de:39:dc:db:07:e4:f5:20:bb:00:
                    ed:0f:14:92:e9:46:9f:1d:99:02:e9:84:d0:5f:2f:
                    d3:3d:fe:77:a5:d9:52:ec:5c:13:6d:cd:32:b0:21:
                    9d:82:38:c7:43:6f:f2:6c:af:17:a9:09:c6:ff:03:
                    b6:4e:59:33:dc:94:fe:df:16:6b:a7:ed:4c:96:ee:
                    3c:bb:c5:61:49:bd:a9:46:f6:67:6e:7d:dd:21:9b:
                    76:09:10:2a:f9:ca:94:ff:78:37:1d:d2:63:a8:ea:
                    7b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:67:42:0B:93:5B:4C:67:76:24:49:45:A0:72:B4:67:1A:A6:34:6F
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:8d:5d:6a:59:ed:10:8c:ea:df:0a:e8:b2:07:03:81:7d:
         e8:aa:6d:85:2f:98:18:1f:25:30:71:be:4c:a9:49:03:ff:0c:
         c1:74:a2:de:35:6e:f9:26:1a:72:8e:27:fb:31:b2:c5:46:81:
         7e:8e:2b:a0:b6:bc:04:3f:99:f9:a1:99:a4:53:1c:94:35:67:
         b0:9e:c6:c6:05:24:db:4d:17:d0:11:58:51:b8:d5:8f:07:eb:
         b0:56:ad:bb:ff:73:44:c7:cc:4b:f6:25:ef:bd:bf:1e:80:c2:
         49:2b:92:6a:22:3a:25:7f:4b:25:f4:4b:34:b7:9c:dd:a3:69:
         e7:89:8d:e3:20:f3:e3:c1:8f:58:b3:22:de:22:6c:1d:be:f7:
         34:92:b1:cf:0a:d0:91:fc:43:95:8e:07:06:11:5e:17:96:0c:
         e5:b8:6b:5b:ba:f7:b1:37:24:c6:58:3d:da:77:d0:8b:15:73:
         e0:7d:fe:55:bf:70:c0:32:bb:70:a3:1f:60:4d:37:cf:e4:77:
         71:05:ea:e0:ff:76:c5:1c:1f:97:8b:c8:cd:8e:57:92:6e:2d:
         bc:16:e3:08:8d:f9:ee:35:f0:9a:ac:83:f4:c4:20:71:f9:49:
         71:ea:02:58:7f:43:cd:b3:b7:ba:94:da:4a:a3:fb:bf:58:0b:
         a7:f4:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:51 2024 by rpki-client on console-fra.rpki-client.org