Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          3w/TvA7El/aioksstz8SaGXo1I8wjlztCLgjGpB9Fy0=
Subject key identifier:   D1:DF:A7:EB:8A:32:82:FA:B4:DA:CB:67:1A:EB:18:3F:D2:D6:FA:D6
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       68170530BE06730EAB7C74A76AB671BD5F6A7704
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:11:34 +0000
ROA not before:           Fri 11 Oct 2024 17:06:34 +0000
ROA not after:            Fri 10 Oct 2025 17:11:34 +0000
asID:                     264485
IP address blocks:        189.91.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:17:05:30:be:06:73:0e:ab:7c:74:a7:6a:b6:71:bd:5f:6a:77:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:06:34 2024 GMT
            Not After : Oct 10 17:11:34 2025 GMT
        Subject: CN=D1DFA7EB8A3282FAB4DACB671AEB183FD2D6FAD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:16:13:72:de:78:86:fa:12:09:7e:86:ac:
                    b3:5a:44:d8:7e:af:67:e9:14:39:1d:22:bf:7a:30:
                    91:40:f9:7d:29:d9:50:3a:fd:ff:77:2f:0a:90:4c:
                    40:39:b7:7c:8e:fa:29:2b:bc:c9:cf:dc:3c:43:d7:
                    9e:5c:e3:c3:df:9b:7b:2f:ec:ca:12:a4:b4:2b:8a:
                    bb:36:06:38:4c:91:10:c1:81:0e:15:59:c3:2f:9d:
                    11:e6:8f:88:74:9a:b8:8f:38:2b:3b:ab:50:91:8b:
                    34:96:9b:b1:12:1b:30:d9:d9:a1:77:91:b1:fd:af:
                    0c:d6:92:50:45:b1:29:ed:66:0d:84:05:53:b1:0e:
                    2d:c5:ad:65:02:d8:f1:05:fc:61:82:b3:03:49:00:
                    e3:64:54:b3:4d:85:ff:7b:61:ba:64:c8:51:4a:57:
                    9e:08:6a:7b:a9:30:27:43:7d:30:de:1b:15:dc:a6:
                    ea:7c:08:68:27:5b:84:64:aa:1d:b7:87:3a:34:6b:
                    99:aa:fa:07:22:f3:bd:76:5a:65:51:e4:e4:f6:d9:
                    b6:cc:d5:3c:b6:1f:ca:5d:0d:2e:f4:bd:4d:2b:e5:
                    78:27:f6:35:3a:f9:8c:45:5d:0a:71:b4:06:90:e9:
                    12:28:7d:c8:ea:22:60:ac:da:4c:b4:d0:25:76:f7:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DF:A7:EB:8A:32:82:FA:B4:DA:CB:67:1A:EB:18:3F:D2:D6:FA:D6
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:da:18:78:12:0f:90:d4:cc:0e:07:aa:58:e7:74:4c:ce:ae:
         0b:3a:a5:56:25:0b:22:fb:58:42:2c:98:7c:b0:18:b6:7d:7d:
         c4:1d:d9:3d:68:bd:3b:a0:16:2d:ab:45:56:12:16:90:ef:94:
         b3:56:04:4e:67:d6:c4:8d:41:07:e8:d0:1b:7d:16:1a:4b:fd:
         a3:c5:01:68:e8:a9:d9:27:4f:04:94:eb:cf:f5:0a:81:81:fa:
         27:a1:5c:7a:51:f7:b5:69:30:69:c7:df:fe:2c:62:25:40:4d:
         53:11:f4:fd:6f:33:9a:0f:b5:42:54:a0:72:1e:8a:b7:09:b1:
         b8:12:03:1c:73:b3:ce:b2:f2:a8:b9:3a:89:54:7f:ae:52:63:
         02:8e:27:e1:2f:38:3a:a1:ad:ce:5b:20:d4:62:7b:3c:e6:5e:
         6c:89:cf:a7:62:de:0f:72:ce:ee:9d:dd:34:40:6e:22:85:c6:
         d3:06:60:04:73:3e:4f:f7:ee:67:bb:c3:c4:34:73:a4:b3:83:
         b5:71:81:78:51:99:bb:61:74:d2:5d:64:ec:e2:43:70:1f:95:
         b1:48:95:19:17:14:be:d4:98:8a:aa:19:b8:42:cf:34:ef:15:
         06:05:be:42:3b:69:f2:d4:0d:4e:62:80:86:1e:50:35:35:a8:
         1f:73:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org