Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          5lYV3kLAzgAxdVO2e+IC7A3rtc4KrU8Cw8ON+FOO0/0=
Subject key identifier:   B9:9B:C6:3C:77:13:B1:C6:68:45:53:E0:85:5D:FA:FE:28:91:C5:A2
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       01D250DF57EF8E74DF10146EB40F8B53693F739B
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:11:38 +0000
ROA not before:           Fri 11 Oct 2024 17:06:38 +0000
ROA not after:            Fri 10 Oct 2025 17:11:38 +0000
asID:                     264485
IP address blocks:        189.91.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:50:df:57:ef:8e:74:df:10:14:6e:b4:0f:8b:53:69:3f:73:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:06:38 2024 GMT
            Not After : Oct 10 17:11:38 2025 GMT
        Subject: CN=B99BC63C7713B1C6684553E0855DFAFE2891C5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:53:d1:d6:0d:5a:48:46:bf:5a:71:2a:43:
                    b9:4b:2d:6f:86:44:5d:6f:0e:37:0a:53:af:f7:24:
                    ff:db:8c:a5:78:c6:5f:00:e5:06:bf:d6:45:1f:65:
                    5e:7e:f9:3c:dd:03:c3:4f:86:de:62:79:e6:29:fe:
                    12:22:7f:27:bb:7d:34:c8:ee:a6:d3:5b:6b:65:1c:
                    38:72:6a:f0:f1:4b:24:77:19:8a:72:2d:e1:0e:0b:
                    56:ce:9d:49:83:50:ec:e9:00:dc:97:7a:27:66:ef:
                    c2:0e:6d:94:f6:ba:28:4f:6c:20:0b:ae:da:f4:ca:
                    6e:06:db:a2:c9:b7:44:33:69:6e:c4:92:87:fc:69:
                    58:84:f6:08:2d:41:44:07:79:57:b2:3d:cd:64:12:
                    00:50:5c:61:fa:a9:b3:5d:9a:4f:cb:7b:2e:8c:9e:
                    33:9b:a1:55:c8:da:d4:46:75:72:13:1b:97:31:82:
                    6b:3c:fa:9d:1d:5e:5f:5e:c8:cb:84:2d:25:48:1a:
                    32:59:b2:30:a7:d8:7e:3d:cb:9b:81:91:8b:6c:49:
                    97:1b:56:c2:81:8b:16:d7:d3:e6:88:6e:9f:03:53:
                    8b:c2:9b:f1:a0:02:0a:9c:9a:d3:8b:d5:60:0c:8c:
                    e4:09:7c:01:21:c6:96:9a:da:ec:ba:ef:65:43:ea:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9B:C6:3C:77:13:B1:C6:68:45:53:E0:85:5D:FA:FE:28:91:C5:A2
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:9d:42:40:63:ff:18:bf:71:6c:ff:e7:7d:b8:cb:31:63:56:
         c7:a4:5d:d3:f7:9f:6f:8d:ab:1a:96:47:53:3c:83:f5:c4:f8:
         8f:0f:7f:e6:67:56:ee:77:ed:55:1b:88:dd:82:22:c1:a5:cc:
         c2:e4:6c:58:48:4d:2f:f3:83:2d:80:27:6e:45:b1:f9:b8:41:
         9b:be:44:fa:95:79:97:cd:df:a9:4f:14:51:de:9f:79:b4:7f:
         38:e2:2c:78:03:94:ba:89:81:7a:3c:ec:04:08:a4:4d:cd:94:
         0f:98:5b:36:4d:59:a7:83:f9:c7:3f:09:f6:d9:52:d9:4d:8d:
         27:3d:da:b4:b8:6e:51:e1:f3:cf:b6:b3:4e:ab:3a:fc:50:08:
         ff:30:e4:e2:3f:8a:b1:4c:77:f5:20:29:e6:44:79:92:8d:1f:
         22:9d:7d:e5:0c:ba:ce:9f:88:e9:6b:10:60:a0:93:b1:b6:2e:
         ca:c9:12:2e:44:93:f2:d8:c0:79:00:8a:07:57:ba:2a:83:fb:
         a4:b1:73:ad:2d:6a:24:5a:3d:05:23:c0:1b:e4:ed:07:4a:7d:
         1f:dd:ce:60:2a:ed:f8:94:6d:83:a2:e8:02:32:e0:cb:3f:08:
         d9:60:58:84:82:40:ac:ba:6b:f7:cc:61:38:e0:52:18:c9:cf:
         a0:5c:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org