Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135392e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135392e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          YAeBvrVmYX5306nBPAdVArwVnR96oo9eooUX2GvI8tc=
Subject key identifier:   61:72:E4:05:5A:19:BC:B9:AB:B7:FD:8F:EC:CC:F4:64:4F:FD:88:31
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       0C111C0F83BF18C8D4AE379F851B6F9E62314524
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135392e302f32342d3234203d3e20323634343835.roa
Signing time:             Fri 11 Oct 2024 17:13:31 +0000
ROA not before:           Fri 11 Oct 2024 17:08:31 +0000
ROA not after:            Fri 10 Oct 2025 17:13:31 +0000
asID:                     264485
IP address blocks:        189.91.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:11:1c:0f:83:bf:18:c8:d4:ae:37:9f:85:1b:6f:9e:62:31:45:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Oct 11 17:08:31 2024 GMT
            Not After : Oct 10 17:13:31 2025 GMT
        Subject: CN=6172E4055A19BCB9ABB7FD8FECCCF4644FFD8831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:da:75:26:56:e5:dc:cb:88:8c:74:1d:78:
                    17:22:d3:b1:17:f8:31:be:8f:a5:92:00:04:9c:46:
                    9e:4a:8c:04:ba:e5:57:37:72:d0:e0:2b:78:bb:e7:
                    f6:d7:85:3a:66:74:1d:5b:f9:62:f9:57:c5:24:c9:
                    e0:f9:ff:b7:36:82:4e:8b:ba:c9:5e:af:1b:d7:fa:
                    e9:10:0c:e5:e5:3c:2d:70:fb:18:f3:4d:af:1e:45:
                    29:1f:08:e7:1a:39:08:ef:0d:10:a1:e3:17:00:90:
                    71:99:04:c5:7b:5b:80:78:f8:bb:52:10:3f:8b:19:
                    55:51:7f:c0:f3:15:91:8b:29:e0:36:e8:53:a3:fa:
                    30:50:0e:d6:e0:52:78:e5:bb:54:a0:02:70:cf:34:
                    c3:7c:cb:81:d0:b2:4c:ba:3f:e5:b3:f1:db:23:ee:
                    6e:7c:1c:22:69:2c:cc:a0:f4:d5:65:15:af:f1:02:
                    73:cc:27:3d:a6:e8:91:ff:c8:15:ae:fb:2e:67:22:
                    69:b2:6b:3e:f3:b3:46:fe:08:26:f7:de:b0:ce:cb:
                    30:b6:79:c0:3c:b8:e1:fb:18:40:8d:f1:83:f5:a4:
                    9d:28:ca:e0:36:96:2b:85:6b:82:a0:b9:a3:1d:78:
                    61:78:1d:96:3e:2e:4d:30:85:60:3f:74:6b:e6:9f:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:72:E4:05:5A:19:BC:B9:AB:B7:FD:8F:EC:CC:F4:64:4F:FD:88:31
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135392e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:6a:98:0a:c5:96:0f:cf:a9:77:86:f6:95:23:d9:ff:f9:
         43:57:02:5a:4c:7b:38:4f:58:fd:d7:4f:67:ae:e3:ad:01:f7:
         61:92:54:62:f5:5f:76:aa:4d:4f:27:df:41:5e:ac:be:8d:bc:
         d4:91:1c:8a:37:9d:72:eb:87:f3:f5:1f:d9:6b:ac:db:03:19:
         4c:13:10:f4:da:38:a3:71:71:e3:47:a4:ec:1b:1a:71:0d:3b:
         06:42:45:d2:3a:17:b1:78:4f:57:95:24:10:35:35:14:89:5d:
         c9:c8:50:f7:3e:a9:75:ce:f5:7b:1a:f6:fa:ed:99:6b:7c:5d:
         98:ec:b8:dd:5a:9f:47:dc:50:98:a7:cd:9f:e7:82:98:71:15:
         e1:89:df:f9:58:0d:67:67:0b:b7:a6:38:2c:28:68:04:21:a4:
         5d:83:16:2a:d9:0e:53:04:1b:59:77:ea:37:af:76:2e:77:4a:
         82:04:30:f3:df:bb:8a:17:50:ea:12:b4:89:ee:6b:50:d1:26:
         fb:36:ea:84:10:50:71:3f:e5:95:b4:be:e4:c3:b2:fd:dd:48:
         b9:bb:26:ac:56:04:84:9d:df:bd:82:37:17:32:e7:e4:d9:ae:
         9b:23:90:a9:cd:d3:66:26:de:cb:50:30:38:b7:37:7d:ab:74:
         cd:7a:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org