Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32322d3232203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32322d3232203d3e203631373539.roa (raw, json)
Hash identifier:          CcN7PbBi/SlAPmNi4QVObf327IU1N8lceJHHaYBEwXk=
Subject key identifier:   1C:04:BF:A4:D6:2C:55:8E:A4:97:7E:C3:56:B3:68:03:C5:37:F8:C9
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       0A36E0F864DC907499D00AF0EE0F0D9EE379B654
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32322d3232203d3e203631373539.roa
Signing time:             Wed 03 Apr 2024 18:30:28 +0000
ROA not before:           Wed 03 Apr 2024 18:25:28 +0000
ROA not after:            Wed 02 Apr 2025 18:30:28 +0000
asID:                     61759
IP address blocks:        131.100.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:36:e0:f8:64:dc:90:74:99:d0:0a:f0:ee:0f:0d:9e:e3:79:b6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Apr  3 18:25:28 2024 GMT
            Not After : Apr  2 18:30:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:cc:d3:e1:3f:60:47:5a:43:40:af:a6:a4:
                    fe:e9:f3:d1:b0:7c:f5:27:b6:4f:86:26:bf:f6:a5:
                    bf:a2:a7:cb:3d:e7:d8:36:b9:85:cc:d1:4b:52:bb:
                    93:c4:46:33:f3:f3:6e:9d:82:44:70:f9:92:5d:5f:
                    b0:e5:2d:bd:f6:c0:9b:5e:79:78:b9:63:c7:02:13:
                    b7:df:0d:41:6c:d0:be:7e:b4:35:6d:95:3a:75:db:
                    44:59:2d:60:cb:16:b9:00:f6:c5:cf:38:11:88:30:
                    21:51:d2:fd:a8:c6:b4:52:a5:04:e9:31:59:32:a2:
                    38:38:ab:69:6f:cd:2c:15:c7:34:ca:3b:84:73:b0:
                    0f:bb:e9:a0:1f:a8:ef:c4:c4:b7:e0:11:38:56:f0:
                    f8:54:a8:1f:58:a8:4c:31:51:e7:92:ce:ae:2f:6f:
                    d5:e1:91:bf:e8:83:76:bc:5e:78:19:de:92:fe:87:
                    1c:cb:40:db:ca:66:77:e8:95:3a:99:0d:18:c5:65:
                    62:5c:ca:23:de:a6:a9:a5:10:db:92:f0:32:15:41:
                    0b:48:9b:37:87:ed:28:0c:2f:4f:25:4a:32:92:22:
                    42:7a:ae:0f:27:d2:91:4a:5e:e2:10:38:c8:cf:16:
                    89:9b:66:87:3a:78:e5:a9:5a:66:d7:d6:e9:62:8f:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:04:BF:A4:D6:2C:55:8E:A4:97:7E:C3:56:B3:68:03:C5:37:F8:C9
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32322d3232203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:58:1a:dd:98:7a:04:29:e2:d8:46:44:73:1d:77:54:3d:
         48:45:6c:0b:8d:e0:83:e4:3d:9f:2f:31:54:23:fa:56:c8:2f:
         7e:33:41:d8:87:7d:2d:e3:0a:9f:f9:f3:f3:4a:3f:07:14:fc:
         ea:4f:a8:7c:85:34:8e:b7:9d:94:93:79:18:e2:9a:2b:e6:ff:
         4c:2a:2e:e3:87:a2:f5:4a:61:9d:a8:88:fa:d8:7b:f9:d3:ac:
         d2:e1:ad:89:9e:89:1a:ac:17:1d:65:67:0a:87:82:1e:1f:8c:
         9a:ce:e3:0c:bc:76:a0:cd:31:31:a5:84:33:06:a8:ae:11:7e:
         73:e6:f7:0c:23:af:9f:6b:22:77:75:88:35:c4:40:7e:02:bf:
         bf:4b:54:aa:75:0e:cb:83:bc:a1:8a:28:8f:c4:99:e5:fd:4c:
         f6:f1:30:c2:c1:7b:40:18:b3:90:e5:2a:96:10:5b:0d:97:fc:
         a9:da:33:90:72:30:47:6c:77:31:43:2a:3f:be:63:d5:ed:b4:
         30:d9:33:67:a8:ed:66:1d:32:bd:bd:61:17:99:6c:53:1f:74:
         9f:4f:2e:46:ca:35:2c:50:19:bc:4c:db:ee:aa:50:f0:67:d5:
         c8:62:7f:08:73:36:89:42:ca:a5:66:2d:3a:cb:d8:7c:2b:4e:
         44:74:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:56 2024 by rpki-client on console-fra.rpki-client.org