Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (raw, json)
Hash identifier:          saQrKmND7jKCXcVCbLOZM0vGaAcVwgazmSq+F43U55s=
Subject key identifier:   AF:C3:6B:C1:45:79:9B:2A:B0:89:B0:CF:1D:DD:32:A7:39:2C:92:40
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       098BB3E152931C777904C777C2995CC2B863FD
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61759
IP address blocks:        131.100.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 06:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8b:b3:e1:52:93:1c:77:79:04:c7:77:c2:99:5c:c2:b8:63:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:4f:d7:91:23:cb:e8:2e:d2:37:2a:f8:c3:
                    43:44:8d:38:17:d7:82:26:87:af:e3:40:29:13:46:
                    6f:91:bc:a5:d0:8e:71:f3:1f:d9:e9:fa:c8:50:37:
                    1b:6a:c2:1d:d4:f8:17:0e:f2:b0:3d:40:c2:20:90:
                    f4:45:d2:70:00:50:fc:69:7c:ab:bb:62:bb:df:3b:
                    8f:7e:41:fc:63:44:be:1a:92:dc:b1:2d:50:70:9a:
                    a0:22:24:19:92:a4:96:ec:70:2a:8e:ad:5e:20:67:
                    10:13:0b:81:c4:c4:e9:f6:f3:e8:c0:9d:79:be:c9:
                    b4:b6:fc:8d:60:06:49:ca:b5:46:0e:50:e7:64:ba:
                    b2:8a:b0:ee:03:34:13:53:f3:e7:e0:8c:51:f8:9a:
                    35:3a:e6:80:60:a3:d8:83:ad:c1:9e:0c:b3:2f:c1:
                    a1:9a:39:1a:86:6d:ad:16:c7:12:31:fa:fc:cf:e0:
                    3a:93:42:39:dc:11:86:9f:4a:09:3c:bc:5a:a8:2f:
                    7b:aa:46:0d:76:77:b0:f3:06:d1:16:fc:f5:81:60:
                    70:66:82:ff:82:47:df:30:71:23:99:81:88:f3:2f:
                    e4:c0:38:aa:ea:2c:c2:11:5f:46:0e:cc:4b:c8:5c:
                    41:ce:37:e8:78:61:9b:11:f3:e1:43:b3:f7:78:1f:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C3:6B:C1:45:79:9B:2A:B0:89:B0:CF:1D:DD:32:A7:39:2C:92:40
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:25:b8:b1:91:ac:7d:b1:81:29:5c:ed:70:67:0e:a1:34:
         09:d3:0d:ef:2f:8f:d2:7d:8e:e0:04:2e:47:fd:2d:60:ec:5b:
         6e:d5:78:41:3d:b2:41:19:71:fa:7c:84:e0:22:17:94:62:ca:
         41:1e:e0:d2:3b:d1:96:c2:84:38:3b:3d:d3:b9:7a:f1:8b:3e:
         1d:0b:78:29:db:45:ac:39:1f:bc:a0:94:83:66:ae:32:1b:97:
         40:3f:46:32:63:d9:88:81:35:2b:09:8d:cb:85:4d:72:1f:21:
         2e:a5:b4:b3:c1:33:2e:08:05:48:12:ac:35:53:c4:15:99:cb:
         c5:66:68:ac:95:34:18:26:d9:ad:f7:bd:46:16:de:69:02:3b:
         44:cb:b5:7d:86:f5:c5:d0:ef:65:0c:52:0a:f8:1e:eb:0e:7d:
         5e:70:0b:a4:55:df:0e:fa:f9:6a:cd:87:15:b2:af:80:cb:08:
         f5:ef:98:89:30:4b:7b:fb:5b:21:e7:78:8e:d9:76:61:0f:1d:
         a6:b3:75:b8:8f:af:c4:de:ed:e6:8b:2a:01:dd:c6:10:48:3d:
         90:fa:af:84:75:71:a2:12:cb:ad:34:dc:5a:42:a4:26:08:bc:
         82:0b:7b:2d:a4:1e:12:3e:ab:5e:97:86:fc:3b:19:a8:da:18:
         99:bb:b5:2e
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgITCYuz4VKTHHd5BMd3wplcwrhj/TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDQzIxQzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5
RUY4RUQyMB4XDTI1MDMwNTE4NTUwMFoXDTI2MDMwNDE5MDAwMFowggItMYICKTCC
AiUGA1UEAxOCAhwzMDgyMDEwQTAyODIwMTAxMDBDQ0VCNEZENzkxMjNDQkU4MkVE
MjM3MkFGOEMzNDM0NDhEMzgxN0Q3ODIyNjg3QUZFMzQwMjkxMzQ2NkY5MUJDQTVE
MDhFNzFGMzFGRDlFOUZBQzg1MDM3MUI2QUMyMURENEY4MTcwRUYyQjAzRDQwQzIy
MDkwRjQ0NUQyNzAwMDUwRkM2OTdDQUJCQjYyQkJERjNCOEY3RTQxRkM2MzQ0QkUx
QTkyRENCMTJENTA3MDlBQTAyMjI0MTk5MkE0OTZFQzcwMkE4RUFENUUyMDY3MTAx
MzBCODFDNEM0RTlGNkYzRThDMDlENzlCRUM5QjRCNkZDOEQ2MDA2NDlDQUI1NDYw
RTUwRTc2NEJBQjI4QUIwRUUwMzM0MTM1M0YzRTdFMDhDNTFGODlBMzUzQUU2ODA2
MEEzRDg4M0FEQzE5RTBDQjMyRkMxQTE5QTM5MUE4NjZEQUQxNkM3MTIzMUZBRkND
RkUwM0E5MzQyMzlEQzExODY5RjRBMDkzQ0JDNUFBODJGN0JBQTQ2MEQ3Njc3QjBG
MzA2RDExNkZDRjU4MTYwNzA2NjgyRkY4MjQ3REYzMDcxMjM5OTgxODhGMzJGRTRD
MDM4QUFFQTJDQzIxMTVGNDYwRUNDNEJDODVDNDFDRTM3RTg3ODYxOUIxMUYzRTE0
M0IzRjc3ODFGNzExMTAyMDMwMTAwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDM60/XkSPL6C7SNyr4w0NEjTgX14Imh6/jQCkTRm+RvKXQjnHzH9np
+shQNxtqwh3U+BcO8rA9QMIgkPRF0nAAUPxpfKu7YrvfO49+QfxjRL4aktyxLVBw
mqAiJBmSpJbscCqOrV4gZxATC4HExOn28+jAnXm+ybS2/I1gBknKtUYOUOdkurKK
sO4DNBNT8+fgjFH4mjU65oBgo9iDrcGeDLMvwaGaORqGba0WxxIx+vzP4DqTQjnc
EYafSgk8vFqoL3uqRg12d7DzBtEW/PWBYHBmgv+CR98wcSOZgYjzL+TAOKrqLMIR
X0YOzEvIXEHON+h4YZsR8+FDs/d4H3ERAgMBAAGjggJPMIICSzAdBgNVHQ4EFgQU
r8NrwUV5myqwibDPHd0ypzkskkAwHwYDVR0jBBgwFoAUzCHFIALxI4X+YfM79faT
PQnvjtIwDgYDVR0PAQH/BAQDAgeAMIGUBgNVHR8EgYwwgYkwgYaggYOggYCGfnJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFJaU3Y3d0ZKdDFFa1k1
ZkdrRExERHlkWFVqY2V6Qkp3OFBHeDJHRFBGeVgvMS9DQzIxQzUyMDAyRjEyMzg1
RkU2MUYzM0JGNUY2OTMzRDA5RUY4RUQyLmNybDB4BggrBgEFBQcBAQRsMGowaAYI
KwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmlj
YnJfcmVwby8xL0NDMjFDNTIwMDJGMTIzODVGRTYxRjMzQkY1RjY5MzNEMDlFRjhF
RDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZNWZHa0RM
RER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvMzEzMzMxMmUzMTMwMzAyZTM4MzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMxMzczNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg2RQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB+tCW4sZGsfbGBKVztcGcOoTQJ0w3vL4/SfY7g
BC5H/S1g7Ftu1XhBPbJBGXH6fITgIheUYspBHuDSO9GWwoQ4Oz3TuXrxiz4dC3gp
20WsOR+8oJSDZq4yG5dAP0YyY9mIgTUrCY3LhU1yHyEupbSzwTMuCAVIEqw1U8QV
mcvFZmislTQYJtmt971GFt5pAjtEy7V9hvXF0O9lDFIK+B7rDn1ecAukVd8O+vlq
zYcVsq+Aywj175iJMEt7+1sh53iO2XZhDx2ms3W4j6/E3u3miyoB3cYQSD2Q+q+E
dXGiEsutNNxaQqQmCLyCC3stpB4SPqtel4b8Oxmo2hiZu7Uu
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:00:56 2025 by rpki-client