Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32332d3233203d3e203631373539.roa (raw, json)
Hash identifier:          Qfqo07N3sq7EnPBxa5/vqkwVvK7CT7V0+e15w+x3Jz8=
Subject key identifier:   28:43:87:DA:55:9A:FE:CA:37:20:57:1B:99:4A:68:0E:11:59:E4:F4
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       6C18E1198C2DD6568E70CA925F65C79B26D3DA1A
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa
Signing time:             Wed 03 Apr 2024 18:30:28 +0000
ROA not before:           Wed 03 Apr 2024 18:25:28 +0000
ROA not after:            Wed 02 Apr 2025 18:30:28 +0000
asID:                     61759
IP address blocks:        131.100.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:18:e1:19:8c:2d:d6:56:8e:70:ca:92:5f:65:c7:9b:26:d3:da:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Apr  3 18:25:28 2024 GMT
            Not After : Apr  2 18:30:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:7e:e8:07:b5:5a:3b:6e:ca:c8:0b:85:38:
                    f7:02:d6:f8:f1:60:8f:d2:25:c6:f5:2c:84:57:0b:
                    60:13:80:d3:80:2e:a3:c9:47:f3:d4:4f:e6:44:c8:
                    06:55:95:57:98:12:6a:2c:0f:99:df:0d:9b:e3:74:
                    51:74:9e:b7:d1:60:67:35:4d:53:25:66:ca:14:e5:
                    09:88:eb:d7:0e:83:23:d8:ab:2b:b6:36:f5:77:bb:
                    e6:d2:be:e8:07:35:5c:8b:f1:47:02:b3:0d:e3:e9:
                    9d:2a:24:f8:bd:5f:cb:c8:f3:1c:56:e2:b6:65:09:
                    c3:a6:9b:d2:46:e6:a5:95:1a:60:5c:35:56:ae:db:
                    6f:37:92:a4:a3:ae:cc:40:fa:67:e0:d9:3f:c4:03:
                    b0:5c:7b:84:d0:4a:4e:86:80:e0:4a:46:21:91:9d:
                    da:96:1f:81:5f:94:0b:ed:e6:b2:c2:97:62:38:88:
                    9a:76:95:da:a2:dd:ae:bd:d5:06:47:e8:e5:9b:97:
                    02:53:79:41:6e:09:b1:50:df:85:9b:a9:2b:78:ac:
                    68:38:d2:99:ef:07:c7:e0:de:9b:f9:1a:8d:9d:70:
                    35:ed:2e:15:90:09:62:dc:fc:4c:4f:13:18:ce:bf:
                    55:3e:4a:a0:c5:0d:bb:d4:ea:24:62:62:32:f7:3a:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:43:87:DA:55:9A:FE:CA:37:20:57:1B:99:4A:68:0E:11:59:E4:F4
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32332d3233203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:36:a7:41:d7:1c:fc:dd:21:2f:88:41:8d:06:fc:d5:20:78:
         6b:b0:9e:3a:d2:15:7a:bb:59:4f:2e:d4:6f:10:1c:a6:da:8c:
         07:a3:a8:35:90:86:a7:bc:39:f2:2c:8e:cc:dd:4e:5a:2b:d1:
         34:45:49:f9:c6:ac:c5:87:1f:8e:f4:2a:45:ab:e2:40:89:d8:
         ee:df:09:ed:f3:90:92:c0:f9:fc:72:fb:fe:8c:59:2e:c4:91:
         38:14:46:37:12:05:61:e6:6f:8f:18:ac:f3:dc:d4:55:f7:ab:
         bb:df:03:6c:75:b3:93:f3:35:c8:3a:9c:af:7b:10:cf:73:f0:
         ea:d0:f1:f2:6b:8a:f1:79:c6:3e:8d:63:39:9c:86:64:77:39:
         45:d4:ca:09:ba:cf:5c:3a:b8:45:39:45:df:7f:88:e5:13:28:
         59:a1:90:66:0f:51:85:2e:af:7c:f8:77:e8:47:33:d7:80:66:
         96:0c:c4:6a:a6:30:e3:74:4d:45:53:1c:3b:be:66:2b:6c:b7:
         95:48:ac:9c:d1:59:61:3c:54:b5:0b:02:fc:0b:26:cd:84:1d:
         78:65:0e:c7:0b:e2:56:b9:04:9b:87:2e:a5:3d:e2:ef:8f:99:
         db:b3:94:d4:0f:8e:97:3f:45:72:32:5b:8d:0b:87:7a:1b:09:
         43:0a:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:24 2024 by rpki-client on console-ams.rpki-client.org