Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          wPCUlOTJfcrvxENWWp8r1HLX+/zoXRBc20kKp+zUs+s=
Subject key identifier:   72:7A:9B:5C:73:1A:5C:25:48:DF:66:7C:23:5C:00:53:AC:1B:A5:43
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       40495EA7B4AC21475B93E4A805250E981F1070A2
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61759
IP address blocks:        131.100.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:49:5e:a7:b4:ac:21:47:5b:93:e4:a8:05:25:0e:98:1f:10:70:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:86:e7:3e:b7:b1:36:ea:f0:aa:33:ad:87:
                    e2:0c:ca:01:70:b0:44:db:1b:56:60:19:74:e6:8d:
                    a6:b6:15:05:0a:e9:02:63:37:0d:9a:5d:88:98:97:
                    b3:7b:47:81:6d:c1:92:e5:af:85:5a:54:d1:c8:e1:
                    c3:c0:83:32:1c:72:71:6a:e8:58:5c:15:99:75:a1:
                    c3:18:4f:99:fb:20:aa:33:60:c2:ed:11:94:d9:c9:
                    2e:08:3e:de:6a:19:81:f4:1b:14:50:14:cf:54:e0:
                    a7:80:89:f2:f9:28:89:22:62:1a:3c:e9:c8:f5:78:
                    8c:89:58:fc:7e:af:fb:6c:f6:42:06:9a:d5:03:9f:
                    51:6e:38:fe:b3:3b:a1:c1:e7:ce:6c:0b:6f:c4:ad:
                    8f:e1:68:02:d0:7c:ac:c2:71:57:87:c2:c7:65:46:
                    95:23:95:7d:9f:77:43:11:f5:a0:c9:8c:c0:44:99:
                    af:b5:9b:10:78:ce:48:79:a0:ad:14:fc:42:c0:35:
                    77:00:6e:c6:19:9a:18:df:cc:40:71:df:32:a8:b4:
                    9b:40:0b:b6:e1:89:8e:a9:6a:71:3b:ce:15:c8:b8:
                    7c:9e:c5:f4:c9:e2:fd:15:17:dc:91:46:b6:08:16:
                    21:b9:c7:fd:f8:86:c2:c1:eb:91:43:2f:62:c3:f5:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:9B:5C:73:1A:5C:25:48:DF:66:7C:23:5C:00:53:AC:1B:A5:43
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7c:b9:c2:b0:f1:1c:7b:dc:a6:f0:e1:7a:c0:f3:47:c5:39:
         64:e7:9a:dd:12:f5:a6:39:13:e5:0b:ef:74:23:b5:72:25:7f:
         1b:cb:92:85:52:f5:e3:97:d2:d0:39:b7:e4:29:28:e8:32:13:
         13:0b:68:9e:83:81:33:ce:75:99:7d:53:74:24:a6:b2:d9:04:
         01:5b:57:36:71:37:c2:c8:4b:09:25:55:45:33:d5:39:37:28:
         6c:fb:a5:b3:5c:76:9d:66:ee:a9:b1:b8:69:16:2d:d0:c8:58:
         81:e7:bc:74:47:a7:3e:c3:0b:bf:c1:38:ef:22:b9:96:a8:5f:
         e3:e2:2b:90:9b:eb:ad:80:65:5e:2e:8d:4c:ea:88:7f:99:03:
         02:14:b2:1f:eb:5d:0d:25:29:0d:87:e3:64:be:44:05:80:1d:
         46:92:da:5a:41:08:c8:05:87:da:aa:45:32:5a:90:6f:51:87:
         23:d3:6a:e8:b5:48:b4:60:bd:86:a4:a9:25:c7:45:55:c6:8a:
         55:cd:54:b2:25:48:1b:b7:b4:0a:70:11:83:c8:3f:f9:07:0a:
         ee:ba:7b:89:aa:36:4c:36:39:31:c9:ee:e0:24:28:e2:66:c8:
         90:c7:a7:ca:eb:8a:dc:75:92:5a:c0:f2:1f:bf:30:07:04:3d:
         05:f1:a7:ac
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUQElep7SsIUdbk+SoBSUOmB8QcKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MyMUM1MjAwMkYxMjM4NUZFNjFGMzNCRjVGNjkzM0Qw
OUVGOEVEMjAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUFENTg2RTczRUI3QjEzNkVB
RjBBQTMzQUQ4N0UyMENDQTAxNzBCMDQ0REIxQjU2NjAxOTc0RTY4REE2QjYxNTA1
MEFFOTAyNjMzNzBEOUE1RDg4OTg5N0IzN0I0NzgxNkRDMTkyRTVBRjg1NUE1NEQx
QzhFMUMzQzA4MzMyMUM3MjcxNkFFODU4NUMxNTk5NzVBMUMzMTg0Rjk5RkIyMEFB
MzM2MEMyRUQxMTk0RDlDOTJFMDgzRURFNkExOTgxRjQxQjE0NTAxNENGNTRFMEE3
ODA4OUYyRjkyODg5MjI2MjFBM0NFOUM4RjU3ODhDODk1OEZDN0VBRkZCNkNGNjQy
MDY5QUQ1MDM5RjUxNkUzOEZFQjMzQkExQzFFN0NFNkMwQjZGQzRBRDhGRTE2ODAy
RDA3Q0FDQzI3MTU3ODdDMkM3NjU0Njk1MjM5NTdEOUY3NzQzMTFGNUEwQzk4Q0Mw
NDQ5OUFGQjU5QjEwNzhDRTQ4NzlBMEFEMTRGQzQyQzAzNTc3MDA2RUM2MTk5QTE4
REZDQzQwNzFERjMyQThCNDlCNDAwQkI2RTE4OThFQTk2QTcxM0JDRTE1QzhCODdD
OUVDNUY0QzlFMkZEMTUxN0RDOTE0NkI2MDgxNjIxQjlDN0ZERjg4NkMyQzFFQjkx
NDMyRjYyQzNGNTczOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqtWG5z63sTbq8KozrYfiDMoBcLBE2xtWYBl05o2mthUFCukCYzcN
ml2ImJeze0eBbcGS5a+FWlTRyOHDwIMyHHJxauhYXBWZdaHDGE+Z+yCqM2DC7RGU
2ckuCD7eahmB9BsUUBTPVOCngIny+SiJImIaPOnI9XiMiVj8fq/7bPZCBprVA59R
bjj+szuhwefObAtvxK2P4WgC0HyswnFXh8LHZUaVI5V9n3dDEfWgyYzARJmvtZsQ
eM5IeaCtFPxCwDV3AG7GGZoY38xAcd8yqLSbQAu24YmOqWpxO84VyLh8nsX0yeL9
FRfckUa2CBYhucf9+IbCweuRQy9iw/VzmwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FHJ6m1xzGlwlSN9mfCNcAFOsG6VDMB8GA1UdIwQYMBaAFMwhxSAC8SOF/mHzO/X2
kz0J747SMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZ
NWZHa0RMRER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4
NUZFNjFGMzNCRjVGNjkzM0QwOUVGOEVEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQzIxQzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5RUY4
RUQyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EUlpTdjd3Rkp0MUVrWTVmR2tE
TEREeWRYVWpjZXpCSnc4UEd4MkdEUEZ5WC8xLzMxMzMzMTJlMzEzMDMwMmUzODMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAINk
UDANBgkqhkiG9w0BAQsFAAOCAQEANHy5wrDxHHvcpvDhesDzR8U5ZOea3RL1pjkT
5QvvdCO1ciV/G8uShVL145fS0Dm35Cko6DITEwtonoOBM851mX1TdCSmstkEAVtX
NnE3wshLCSVVRTPVOTcobPuls1x2nWbuqbG4aRYt0MhYgee8dEenPsMLv8E47yK5
lqhf4+IrkJvrrYBlXi6NTOqIf5kDAhSyH+tdDSUpDYfjZL5EBYAdRpLaWkEIyAWH
2qpFMlqQb1GHI9Nq6LVItGC9hqSpJcdFVcaKVc1UsiVIG7e0CnARg8g/+QcK7rp7
iao2TDY5Mcnu4CQo4mbIkMenyuuK3HWSWsDyH78wBwQ9BfGnrA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:39:14 2025 by rpki-client