Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          2MnrMAM0pYowH4inIl6Nw3MXr8Oql2v/ev9pfjbyEW8=
Subject key identifier:   A1:96:FA:EA:5E:A8:5A:0F:B2:0A:18:F6:9C:2D:3F:64:61:25:40:EC
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       2C82C858E137823E8684C8219B56297470CF1F62
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     61759
IP address blocks:        131.100.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:82:c8:58:e1:37:82:3e:86:84:c8:21:9b:56:29:74:70:cf:1f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject: CN=3082010A0282010100EA12A75326E0AA96330EAD064C91FD8D827C6BF88C7F3333A6100BFF689E06623236093235AEF733B31EE86577832186AAAF5FF324EF303AEE87B9DCC4782101E98A5777EB366FD056209CE528B9CF20053AAD6C56DF24D264DA9562A0714E148971F9C11C28C06D137DE3D00B82113912549D0B7F1883E6165FF0810569D2E2663101481F1636A6D38999303B04432594EC998E73FDCFA1F55A8D594C83469D5904B2F28D19C934075A8EA69367DD270822DEE3DB40DE9E3CC7CD4D8406F2215DF8F810FE47EF50E40E10C5278817DBA5CD17F58A6389F948EEC89FD8019CBB705A92CB65CD481D6DD73764BBA306C2C95169B9D3A3B2EC22A344AEDED5FD930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:a7:53:26:e0:aa:96:33:0e:ad:06:4c:91:
                    fd:8d:82:7c:6b:f8:8c:7f:33:33:a6:10:0b:ff:68:
                    9e:06:62:32:36:09:32:35:ae:f7:33:b3:1e:e8:65:
                    77:83:21:86:aa:af:5f:f3:24:ef:30:3a:ee:87:b9:
                    dc:c4:78:21:01:e9:8a:57:77:eb:36:6f:d0:56:20:
                    9c:e5:28:b9:cf:20:05:3a:ad:6c:56:df:24:d2:64:
                    da:95:62:a0:71:4e:14:89:71:f9:c1:1c:28:c0:6d:
                    13:7d:e3:d0:0b:82:11:39:12:54:9d:0b:7f:18:83:
                    e6:16:5f:f0:81:05:69:d2:e2:66:31:01:48:1f:16:
                    36:a6:d3:89:99:30:3b:04:43:25:94:ec:99:8e:73:
                    fd:cf:a1:f5:5a:8d:59:4c:83:46:9d:59:04:b2:f2:
                    8d:19:c9:34:07:5a:8e:a6:93:67:dd:27:08:22:de:
                    e3:db:40:de:9e:3c:c7:cd:4d:84:06:f2:21:5d:f8:
                    f8:10:fe:47:ef:50:e4:0e:10:c5:27:88:17:db:a5:
                    cd:17:f5:8a:63:89:f9:48:ee:c8:9f:d8:01:9c:bb:
                    70:5a:92:cb:65:cd:48:1d:6d:d7:37:64:bb:a3:06:
                    c2:c9:51:69:b9:d3:a3:b2:ec:22:a3:44:ae:de:d5:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:96:FA:EA:5E:A8:5A:0F:B2:0A:18:F6:9C:2D:3F:64:61:25:40:EC
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:31:51:be:52:91:b6:c6:0c:b8:99:2e:f9:c4:f1:90:c1:
         95:a3:4c:fd:3a:ac:02:ed:a2:53:de:a5:9e:af:4d:c7:00:d7:
         8a:fe:a7:fa:7d:07:d1:10:2f:c8:2b:89:7d:67:7f:e7:9e:d9:
         de:ee:13:e9:16:ac:9a:00:71:59:2d:55:b6:25:f5:73:d1:6b:
         0e:38:bf:0e:3e:e2:dd:6c:9f:a0:f3:79:30:1d:41:1b:6f:9d:
         0b:e8:89:4f:f5:dd:b8:4d:ce:b3:b7:41:93:c8:43:82:a3:e3:
         ff:4a:89:e4:84:61:f4:3c:0f:30:75:24:f7:33:6e:00:44:06:
         13:8b:c5:12:d3:08:9a:12:8e:64:18:43:6c:61:d3:bf:ab:ad:
         5a:c4:e9:ba:75:ce:04:16:33:6f:93:27:72:9b:ea:1b:3d:4d:
         17:a7:27:99:00:9b:55:81:f9:56:33:2b:a0:bd:1b:4d:9a:a9:
         eb:e3:d0:1d:08:19:29:ec:14:ee:86:11:01:7b:62:30:c5:6d:
         85:67:c8:ff:a6:26:73:fd:00:b7:fc:9f:58:ab:51:18:5a:c8:
         a8:61:95:83:92:67:a0:ec:ff:68:f8:fd:69:4f:f8:fd:4a:99:
         77:73:ee:42:b3:33:eb:ca:87:81:49:38:67:cf:5a:a3:cf:c5:
         0d:b2:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:24 2024 by rpki-client on console-ams.rpki-client.org