Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38312e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          /FEUj693A5811H4gGpT6G02Wpk8tCUczdDwpn7M2tGA=
Subject key identifier:   5A:F9:D3:A9:EE:4A:8B:42:ED:6A:51:30:C1:A5:BC:4A:F9:20:0A:5D
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       75FB9403DCAE8BC781EAAABDC59E9965D8137555
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38312e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 03 Apr 2024 18:30:29 +0000
ROA not before:           Wed 03 Apr 2024 18:25:29 +0000
ROA not after:            Wed 02 Apr 2025 18:30:29 +0000
asID:                     61759
IP address blocks:        131.100.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fb:94:03:dc:ae:8b:c7:81:ea:aa:bd:c5:9e:99:65:d8:13:75:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Apr  3 18:25:29 2024 GMT
            Not After : Apr  2 18:30:29 2025 GMT
        Subject: CN=3082010A0282010100E69A7F46C5F0341A0A6D81CD772D0625A6E299C7D8234702834DBA38E3866607B60478F7810DC1028FF39CE95685F982C10B886432236652B74261888825CDB24EA44878AC4DC18D0B7CBA376C69C6B73B6007288865D81150076DDACB1B535BB9BE99B9032404C06BF47BB170E7EDEE1A8ACD3FBBCC4C28517D4CEF16CE12F0A1A1024C30EB080DA2294B96F29DF4407CB9675CA26EAD54B2640F6696EFFAE3BFE384D04AAE04CD400FD4D12A0F2CCCA6E585A3D32AD8E5A14384E3AF2E2A991BC19CA552A99AF203316ACD9ADA252B0FB11114AC2D49184EDC90EE09681FB658C3691707638A09610302C07490C6E56E06B0C29D1DF8C11B63A32CA16E27F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:7f:46:c5:f0:34:1a:0a:6d:81:cd:77:2d:
                    06:25:a6:e2:99:c7:d8:23:47:02:83:4d:ba:38:e3:
                    86:66:07:b6:04:78:f7:81:0d:c1:02:8f:f3:9c:e9:
                    56:85:f9:82:c1:0b:88:64:32:23:66:52:b7:42:61:
                    88:88:25:cd:b2:4e:a4:48:78:ac:4d:c1:8d:0b:7c:
                    ba:37:6c:69:c6:b7:3b:60:07:28:88:65:d8:11:50:
                    07:6d:da:cb:1b:53:5b:b9:be:99:b9:03:24:04:c0:
                    6b:f4:7b:b1:70:e7:ed:ee:1a:8a:cd:3f:bb:cc:4c:
                    28:51:7d:4c:ef:16:ce:12:f0:a1:a1:02:4c:30:eb:
                    08:0d:a2:29:4b:96:f2:9d:f4:40:7c:b9:67:5c:a2:
                    6e:ad:54:b2:64:0f:66:96:ef:fa:e3:bf:e3:84:d0:
                    4a:ae:04:cd:40:0f:d4:d1:2a:0f:2c:cc:a6:e5:85:
                    a3:d3:2a:d8:e5:a1:43:84:e3:af:2e:2a:99:1b:c1:
                    9c:a5:52:a9:9a:f2:03:31:6a:cd:9a:da:25:2b:0f:
                    b1:11:14:ac:2d:49:18:4e:dc:90:ee:09:68:1f:b6:
                    58:c3:69:17:07:63:8a:09:61:03:02:c0:74:90:c6:
                    e5:6e:06:b0:c2:9d:1d:f8:c1:1b:63:a3:2c:a1:6e:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:D3:A9:EE:4A:8B:42:ED:6A:51:30:C1:A5:BC:4A:F9:20:0A:5D
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38312e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5f:63:67:47:79:f5:43:c3:29:8a:c4:ef:02:50:96:59:3c:
         df:b7:4e:e8:90:09:53:fc:54:8e:7c:93:2f:1c:2d:e8:91:44:
         e5:62:01:93:d2:97:7b:a6:33:b6:48:24:17:15:67:b5:c7:e7:
         d4:19:b3:a7:10:1b:b1:0c:97:ae:3b:d9:c8:b3:92:92:41:03:
         71:49:7b:56:ad:41:7b:47:0d:1f:58:0f:c0:54:b9:b6:d2:06:
         a1:83:b2:00:4d:45:28:fb:6c:8b:1e:14:93:31:fa:0a:be:39:
         84:29:f3:74:5d:ce:a5:dc:55:36:6c:98:b1:b9:c0:b6:59:47:
         9f:14:9c:d7:cd:e8:33:0e:1b:bf:e1:24:ce:f9:60:2f:3e:58:
         ba:56:0e:41:d8:72:54:5a:35:78:93:b5:4c:f8:95:a5:de:40:
         c6:b1:66:52:09:7c:f8:6f:41:1a:b5:ae:57:49:a7:37:d1:7a:
         e5:35:3e:5d:9f:51:92:52:02:82:c6:f7:34:75:ef:78:19:00:
         2b:74:cb:44:7d:15:e9:a0:b0:61:c6:0a:2d:f3:52:d7:2b:69:
         da:fa:27:c1:cd:45:1a:2b:75:23:88:9b:e3:8c:65:19:35:2c:
         89:cb:73:61:09:4e:35:d8:f1:ff:00:d0:5d:9f:c2:2c:5f:5d:
         93:92:7a:ad
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUdfuUA9yui8eB6qq9xZ6ZZdgTdVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MyMUM1MjAwMkYxMjM4NUZFNjFGMzNCRjVGNjkzM0Qw
OUVGOEVEMjAeFw0yNDA0MDMxODI1MjlaFw0yNTA0MDIxODMwMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTY5QTdGNDZDNUYwMzQxQTBB
NkQ4MUNENzcyRDA2MjVBNkUyOTlDN0Q4MjM0NzAyODM0REJBMzhFMzg2NjYwN0I2
MDQ3OEY3ODEwREMxMDI4RkYzOUNFOTU2ODVGOTgyQzEwQjg4NjQzMjIzNjY1MkI3
NDI2MTg4ODgyNUNEQjI0RUE0NDg3OEFDNERDMThEMEI3Q0JBMzc2QzY5QzZCNzNC
NjAwNzI4ODg2NUQ4MTE1MDA3NkREQUNCMUI1MzVCQjlCRTk5QjkwMzI0MDRDMDZC
RjQ3QkIxNzBFN0VERUUxQThBQ0QzRkJCQ0M0QzI4NTE3RDRDRUYxNkNFMTJGMEEx
QTEwMjRDMzBFQjA4MERBMjI5NEI5NkYyOURGNDQwN0NCOTY3NUNBMjZFQUQ1NEIy
NjQwRjY2OTZFRkZBRTNCRkUzODREMDRBQUUwNENENDAwRkQ0RDEyQTBGMkNDQ0E2
RTU4NUEzRDMyQUQ4RTVBMTQzODRFM0FGMkUyQTk5MUJDMTlDQTU1MkE5OUFGMjAz
MzE2QUNEOUFEQTI1MkIwRkIxMTExNEFDMkQ0OTE4NEVEQzkwRUUwOTY4MUZCNjU4
QzM2OTE3MDc2MzhBMDk2MTAzMDJDMDc0OTBDNkU1NkUwNkIwQzI5RDFERjhDMTFC
NjNBMzJDQTE2RTI3RjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5pp/RsXwNBoKbYHNdy0GJabimcfYI0cCg026OOOGZge2BHj3gQ3B
Ao/znOlWhfmCwQuIZDIjZlK3QmGIiCXNsk6kSHisTcGNC3y6N2xpxrc7YAcoiGXY
EVAHbdrLG1Nbub6ZuQMkBMBr9HuxcOft7hqKzT+7zEwoUX1M7xbOEvChoQJMMOsI
DaIpS5bynfRAfLlnXKJurVSyZA9mlu/647/jhNBKrgTNQA/U0SoPLMym5YWj0yrY
5aFDhOOvLiqZG8GcpVKpmvIDMWrNmtolKw+xERSsLUkYTtyQ7gloH7ZYw2kXB2OK
CWEDAsB0kMblbgawwp0d+MEbY6MsoW4n8QIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFr506nuSotC7WpRMMGlvEr5IApdMB8GA1UdIwQYMBaAFMwhxSAC8SOF/mHzO/X2
kz0J747SMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZ
NWZHa0RMRER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzEvQ0MyMUM1MjAwMkYxMjM4
NUZFNjFGMzNCRjVGNjkzM0QwOUVGOEVEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQzIxQzUyMDAyRjEyMzg1RkU2MUYzM0JGNUY2OTMzRDA5RUY4
RUQyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EUlpTdjd3Rkp0MUVrWTVmR2tE
TEREeWRYVWpjZXpCSnc4UEd4MkdEUEZ5WC8xLzMxMzMzMTJlMzEzMDMwMmUzODMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAINk
UTANBgkqhkiG9w0BAQsFAAOCAQEAYV9jZ0d59UPDKYrE7wJQllk837dO6JAJU/xU
jnyTLxwt6JFE5WIBk9KXe6YztkgkFxVntcfn1BmzpxAbsQyXrjvZyLOSkkEDcUl7
Vq1Be0cNH1gPwFS5ttIGoYOyAE1FKPtsix4UkzH6Cr45hCnzdF3OpdxVNmyYsbnA
tllHnxSc183oMw4bv+EkzvlgLz5YulYOQdhyVFo1eJO1TPiVpd5AxrFmUgl8+G9B
GrWuV0mnN9F65TU+XZ9RklICgsb3NHXveBkAK3TLRH0V6aCwYcYKLfNS1ytp2von
wc1FGit1I4ib44xlGTUsictzYQlONdjx/wDQXZ/CLF9dk5J6rQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:47 2024 by rpki-client on console-ams.rpki-client.org