Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38312e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38312e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          qfzvsq2B1akHghZtIkDDQUyJbG4XgSSAx8hZTS7m9ho=
Subject key identifier:   8A:4F:E1:00:9D:D0:69:56:D2:A0:D2:FA:D4:6C:F1:9E:D5:96:9B:E4
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       32481AAB237C11F2393290F691C31D8FFBEEEDB4
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38312e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61759
IP address blocks:        131.100.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:48:1a:ab:23:7c:11:f2:39:32:90:f6:91:c3:1d:8f:fb:ee:ed:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:3a:87:a7:dc:15:d8:fa:b2:a8:42:d3:bb:
                    12:7f:82:27:68:e4:ba:94:2b:34:b4:68:df:99:ea:
                    86:8a:b4:96:93:7c:02:0c:ee:25:86:87:27:40:34:
                    11:57:de:6c:9b:f3:c3:97:c4:1c:11:6d:39:9c:58:
                    67:4d:c2:70:55:b4:1e:0e:5d:79:b9:af:27:26:2d:
                    ca:3e:87:09:90:d8:b1:46:65:ad:9b:3c:bc:ec:bf:
                    1e:7c:e1:45:bf:d3:3c:d2:fc:6c:3e:cc:dc:dd:4a:
                    dc:4c:57:1f:29:e5:d9:00:94:37:26:3c:11:ba:3f:
                    92:72:86:ab:20:5e:6d:e0:9e:53:19:bd:d3:d9:07:
                    f2:c4:f4:37:6a:43:b9:14:01:86:a7:75:f6:4b:38:
                    32:2a:2c:f0:75:b6:b6:0d:55:3c:38:0a:5a:31:73:
                    77:1a:f4:17:1b:fe:aa:34:43:68:f9:7e:18:a0:a6:
                    7e:1b:c8:c2:9e:e3:3d:b9:ef:1b:db:e4:92:bd:84:
                    42:f3:50:20:7b:2f:32:1a:0e:a6:1e:4f:76:5c:e8:
                    15:4e:15:dc:37:c2:59:30:3f:14:a5:d6:20:65:47:
                    c4:2a:36:6e:54:83:da:01:db:8d:c5:b6:57:ee:a5:
                    f8:07:51:4f:c9:00:59:99:05:1d:8e:03:45:59:ee:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:E1:00:9D:D0:69:56:D2:A0:D2:FA:D4:6C:F1:9E:D5:96:9B:E4
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38312e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:45:62:b7:06:88:ad:f1:0d:81:de:62:bd:d2:04:c1:13:9e:
         6e:0f:46:41:57:46:f9:60:fa:86:e8:3e:37:4d:46:9d:07:3c:
         9f:ee:47:cc:49:14:8e:94:d8:92:74:48:77:16:48:9c:82:9b:
         b8:9a:c6:99:18:ab:4f:4d:f6:50:9b:40:28:ae:8a:29:4a:66:
         08:ad:28:11:39:06:f7:fe:13:79:11:b3:a2:97:a2:bb:1f:96:
         98:73:4b:bd:ff:a0:39:d6:6e:4c:75:99:a7:0c:38:44:1d:b4:
         8e:10:f3:c4:67:5f:0c:2b:a1:cc:35:15:b5:77:34:bb:10:47:
         bc:f6:3c:59:5c:65:4f:1c:cc:ca:cb:c0:57:2c:0b:ff:30:23:
         67:d5:8b:78:c3:23:b8:0e:88:21:57:44:d5:d5:b7:59:c0:61:
         a7:fb:a1:37:69:72:3b:2a:8c:76:54:11:11:5e:7c:8d:e7:4d:
         ea:01:06:7b:2e:de:04:ac:97:64:8b:87:0b:00:88:d8:27:db:
         d1:fb:1a:6e:0e:98:c2:9a:e4:e9:6d:f6:f1:31:18:e4:6d:c5:
         26:24:ed:45:a8:d1:fe:6a:32:d8:de:21:09:59:89:2d:a9:72:
         99:cc:fe:f3:98:0d:b9:47:90:bd:c3:6b:6c:ab:6a:f8:4d:f3:
         bc:e2:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:49:45 2025 by rpki-client