Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          NSBQNM4qgxbQl2azLs0mxiFiXyCtj0+9saGr8xHCCv0=
Subject key identifier:   89:70:52:45:A5:AB:5F:02:F1:A8:ED:19:6E:72:33:04:F4:0F:5F:4C
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       59CBFEE9E8EFDB4B8AF19E9ADDD964E6F5562BA6
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 03 Apr 2024 18:30:28 +0000
ROA not before:           Wed 03 Apr 2024 18:25:28 +0000
ROA not after:            Wed 02 Apr 2025 18:30:28 +0000
asID:                     61759
IP address blocks:        131.100.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cb:fe:e9:e8:ef:db:4b:8a:f1:9e:9a:dd:d9:64:e6:f5:56:2b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Apr  3 18:25:28 2024 GMT
            Not After : Apr  2 18:30:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:14:7a:e1:a1:9b:69:36:02:59:f6:91:40:
                    f6:2e:55:cd:53:10:3f:bb:1b:6d:78:76:24:ea:76:
                    26:cb:5a:63:7d:ed:d5:33:b3:6f:8f:83:77:a5:b0:
                    77:fe:0c:21:3a:dd:20:e7:fe:79:82:cd:36:78:19:
                    b2:99:15:1f:8f:ad:56:5b:c5:7a:6e:37:58:59:bc:
                    fa:80:43:b9:7a:72:9f:b4:c2:fe:70:a8:a5:eb:72:
                    38:3b:43:00:76:8a:20:ea:d2:9b:6c:07:4f:8c:5a:
                    f9:ad:83:73:99:ab:10:1f:e6:41:d4:e3:57:e8:f2:
                    22:f7:e7:e1:12:2e:c4:6d:73:42:d5:b5:38:ec:be:
                    57:e4:77:5e:f9:77:bd:98:24:6d:0e:80:0f:c6:d4:
                    16:d9:7c:54:4e:06:d2:7f:2c:f1:d3:87:cf:be:b9:
                    15:a8:2f:9d:0d:14:01:f0:72:b3:c9:9d:d3:49:8c:
                    b8:8b:aa:39:f5:2a:85:27:b7:b1:a9:b6:b2:01:52:
                    95:01:9c:26:d7:03:55:7e:c7:f5:f0:d0:d7:8c:4b:
                    ea:9f:39:30:a3:5b:80:04:44:15:3c:14:6f:19:45:
                    69:81:77:58:97:72:d5:5a:d4:20:ae:79:7a:d2:3e:
                    66:d5:26:a9:da:af:db:21:90:2c:06:48:77:fc:b0:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:52:45:A5:AB:5F:02:F1:A8:ED:19:6E:72:33:04:F4:0F:5F:4C
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:23:0a:3c:44:ce:72:5d:39:00:fe:92:3a:11:34:1d:97:94:
         90:3f:45:82:46:bd:a8:a3:7b:a7:a0:f4:ad:90:6d:72:aa:31:
         7c:f7:69:fa:1a:8c:52:a0:c6:17:61:3b:86:dc:72:69:8d:2e:
         c8:62:c3:6f:8b:3c:f2:06:19:1f:98:6e:54:9c:c5:7a:b5:0a:
         3b:17:76:e0:a7:94:99:dc:65:40:00:c0:a7:99:2e:b0:73:8c:
         cb:81:5e:70:de:f8:d7:eb:23:70:57:4a:18:ce:1b:c0:4e:e8:
         2b:b1:99:41:02:45:69:2f:d2:c0:07:9a:f4:ee:23:17:e0:88:
         21:76:72:f2:f9:58:d0:bd:41:c6:e8:46:c7:7f:bb:66:01:e2:
         de:1d:f4:1e:05:4c:ea:1d:86:d5:22:56:8a:08:d1:7a:d9:80:
         76:8f:79:13:da:7a:11:e0:f5:78:cd:2c:09:00:57:96:d8:7c:
         b6:cc:29:83:53:5f:de:2e:34:8f:4f:91:91:c3:3f:81:4a:79:
         0d:a9:43:6c:c2:ce:21:4e:c4:54:86:2b:56:c5:80:ed:2a:d0:
         bc:0f:28:7c:cf:b4:d9:c9:58:6b:55:99:b0:ef:5e:53:9b:12:
         9c:7a:20:d7:78:bf:b9:f0:cb:38:3f:7f:0c:3a:1c:ab:c6:76:
         c0:cb:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:07 2024 by rpki-client on console-fra.rpki-client.org