Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          vczHRbOFgEoCsKktD7VO871LT80N+PPbRvSy0Rgv0cQ=
Subject key identifier:   A5:B1:BE:F0:CA:A4:D6:5B:A2:7D:06:CF:CA:1F:69:60:BE:21:1B:1B
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       7046F295A6FFF3A424040A57773B6DB36E89CF1A
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61759
IP address blocks:        131.100.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:46:f2:95:a6:ff:f3:a4:24:04:0a:57:77:3b:6d:b3:6e:89:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:04:04:02:0c:17:dc:2a:7e:c9:06:18:c1:
                    d0:c1:4b:bc:aa:aa:a5:ee:41:24:a7:36:a1:e0:bb:
                    e9:10:b7:11:f9:54:34:30:26:c4:39:e4:e0:dd:ad:
                    1b:c4:75:74:f5:9b:c5:cd:b9:cc:4e:a0:b9:04:fe:
                    5f:be:fb:0c:c8:7a:27:b8:7f:bb:52:d8:e2:a9:f3:
                    54:42:99:29:60:25:d2:05:ff:ed:48:32:1f:7e:02:
                    49:c9:9d:97:03:b8:e1:92:d4:6d:ef:74:42:96:27:
                    86:05:8f:61:e6:d0:f6:a7:15:68:65:66:25:0e:e3:
                    64:4c:a1:c8:9c:4c:8b:ce:2b:20:71:c6:77:ab:4a:
                    bb:7b:2b:9b:99:26:d3:84:78:01:98:ae:fd:d5:17:
                    af:45:22:dc:56:7f:cc:8d:49:da:75:24:8d:ba:bd:
                    3b:63:08:db:03:fc:34:7c:a2:98:b7:13:42:c8:49:
                    f2:ff:06:29:4d:50:48:4e:ff:c2:b3:31:87:6d:c1:
                    94:b8:d0:8a:36:1f:60:7f:42:00:63:1f:d0:c6:d3:
                    84:36:08:6d:80:8c:cc:2f:a6:0f:c7:bc:61:0a:4d:
                    f7:c8:62:27:38:cf:18:b4:1c:30:81:22:0f:4f:f2:
                    ff:10:39:01:e4:94:af:d5:43:80:e6:ed:1c:f7:05:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:BE:F0:CA:A4:D6:5B:A2:7D:06:CF:CA:1F:69:60:BE:21:1B:1B
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:82:97:0a:a4:04:33:0b:01:bd:64:e4:c7:59:a0:6b:3f:34:
         8b:01:35:40:17:b2:38:0d:ef:d3:c5:e8:2e:ae:4e:ef:db:ce:
         7d:38:a7:c6:e3:bf:17:5f:8e:15:a4:2d:77:27:6e:f5:4c:c4:
         63:47:b2:12:76:7e:4f:e4:3a:4f:3a:af:16:a4:02:8c:63:1f:
         67:09:ce:6c:dd:68:9b:bc:ef:2f:5d:4c:9a:f0:8d:02:94:e2:
         3e:5a:ac:e3:30:03:ca:bf:50:7b:6d:f5:af:14:f7:b6:b1:85:
         98:0f:06:77:20:d1:16:69:e8:69:6f:23:7e:ff:2a:9c:5a:70:
         34:5a:02:8f:3c:14:77:b0:70:76:4b:ab:c1:ee:cc:6d:af:72:
         4a:9f:3f:87:5f:13:de:8f:cc:50:ab:46:31:af:17:e9:5e:db:
         c4:03:d2:67:38:10:3a:aa:a5:ca:95:0d:41:a5:cd:b7:f0:37:
         50:8d:fa:bf:23:45:21:fd:92:d9:84:6b:7c:27:95:1f:31:fe:
         f7:04:28:80:76:67:1c:ba:e6:3c:c9:4f:31:4f:fa:67:ea:69:
         fb:98:22:03:49:b0:d0:41:59:3a:18:d6:d0:0d:41:dc:10:a6:
         5a:cd:6e:b1:c9:30:07:a2:eb:e8:5b:a9:dc:68:59:6f:75:03:
         7d:98:e9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:09:39 2025 by rpki-client