Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          AqaGJdnfVDnrDs9o4pa1x/Ggk3ojfJEIZ+CuPIpO/f8=
Subject key identifier:   FC:31:D1:57:5E:89:62:A4:DF:AA:C5:CF:55:C6:1E:00:10:D5:FA:8D
Certificate issuer:       /CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
Certificate serial:       6BA2884FF1F96E9260F4F86F6DD3321C443AD4A2
Authority key identifier: CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61759
IP address blocks:        131.100.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl
                          rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a2:88:4f:f1:f9:6e:92:60:f4:f8:6f:6d:d3:32:1c:44:3a:d4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC21C52002F12385FE61F33BF5F6933D09EF8ED2
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100B970DA1470E241551394C68B2689F9A61F0452DC4A9B83D807CD4E24BBBEE0C549844879ADC793FA2F5152EAB5749B1BE1F86B745D42CE276182C61A51536AACB8F0B9161804AD883D4E596E1BE1A75942A1B896F72ACC2C542F726A3D810C2B96E2EAF184B9F9BBA86B98B015A8CB2F4C553CC11379C01B2BBC73944933D113E091E6A3B8771A337670F7A3E8CB73AF1CE371A1F79A29A54A61BB4A346E94640C471B65ACAA5FB387606C0E3B5E5B7D455ED15F9BC5C3B450907079422AB51B9C913D177B7E57113EBE241324E3A9CB4B5955E969974B372C199D80C9E9ECD80F0CDB48A85C7EAA82D9531E2C77384F28A47B9F1F24A8843F6FA7149812A4390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:da:14:70:e2:41:55:13:94:c6:8b:26:89:
                    f9:a6:1f:04:52:dc:4a:9b:83:d8:07:cd:4e:24:bb:
                    be:e0:c5:49:84:48:79:ad:c7:93:fa:2f:51:52:ea:
                    b5:74:9b:1b:e1:f8:6b:74:5d:42:ce:27:61:82:c6:
                    1a:51:53:6a:ac:b8:f0:b9:16:18:04:ad:88:3d:4e:
                    59:6e:1b:e1:a7:59:42:a1:b8:96:f7:2a:cc:2c:54:
                    2f:72:6a:3d:81:0c:2b:96:e2:ea:f1:84:b9:f9:bb:
                    a8:6b:98:b0:15:a8:cb:2f:4c:55:3c:c1:13:79:c0:
                    1b:2b:bc:73:94:49:33:d1:13:e0:91:e6:a3:b8:77:
                    1a:33:76:70:f7:a3:e8:cb:73:af:1c:e3:71:a1:f7:
                    9a:29:a5:4a:61:bb:4a:34:6e:94:64:0c:47:1b:65:
                    ac:aa:5f:b3:87:60:6c:0e:3b:5e:5b:7d:45:5e:d1:
                    5f:9b:c5:c3:b4:50:90:70:79:42:2a:b5:1b:9c:91:
                    3d:17:7b:7e:57:11:3e:be:24:13:24:e3:a9:cb:4b:
                    59:55:e9:69:97:4b:37:2c:19:9d:80:c9:e9:ec:d8:
                    0f:0c:db:48:a8:5c:7e:aa:82:d9:53:1e:2c:77:38:
                    4f:28:a4:7b:9f:1f:24:a8:84:3f:6f:a7:14:98:12:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:31:D1:57:5E:89:62:A4:DF:AA:C5:CF:55:C6:1E:00:10:D5:FA:8D
            X509v3 Authority Key Identifier:
                keyid:CC:21:C5:20:02:F1:23:85:FE:61:F3:3B:F5:F6:93:3D:09:EF:8E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC21C52002F12385FE61F33BF5F6933D09EF8ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/1/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:88:5e:d3:48:81:bd:81:14:00:93:98:d9:78:40:0a:e9:
         ea:6d:98:8c:1e:7b:6f:13:98:e1:dc:dd:3e:79:e5:f1:66:85:
         ca:f3:38:10:ac:22:a6:17:d3:20:36:40:a8:c3:50:70:fa:45:
         44:14:8a:7d:fd:ef:98:5c:6c:34:2c:17:f4:e8:bc:a5:c7:bf:
         93:50:43:80:7a:3d:52:09:98:23:7f:b8:aa:ee:6a:bf:9a:12:
         de:3d:57:7e:59:71:a6:b8:3b:71:37:cb:9a:e4:02:2f:c9:e1:
         cc:15:40:cf:74:12:0c:c7:56:a4:c3:77:ad:f1:22:ba:53:ef:
         e4:cc:75:fe:08:8b:58:1c:cd:90:c4:35:fa:9d:1a:5a:2b:06:
         6d:a3:02:d8:18:64:29:34:02:52:18:ab:b5:a4:b8:92:77:b9:
         2c:61:0d:ed:a5:ee:4a:60:6a:41:3c:d1:eb:17:b3:44:4c:65:
         a9:1f:ef:7e:71:dd:f4:15:33:9b:c1:37:3f:6d:91:1e:82:24:
         64:2b:93:7b:08:0c:8f:38:66:07:39:e3:f3:2f:1d:c0:7a:97:
         53:7c:b1:bb:42:73:91:43:e8:71:36:64:1f:43:29:fc:6b:f1:
         55:9f:6c:c0:e0:c2:0d:be:80:45:7d:b9:88:09:ec:e1:ba:d3:
         bb:31:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:38 2025 by rpki-client on console.sobornost.net