Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa
File:                     3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa (raw, json)
Hash identifier:          iPyQS+jQ4JrSnZbKhwvSvX/xvI5evRd7CXRhDVNyEYE=
Subject key identifier:   E0:EF:6A:D9:76:85:88:FA:CA:96:6B:80:46:92:7D:1A:1F:16:D4:93
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       048E6666726DFB9AE20D9AB6A2C5EB2ECB96CFC1
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa
Signing time:             Mon 08 Jun 2026 11:52:59 +0000
ROA not before:           Mon 08 Jun 2026 11:47:59 +0000
ROA not after:            Mon 07 Jun 2027 11:52:59 +0000
asID:                     262972
IP address blocks:        179.124.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8e:66:66:72:6d:fb:9a:e2:0d:9a:b6:a2:c5:eb:2e:cb:96:cf:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jun  8 11:47:59 2026 GMT
            Not After : Jun  7 11:52:59 2027 GMT
        Subject: CN=E0EF6AD9768588FACA966B8046927D1A1F16D493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:ea:86:c0:ca:69:5e:b1:9c:7b:d9:d7:49:
                    49:ec:25:34:f8:b7:24:f7:4c:5f:60:a0:ab:87:74:
                    b6:15:4b:cd:99:a8:fd:f2:31:bb:a7:c8:80:87:d6:
                    5c:da:51:19:a6:0b:7f:d2:10:fd:7f:30:06:99:fa:
                    ea:66:13:31:13:e4:0c:50:27:76:bd:7b:53:24:36:
                    f0:bb:d7:bd:ea:b8:05:7e:a3:5c:7f:17:ce:8e:38:
                    d6:7e:2d:4c:37:75:13:9f:e6:e3:b7:90:8e:91:be:
                    73:45:73:21:ff:15:c5:68:f8:0d:1a:54:20:05:5f:
                    a7:3e:b0:fe:8f:38:fb:29:bc:fe:32:e8:d7:53:f6:
                    19:fa:88:67:9f:a8:13:f0:51:fe:95:ab:0a:0e:56:
                    3a:ca:38:0c:e7:25:07:77:59:27:4e:bb:95:15:f6:
                    62:2e:99:63:ad:4f:06:f2:b9:3c:9a:99:4f:7b:fa:
                    74:cb:52:93:91:72:53:ae:a4:bb:81:12:34:e2:0a:
                    2d:c3:e0:d9:53:f6:10:85:ed:f7:05:39:47:1d:09:
                    17:07:6c:56:cd:e0:6c:01:06:3b:71:d8:43:43:d6:
                    80:fd:4b:be:6a:09:65:ca:f1:26:59:c2:59:27:ca:
                    8d:e8:a6:fa:4a:3e:f4:36:3f:57:88:6c:44:44:43:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EF:6A:D9:76:85:88:FA:CA:96:6B:80:46:92:7D:1A:1F:16:D4:93
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:28:e4:db:00:21:70:c1:00:31:05:70:a8:80:9c:6b:ff:8c:
         25:48:fe:a9:06:42:a0:f3:1e:55:c3:32:a5:dc:04:42:e2:04:
         e6:27:fe:d1:51:5e:7a:c2:5e:bb:c6:9f:85:fb:1c:c9:1e:5d:
         df:35:43:e6:ab:21:39:5c:ec:f2:ef:24:33:e3:50:39:90:84:
         05:28:40:78:32:10:dd:19:62:ba:9e:ed:03:a7:21:56:3a:8d:
         96:18:60:ff:8f:b5:b3:d2:5f:07:e4:a0:50:dc:7c:20:0e:da:
         5f:af:e1:ac:a5:28:f6:38:00:0c:51:55:f8:a7:9c:98:84:c5:
         d5:28:80:b7:c8:ea:64:a6:37:6f:60:81:7d:5a:f1:1e:b4:29:
         4f:04:6f:8a:40:e5:5c:ec:51:76:cd:44:2f:5e:2e:d9:b6:9c:
         f7:d6:75:a5:ef:b5:e7:5a:5f:fd:d9:a5:f4:19:f5:2e:0c:24:
         7d:a6:7d:83:0d:a9:dd:7e:45:13:7a:12:63:e7:7d:9c:83:79:
         34:1c:d7:b2:9d:c3:c3:13:bc:db:5a:0a:84:f2:83:89:d9:45:
         91:64:fd:3b:c9:76:6d:e1:ee:19:26:df:65:df:d6:98:80:e9:
         d9:da:eb:2c:76:57:b4:0d:09:60:79:d1:5d:56:ea:a6:82:f2:
         9e:2b:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:29:57 2026 by rpki-client