Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa
File:                     3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa (raw, json)
Hash identifier:          qqPM0EfA0BRusQhZb2RAZsCbgNVDAGJBuAk2uJrZXow=
Subject key identifier:   D6:C0:96:1F:FE:B8:8E:EA:85:B8:7D:F3:D0:CB:B7:81:76:5A:AE:E4
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       03A89A4F6C90DF68AEF9114FC4E119D43D414B4E
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa
Signing time:             Mon 07 Jul 2025 11:48:14 +0000
ROA not before:           Mon 07 Jul 2025 11:43:14 +0000
ROA not after:            Mon 06 Jul 2026 11:48:14 +0000
asID:                     262972
IP address blocks:        179.124.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:9a:4f:6c:90:df:68:ae:f9:11:4f:c4:e1:19:d4:3d:41:4b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jul  7 11:43:14 2025 GMT
            Not After : Jul  6 11:48:14 2026 GMT
        Subject: CN=D6C0961FFEB88EEA85B87DF3D0CBB781765AAEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:41:da:a4:1e:d0:c9:94:d0:2d:b7:b6:1a:
                    be:cf:82:c9:fe:12:30:54:28:50:6e:b4:d0:3e:8d:
                    eb:86:dd:b8:48:f6:18:06:db:9c:c1:c1:34:b0:7c:
                    fe:aa:c3:24:25:56:5e:36:f4:0c:1f:d7:9e:f6:f5:
                    16:a9:99:cb:9a:50:60:44:e7:3e:24:29:0a:97:0d:
                    55:d3:f7:a5:50:54:5a:2a:59:d0:d9:87:85:86:82:
                    b1:9e:33:ff:af:69:8b:ba:28:74:34:d9:c8:6f:8b:
                    8a:59:cb:98:cc:53:13:5a:e2:bb:c3:eb:5f:41:9d:
                    80:cf:96:3d:ce:3a:e0:3b:80:4d:ab:06:5e:4b:f6:
                    fa:0f:7f:3c:cd:7d:89:89:d3:31:48:09:c6:1f:1a:
                    43:4f:95:ce:75:4d:c8:63:8d:f9:8c:e9:4f:2a:b6:
                    ea:47:84:fd:0b:68:ee:68:a3:d2:81:73:b4:3b:35:
                    be:51:90:49:61:22:bb:58:42:e6:6b:21:f7:d7:73:
                    78:d5:a3:d4:1d:04:96:48:26:0d:c8:95:25:23:ae:
                    a8:88:45:8a:7a:79:44:63:11:ee:b0:d7:7c:73:71:
                    f0:d6:94:b4:58:bc:14:f5:97:5b:82:79:de:8e:ac:
                    81:2e:9b:4a:5c:81:d3:53:39:23:79:6a:fa:b3:0b:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C0:96:1F:FE:B8:8E:EA:85:B8:7D:F3:D0:CB:B7:81:76:5A:AE:E4
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3231203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:94:28:e8:f3:d8:60:0f:82:e5:8c:75:75:c4:0a:4a:81:1b:
         28:d5:55:52:51:07:bd:24:66:f1:5b:1f:e7:8e:b2:cd:4a:c0:
         07:92:9b:d4:54:6d:c2:20:90:d7:3b:fb:76:79:fc:83:e5:e8:
         1b:49:19:3f:b2:45:3e:ec:bc:47:19:47:a0:9b:a0:38:df:e9:
         49:bb:5e:b3:73:54:f0:9d:3c:81:18:3c:e4:7b:1a:9a:2b:b6:
         6a:4d:53:aa:af:07:4c:eb:f3:c0:57:cf:ac:0b:28:fc:b8:93:
         1d:25:ae:e5:eb:99:a9:b7:26:cb:95:e3:d7:04:c6:f8:36:2c:
         da:18:bd:e0:d3:85:ef:db:77:e2:32:5d:0d:5d:b9:a3:98:ae:
         a4:1a:95:ce:57:3b:3a:5c:a7:3d:84:4e:8d:68:fa:b2:02:f1:
         c7:78:8c:bd:c2:d6:e3:37:74:69:eb:80:f1:07:ea:34:ce:7d:
         5f:3e:82:0e:96:0c:de:b7:80:2f:60:98:0e:8c:8d:85:90:12:
         2d:54:c4:fc:78:36:74:ba:f0:23:6b:90:d5:1f:5c:37:9a:22:
         a0:65:f4:d8:0c:9c:13:bc:97:8a:57:09:7d:50:2f:45:68:07:
         0f:51:59:28:8b:24:23:38:51:09:3b:49:04:98:8d:5c:c6:1e:
         87:e8:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:26 2025 by rpki-client