Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa
File:                     3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa (raw, json)
Hash identifier:          VuY31dsTm4a2MtyuiR0Q1wB9O0BJI6o7DfxJPSizDGM=
Subject key identifier:   41:EB:D8:7A:6B:AC:98:AC:24:05:3A:A6:24:AA:36:74:D8:7D:26:AD
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       4F47FA472F52F253CE2EAD0E287E2B7C56844018
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa
Signing time:             Mon 07 Jul 2025 12:48:15 +0000
ROA not before:           Mon 07 Jul 2025 12:43:15 +0000
ROA not after:            Mon 06 Jul 2026 12:48:15 +0000
asID:                     262972
IP address blocks:        179.124.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:47:fa:47:2f:52:f2:53:ce:2e:ad:0e:28:7e:2b:7c:56:84:40:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jul  7 12:43:15 2025 GMT
            Not After : Jul  6 12:48:15 2026 GMT
        Subject: CN=41EBD87A6BAC98AC24053AA624AA3674D87D26AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:79:0e:c2:4d:dd:22:de:40:ad:3d:e1:21:2d:
                    ff:35:fd:51:56:5b:43:68:07:92:a9:53:04:fe:5a:
                    33:9f:0c:8b:ac:96:61:af:da:7e:90:2c:87:07:ff:
                    73:39:4a:ca:7b:00:59:97:c9:53:7e:5f:3f:66:68:
                    30:b2:5e:b3:3c:72:fd:77:32:15:5e:09:0e:fc:f3:
                    0c:c9:32:f3:71:36:15:b0:1f:86:7c:4a:1b:8a:ea:
                    54:22:99:3e:a4:b4:6d:82:75:42:a9:ca:64:ee:6f:
                    e0:6c:e7:0b:87:b6:a2:53:23:25:d6:79:6b:16:c9:
                    9f:33:a4:c8:61:0a:b0:c3:3d:ad:48:de:a8:41:51:
                    4f:1d:98:ed:a0:37:23:a4:09:1e:a1:75:83:d3:e1:
                    e3:82:f1:c5:7d:72:b5:c8:72:97:bf:f1:81:76:ca:
                    60:2a:1c:af:d8:d2:ed:c5:c5:5e:83:a2:37:53:df:
                    95:ec:d4:62:a6:27:4d:e1:88:6a:a8:d6:8c:ce:a7:
                    4a:9f:08:06:ac:f8:39:2f:2e:05:c3:20:8f:a4:77:
                    da:7c:24:d8:c2:95:0a:e8:01:f4:60:5e:b3:bb:c4:
                    54:e9:0b:43:d4:2c:e6:c1:d9:72:14:ac:3c:d9:ed:
                    c7:5b:0e:8d:d1:1e:0d:5f:34:be:bf:79:74:2f:32:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EB:D8:7A:6B:AC:98:AC:24:05:3A:A6:24:AA:36:74:D8:7D:26:AD
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:7c:7f:30:a9:fa:fa:e1:33:b6:fb:f1:51:37:9f:b2:75:
         f6:b3:a0:3a:b3:b9:f2:7a:93:4a:2a:4c:6b:6f:d9:7a:ac:df:
         de:77:2e:23:a4:7d:35:ef:dd:54:22:52:cc:e1:c9:ee:f5:df:
         8e:ea:06:75:21:35:7e:f9:9c:89:ed:ee:ba:df:a4:0e:1a:cb:
         ac:59:48:04:a5:1c:06:88:16:34:8c:d6:d2:21:07:f8:ea:dd:
         47:01:14:2e:a8:c8:b9:56:dd:33:2b:9b:4a:3f:22:f7:0c:00:
         38:a2:57:10:07:00:4b:df:6a:af:ac:17:61:04:c6:10:2e:4a:
         53:a1:a9:2e:e7:ea:aa:db:93:27:ad:9a:b9:51:e0:ff:e4:b6:
         e0:0b:be:bb:47:4d:7b:d8:ec:bd:04:c4:1b:35:af:ce:27:de:
         7a:22:cd:53:aa:94:d1:01:47:fc:45:e7:99:91:4c:e3:66:0d:
         52:01:c2:7d:84:e3:a1:4a:c0:8c:ff:b0:9f:69:f2:1c:94:4c:
         12:6c:6b:12:87:44:a5:bb:a8:81:20:10:8c:0b:bf:2c:a8:07:
         a9:3f:89:19:13:69:65:5f:9b:ae:8f:1a:14:c5:96:4f:17:f8:
         1e:34:ac:f2:f8:54:86:bb:97:cd:94:33:4a:63:ec:3c:fa:48:
         2f:a4:ba:c4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUT0f6Ry9S8lPOLq0OKH4rfFaEQBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY4MTg1MzIwQkJCRTU0RjlFNEIyRUIwNkE1REIzMzRC
MURBNjg4OTAeFw0yNTA3MDcxMjQzMTVaFw0yNjA3MDYxMjQ4MTVaMDMxMTAvBgNV
BAMTKDQxRUJEODdBNkJBQzk4QUMyNDA1M0FBNjI0QUEzNjc0RDg3RDI2QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDneQ7CTd0i3kCtPeEhLf81/VFW
W0NoB5KpUwT+WjOfDIuslmGv2n6QLIcH/3M5Ssp7AFmXyVN+Xz9maDCyXrM8cv13
MhVeCQ788wzJMvNxNhWwH4Z8ShuK6lQimT6ktG2CdUKpymTub+Bs5wuHtqJTIyXW
eWsWyZ8zpMhhCrDDPa1I3qhBUU8dmO2gNyOkCR6hdYPT4eOC8cV9crXIcpe/8YF2
ymAqHK/Y0u3FxV6DojdT35Xs1GKmJ03hiGqo1ozOp0qfCAas+DkvLgXDII+kd9p8
JNjClQroAfRgXrO7xFTpC0PULObB2XIUrDzZ7cdbDo3RHg1fNL6/eXQvMmj3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQevYemusmKwkBTqmJKo2dNh9Jq0wHwYDVR0j
BBgwFoAUVoGFMgu75U+eSy6wal2zNLHaaIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVUaDZOb3Zub1E5OTV4akVFMVROcGJVcWRmRzdQV2l5allQZU42bmJ1
Rm4vMC81NjgxODUzMjBCQkJFNTRGOUU0QjJFQjA2QTVEQjMzNEIxREE2ODg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2ODE4NTMyMEJCQkU1NEY5
RTRCMkVCMDZBNURCMzM0QjFEQTY4ODkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VGg2Tm92bm9ROTk1eGpFRTFUTnBiVXFkZkc3UFdpeWpZUGVONm5idUZuLzAv
MzEzNzM5MmUzMTMyMzQyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7N8+DANBgkqhkiG9w0BAQsFAAOCAQEAKKx8
fzCp+vrhM7b78VE3n7J19rOgOrO58nqTSipMa2/Zeqzf3ncuI6R9Ne/dVCJSzOHJ
7vXfjuoGdSE1fvmcie3uut+kDhrLrFlIBKUcBogWNIzW0iEH+OrdRwEULqjIuVbd
MyubSj8i9wwAOKJXEAcAS99qr6wXYQTGEC5KU6GpLufqqtuTJ62auVHg/+S24Au+
u0dNe9jsvQTEGzWvzifeeiLNU6qU0QFH/EXnmZFM42YNUgHCfYTjoUrAjP+wn2ny
HJRMEmxrEodEpbuogSAQjAu/LKgHqT+JGRNpZV+bro8aFMWWTxf4HjSs8vhUhruX
zZQzSmPsPPpIL6S6xA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:24 2025 by rpki-client