Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa
File:                     3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa (raw, json)
Hash identifier:          IQAUIhm1QX46rQdobDTVwfl/J/qiZQuiB1cXyPijCNw=
Subject key identifier:   60:66:F7:4D:74:7B:2A:1E:4E:65:75:D8:8A:9A:7A:A3:1D:EE:B6:0A
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       0500538C9F1FE3D977684414E31D8E0977DF5B8F
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa
Signing time:             Mon 07 Jul 2025 11:48:14 +0000
ROA not before:           Mon 07 Jul 2025 11:43:14 +0000
ROA not after:            Mon 06 Jul 2026 11:48:14 +0000
asID:                     262972
IP address blocks:        179.124.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:00:53:8c:9f:1f:e3:d9:77:68:44:14:e3:1d:8e:09:77:df:5b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jul  7 11:43:14 2025 GMT
            Not After : Jul  6 11:48:14 2026 GMT
        Subject: CN=6066F74D747B2A1E4E6575D88A9A7AA31DEEB60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:d8:91:1f:12:b8:77:c9:81:e4:d0:64:36:
                    fd:05:3a:bf:4c:3a:08:f8:63:21:c7:a3:c3:61:6e:
                    05:55:4e:e6:cb:5d:b8:0c:6a:c2:6f:72:f7:ed:f7:
                    d9:49:d9:61:1d:13:a4:b8:ad:01:46:70:17:03:21:
                    9e:ef:be:5e:07:e7:7b:d4:61:6f:a8:d7:1c:43:fd:
                    ae:98:b9:46:0d:44:2b:18:88:ae:39:f2:4b:94:26:
                    39:78:07:36:87:e1:6f:a0:c5:d9:1e:85:0e:4f:0b:
                    1c:3d:8f:41:64:db:b8:ec:da:f6:fd:7e:24:03:cf:
                    0b:0b:8a:3f:3e:b6:41:e6:5e:84:eb:bd:97:85:cb:
                    34:67:94:c5:e5:c7:a5:bc:ec:43:2d:0e:ce:c2:ef:
                    60:c7:37:22:85:c3:e8:a7:4f:23:e1:81:74:82:22:
                    b3:6e:f5:e9:01:cd:a5:76:35:8e:d7:71:77:1d:a5:
                    db:01:5d:c5:14:71:f0:ae:7d:10:ab:f5:79:7f:00:
                    c4:ea:92:4b:50:a8:99:1d:e7:39:04:e9:2f:c1:f1:
                    0b:6f:77:1b:92:e1:fe:f6:99:ba:f6:e0:c7:b7:a4:
                    ea:5c:a7:7a:3a:cd:99:81:f2:b4:f5:0b:85:aa:3b:
                    1f:22:c3:c0:4f:47:65:29:f9:5f:80:05:1b:c0:9b:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:66:F7:4D:74:7B:2A:1E:4E:65:75:D8:8A:9A:7A:A3:1D:EE:B6:0A
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:8b:54:68:ac:d2:97:69:3a:05:43:cd:ce:a4:f0:d0:85:5c:
         53:14:e5:a0:04:55:a1:02:88:c3:d4:85:f2:02:5b:85:51:e2:
         2b:8b:72:f4:20:21:e9:a1:13:65:82:2b:90:ec:7a:43:c9:d8:
         3f:ca:43:2e:5c:d5:0a:95:76:0d:ac:53:6f:bd:42:10:e1:90:
         a4:ec:a9:f8:9c:c7:cc:db:88:74:04:9e:a6:f9:a1:c1:3d:44:
         09:88:9e:2a:65:d8:4d:cb:63:7e:e7:84:0c:1f:0f:1e:e4:8b:
         d0:b3:cc:44:4e:19:64:b7:d7:fc:7a:1a:d8:4e:81:9c:d0:70:
         80:fb:1a:98:67:ab:71:74:65:07:33:e5:7d:e9:98:95:4a:8e:
         03:51:1e:1d:34:44:43:fc:60:cb:c8:88:6e:56:dd:eb:d0:5f:
         2f:86:02:d0:ad:eb:e3:00:47:04:ff:c6:8b:6c:dd:7f:ff:d5:
         ba:d9:4c:e5:e0:52:cb:32:b2:f0:cb:ca:67:83:cd:74:b1:79:
         d3:52:a9:8f:f6:e8:18:ee:7f:e2:c8:6f:55:6c:f8:dd:f8:d3:
         75:4f:ae:4a:47:06:a0:55:65:aa:b4:95:e5:8c:fd:35:6c:a3:
         93:ee:5b:c1:2d:17:ef:03:2c:02:33:19:a6:dd:23:39:4a:89:
         01:39:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:33 2025 by rpki-client