Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3235322e302f32322d3232203d3e20323632393732.roa
File:                     3137392e3132342e3235322e302f32322d3232203d3e20323632393732.roa (raw, json)
Hash identifier:          ymsJMO9EBV5Mbn7rRV+AivsMp1Y3FkY6+EtJnV5+xeQ=
Subject key identifier:   F2:80:96:95:2F:9C:CA:C8:6E:70:3D:F4:CB:58:AF:40:DB:B1:67:9A
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       741BFDD391B3C5C91CA4BFF7768617FF7B8364FD
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3235322e302f32322d3232203d3e20323632393732.roa
Signing time:             Mon 08 Jun 2026 11:52:59 +0000
ROA not before:           Mon 08 Jun 2026 11:47:59 +0000
ROA not after:            Mon 07 Jun 2027 11:52:59 +0000
asID:                     262972
IP address blocks:        179.124.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1b:fd:d3:91:b3:c5:c9:1c:a4:bf:f7:76:86:17:ff:7b:83:64:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jun  8 11:47:59 2026 GMT
            Not After : Jun  7 11:52:59 2027 GMT
        Subject: CN=F28096952F9CCAC86E703DF4CB58AF40DBB1679A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:f7:8f:71:9b:2a:c3:4c:39:d3:d7:7d:69:
                    1b:20:a0:cc:04:b0:62:d3:ee:d7:2a:75:26:7b:ed:
                    e4:70:0e:f2:87:8e:36:78:19:65:11:08:b0:77:bf:
                    78:a8:c7:ec:f0:5c:2e:c7:70:0c:76:48:96:88:1b:
                    0b:db:2e:e7:eb:e8:49:3d:82:ec:00:94:80:e9:36:
                    4f:f5:cb:73:b0:73:a9:33:d7:87:45:62:a0:9e:e9:
                    5b:68:c3:99:fd:68:af:b2:c9:d7:f8:87:11:1e:21:
                    5c:15:de:29:1e:03:12:37:6c:e1:d8:ee:1f:b9:8f:
                    18:4e:c0:4c:02:9d:74:39:4e:e0:09:5a:f2:7c:c7:
                    56:10:ed:d5:49:9e:bc:e8:1b:df:08:5b:49:bd:f7:
                    68:b3:6a:c3:fb:dc:8d:6a:10:d8:05:34:41:4f:d3:
                    98:77:44:d1:4b:68:eb:77:09:24:d5:a7:d0:86:b8:
                    e7:a0:1f:38:9b:17:b1:9f:dd:1a:b7:ea:be:e7:64:
                    2d:d3:01:6a:98:76:33:92:f3:09:e9:f5:ab:d5:52:
                    6a:f9:c8:06:d1:71:72:73:9a:4a:5a:4a:c6:ed:e4:
                    14:0b:01:13:81:fd:81:13:ce:e0:5f:b5:74:7e:5c:
                    a3:76:cf:ca:17:97:eb:c5:16:e2:25:d3:33:15:52:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:96:95:2F:9C:CA:C8:6E:70:3D:F4:CB:58:AF:40:DB:B1:67:9A
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3235322e302f32322d3232203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:77:1e:0e:76:0a:3d:81:1e:46:65:1e:7b:0e:ee:ad:9f:01:
         a6:c8:89:48:d0:30:60:13:1e:3e:5e:bb:31:01:89:f9:50:9a:
         d3:23:59:dd:22:27:00:a0:4b:c7:0a:f7:28:0b:31:51:c5:54:
         ab:f1:84:61:7c:19:2f:73:ea:c5:b1:8d:c1:73:81:72:eb:33:
         72:cc:76:5b:dc:c7:bc:84:4b:d1:2d:a3:02:9b:78:50:a0:0c:
         e6:5d:29:3d:65:4e:f7:97:85:94:ec:63:c1:46:69:eb:e7:cc:
         71:93:3b:9a:d9:35:2e:c5:73:ef:b0:4e:8d:50:b7:60:48:12:
         dd:68:88:0b:a0:09:b2:c5:41:ea:87:94:5a:9b:e0:71:8a:43:
         65:10:90:23:fd:21:e6:79:62:4b:23:15:68:7d:86:19:01:7d:
         06:05:26:fa:a1:79:10:01:3b:bf:e4:93:6d:62:7e:18:34:b0:
         3d:2b:08:45:fe:75:33:3d:6e:e7:5a:03:5e:96:7a:f5:b5:21:
         c0:94:78:a0:c2:99:c0:1b:c2:07:95:a6:6f:f1:34:85:8c:5f:
         99:5d:98:6a:0a:53:80:80:6f:92:7f:e0:08:90:a1:fc:a9:26:
         5a:d7:67:63:f8:a3:c5:5e:3f:86:18:69:75:a6:03:b3:02:57:
         8c:2f:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:30:22 2026 by rpki-client