Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa
File:                     3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa (raw, json)
Hash identifier:          mTCdb7idVHtk1fm0A9SnpAM53u0qXzg2ep+toQ9dBPI=
Subject key identifier:   7F:80:68:FD:E1:22:68:A1:32:C4:46:49:DB:FD:73:5D:78:FA:49:99
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       4BB01987BBD2BC5D93776F8E827B980392FAFD3E
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa
Signing time:             Mon 07 Jul 2025 11:48:14 +0000
ROA not before:           Mon 07 Jul 2025 11:43:14 +0000
ROA not after:            Mon 06 Jul 2026 11:48:14 +0000
asID:                     262972
IP address blocks:        186.227.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b0:19:87:bb:d2:bc:5d:93:77:6f:8e:82:7b:98:03:92:fa:fd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jul  7 11:43:14 2025 GMT
            Not After : Jul  6 11:48:14 2026 GMT
        Subject: CN=7F8068FDE12268A132C44649DBFD735D78FA4999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:ed:bb:28:49:9e:af:62:25:f3:de:93:ba:
                    2c:d9:19:37:74:30:c2:61:fb:4a:fb:5f:21:10:8a:
                    82:5c:34:12:27:96:f0:ed:bd:19:89:4b:42:e4:76:
                    53:6e:44:48:c6:1e:dd:84:86:58:f0:7e:83:d7:dc:
                    ed:eb:f1:59:6f:a8:dc:f5:47:22:be:9c:56:aa:1e:
                    0a:a6:5c:ae:df:d1:0d:4b:60:2f:df:7f:df:00:c0:
                    fc:9c:39:5b:91:ac:6e:48:be:0d:7a:0a:ff:75:30:
                    ba:97:0d:44:22:9b:58:5a:be:58:a7:80:61:0e:70:
                    99:d3:13:76:b9:11:1a:62:8c:27:f9:3f:50:4c:6c:
                    29:8d:c6:1e:54:30:ec:3b:57:59:83:01:b2:16:bd:
                    d6:bb:36:2c:36:2f:88:50:c9:a2:1a:f6:a1:d8:a2:
                    3d:2b:3b:97:dd:b8:ce:b8:dc:9d:ff:89:12:c1:80:
                    1d:23:b9:75:19:9e:a8:5f:dd:8d:88:b3:8a:9d:bd:
                    59:2a:dc:d4:b3:d7:14:0b:43:c9:59:b9:cd:7b:91:
                    54:7c:01:12:ec:e7:41:81:d2:14:4c:83:48:0d:c8:
                    ce:a4:40:8f:4a:b9:ee:0e:dd:6e:28:b7:aa:ff:e8:
                    6e:7d:76:22:d4:88:40:22:f8:5b:89:57:0f:f5:b4:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:68:FD:E1:22:68:A1:32:C4:46:49:DB:FD:73:5D:78:FA:49:99
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135342e302f32332d3233203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:fa:24:81:54:41:2c:59:41:09:e1:50:ea:ff:d7:54:e1:
         7f:ae:ec:00:33:b0:8f:20:4d:ee:b1:15:19:e6:db:d2:7a:d4:
         89:87:51:be:e6:0f:46:79:1d:ca:50:66:73:61:1c:e9:2d:52:
         c8:fc:a4:0a:67:5e:f5:20:c5:e4:3f:06:6d:4c:5f:fa:e1:e9:
         c1:81:2c:f8:e8:53:50:e4:66:f6:16:0b:b4:e8:07:ce:64:a4:
         bc:57:71:93:96:cd:4b:21:9c:a3:72:f2:a3:96:22:0e:6a:66:
         fe:a8:91:81:13:13:eb:cf:44:3e:c2:af:c5:8e:49:49:25:41:
         13:cb:bc:9f:41:8d:67:a8:5c:96:e0:cc:0f:48:07:3a:13:4f:
         1c:85:6a:b9:06:df:48:94:9d:9e:13:36:2a:5a:48:9f:82:dd:
         31:cd:71:55:fb:60:63:c8:a3:fb:1e:3b:60:39:ab:19:81:ad:
         8b:9a:c2:6b:83:3c:2e:ae:e0:58:bf:30:a7:0a:49:96:0b:97:
         20:af:ab:ee:c4:29:41:5c:c1:6d:ee:3e:22:bf:f4:4e:76:0c:
         3c:e4:e4:78:2d:e3:92:d8:e0:15:6b:a8:9f:8c:7c:d5:e0:aa:
         bf:d0:bd:81:ca:6e:71:78:f2:00:87:ad:c3:75:da:12:ac:cd:
         8d:29:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:45 2025 by rpki-client