Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa
File:                     3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa (raw, json)
Hash identifier:          S9Z+Qvbd8nkRPAOONlI9IJt5Gryn0dL+WVJf5CQGOyU=
Subject key identifier:   FC:F8:C0:D7:08:B4:24:23:3F:4C:3A:9F:55:C5:25:92:7B:6B:2A:75
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       0E6163BCF42A025A418BB9B2C65B7ABF2A320CB1
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa
Signing time:             Mon 05 Aug 2024 11:48:33 +0000
ROA not before:           Mon 05 Aug 2024 11:43:33 +0000
ROA not after:            Mon 04 Aug 2025 11:48:33 +0000
asID:                     262972
IP address blocks:        179.124.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:61:63:bc:f4:2a:02:5a:41:8b:b9:b2:c6:5b:7a:bf:2a:32:0c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Aug  5 11:43:33 2024 GMT
            Not After : Aug  4 11:48:33 2025 GMT
        Subject: CN=FCF8C0D708B424233F4C3A9F55C525927B6B2A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:96:c3:3f:aa:5b:63:a5:8e:5f:5f:dc:0e:
                    dc:c3:41:34:da:65:ca:dc:db:3f:ab:ae:45:37:5e:
                    14:0c:64:73:9e:73:30:3e:a3:21:d5:e4:eb:d7:79:
                    fd:3c:52:ea:68:af:2f:20:2e:10:c0:b6:5b:24:d5:
                    32:b7:7c:3b:8d:62:e3:70:f6:cd:29:a1:e5:73:a9:
                    4a:97:a7:dc:98:5e:ec:8c:81:06:f1:75:0f:52:cd:
                    43:af:cf:23:11:c3:46:c9:51:92:77:6f:6e:0c:70:
                    7f:e5:fc:67:34:93:fd:d2:7f:c3:65:59:f7:89:bc:
                    83:31:91:fd:23:68:ee:d6:70:40:88:58:1e:57:c9:
                    08:98:e0:aa:45:59:85:7c:53:16:43:3d:95:3c:69:
                    5f:dc:e1:0e:10:b7:b3:db:9c:c5:c9:c6:99:9e:d3:
                    57:4a:85:ea:6a:19:81:41:2c:6e:ba:e8:ac:42:c6:
                    e9:34:0f:ec:91:5a:02:27:cd:46:6c:2d:75:d3:69:
                    15:96:66:1d:8f:9e:c7:58:b9:66:e1:50:f7:72:c8:
                    04:18:e7:4e:2e:e8:e3:53:c6:91:69:a2:0f:9b:88:
                    1b:e3:2c:52:bc:90:6e:ee:2e:27:60:12:4d:a6:10:
                    91:04:97:e1:ce:bd:57:5f:4d:b0:0b:c0:b9:7f:d0:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F8:C0:D7:08:B4:24:23:3F:4C:3A:9F:55:C5:25:92:7B:6B:2A:75
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32312d3234203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:54:fa:ef:9e:76:cc:5f:7f:34:52:9a:72:f5:ce:81:0f:67:
         07:59:e0:90:d9:a9:3d:84:80:3d:13:af:d8:bc:57:00:8a:9a:
         6b:81:87:e8:c2:4c:97:06:31:bc:fd:e1:04:0f:6e:cd:2b:a8:
         a0:fe:82:cf:5d:94:4b:92:5e:f8:83:e8:18:ff:ad:ba:ad:f5:
         ff:83:a4:91:a6:f8:d5:39:42:11:3b:0f:31:a3:93:a8:4f:44:
         4a:59:fe:aa:66:e4:74:4a:ab:47:50:63:8e:14:0b:97:bb:c5:
         39:d6:2c:c2:c5:6c:0f:40:b2:ea:94:2d:94:79:de:b0:95:3a:
         a1:27:d7:6e:10:a9:1f:59:d6:e8:f3:ff:53:33:66:11:40:4a:
         ba:0e:2c:43:f7:cc:71:c8:d5:cc:37:98:90:5a:dd:d1:60:dd:
         06:12:20:1f:7e:06:8a:92:62:42:ee:9b:4a:05:dd:70:b9:65:
         ea:df:5f:65:3d:84:f1:3f:96:cb:40:e4:b8:b4:36:b6:fc:06:
         6d:f5:c0:83:09:e7:90:5d:b5:a3:c2:6f:07:96:51:62:38:a9:
         9e:a6:7c:53:32:ab:c9:7e:30:b0:b6:46:52:7b:a6:fc:8b:29:
         38:f7:71:b8:97:c3:84:13:bc:23:1b:f9:98:3c:27:0a:48:31:
         74:d1:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:11 2025 by rpki-client