Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa
File:                     3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa (raw, json)
Hash identifier:          A4vS95H/nt/XpLbLv3ab5PushkcxNbhzmy+a5OYgovg=
Subject key identifier:   73:BC:AE:04:A6:10:1A:25:44:44:86:CB:3A:A1:47:8D:91:00:C9:7A
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       7E3E6A95554095B865AE0B02E0233B80C64708BA
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa
Signing time:             Mon 05 Aug 2024 11:47:23 +0000
ROA not before:           Mon 05 Aug 2024 11:42:23 +0000
ROA not after:            Mon 04 Aug 2025 11:47:23 +0000
asID:                     262972
IP address blocks:        179.124.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3e:6a:95:55:40:95:b8:65:ae:0b:02:e0:23:3b:80:c6:47:08:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Aug  5 11:42:23 2024 GMT
            Not After : Aug  4 11:47:23 2025 GMT
        Subject: CN=73BCAE04A6101A25444486CB3AA1478D9100C97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:0a:20:d9:bf:b9:1c:19:6b:44:98:fe:9d:
                    da:99:9f:5f:f0:88:53:44:73:1d:62:23:df:a1:a3:
                    1d:07:55:9c:0a:6e:c3:81:97:e0:df:9a:a3:ed:96:
                    56:87:0b:5a:c8:f3:00:f6:cf:59:6e:88:83:1d:57:
                    8b:cc:28:1d:81:03:89:65:ad:21:6d:5c:cf:29:e7:
                    6a:3c:2d:6f:d6:2d:80:e6:dd:19:65:6c:5f:e0:3b:
                    fb:ef:3c:27:32:94:33:77:ac:60:90:9c:8e:87:c4:
                    8b:e7:ec:72:fe:20:86:a7:1c:6f:fb:12:28:60:71:
                    4e:3e:b5:03:6f:3c:d8:c7:52:cc:48:f1:0a:10:23:
                    70:9b:b6:1a:00:b7:fd:47:9c:8a:9c:3d:97:57:f6:
                    26:42:62:af:c1:18:d9:fc:05:fb:75:dc:78:67:80:
                    22:ac:78:b1:b4:a3:ab:4b:31:9e:a4:73:65:62:db:
                    86:3e:f7:3f:c1:61:5c:d3:b2:15:f2:9e:4c:42:d9:
                    61:cc:ea:2f:b7:39:61:1d:1a:e1:e2:49:46:58:bd:
                    89:fa:ad:66:08:6f:c4:f5:7e:2b:98:2e:60:8d:57:
                    20:5c:d1:6b:48:2c:b4:45:c7:92:7e:72:bf:1f:01:
                    f8:30:63:cf:57:25:30:2d:f7:54:70:d2:28:f9:7e:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BC:AE:04:A6:10:1A:25:44:44:86:CB:3A:A1:47:8D:91:00:C9:7A
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3137392e3132342e3234382e302f32322d3232203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:ad:5c:25:02:6c:f7:70:27:50:93:2e:89:54:f3:8c:1a:
         b4:94:21:c5:97:29:47:e1:10:c1:52:fc:12:e8:93:83:d3:2a:
         28:f5:26:a5:08:d4:fe:33:f9:3b:a2:bd:24:1e:96:f5:77:1e:
         a6:3e:40:3c:0c:19:c2:62:d2:e8:ea:97:e3:4a:70:1a:f4:6f:
         2d:27:88:35:c0:e2:76:52:5b:dd:fd:eb:a7:3d:ab:bd:8a:bf:
         ac:64:33:99:5e:18:ce:26:0c:92:31:72:77:7d:35:6d:f9:87:
         f9:07:09:1b:7e:11:67:ae:52:48:94:41:5f:21:24:1f:63:5c:
         cf:55:76:e2:56:2f:f3:0d:46:cd:1f:89:16:d3:b9:e5:3f:52:
         c7:a1:26:80:9e:29:fc:55:cc:22:95:5e:51:dc:f3:a2:f0:40:
         4f:9c:c1:9f:ed:5c:c3:d2:96:35:50:d6:2b:c5:ea:62:2f:bf:
         92:b5:71:b0:dc:c6:cf:3d:af:59:52:b5:ef:eb:3b:e8:86:cc:
         17:ff:1f:91:6d:a1:f0:5e:d1:a5:fd:fb:82:62:fd:d4:76:ed:
         b8:ba:36:88:61:8f:22:ac:9c:7a:d9:45:70:90:a7:32:01:d5:
         65:25:0e:b0:e9:53:9e:41:14:d0:0a:c6:d8:64:bb:b6:66:30:
         5b:01:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:21 2024 by rpki-client on console-ams.rpki-client.org