Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32322d3232203d3e20323733353830.roa
File:                     34352e362e3132342e302f32322d3232203d3e20323733353830.roa (raw, json)
Hash identifier:          Jx58Gag6qi4JmFkD7sp/ZJF38kEmkcXI4JmlJxZPmkg=
Subject key identifier:   91:C1:65:0B:2C:5E:D8:70:76:08:DF:40:54:2B:8C:60:E3:8F:BB:B8
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       6D0A29F0376F592B64D02A35F3ABA20BFA1BDF24
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32322d3232203d3e20323733353830.roa
Signing time:             Wed 20 Aug 2025 02:34:33 +0000
ROA not before:           Wed 20 Aug 2025 02:29:33 +0000
ROA not after:            Wed 19 Aug 2026 02:34:33 +0000
asID:                     273580
IP address blocks:        45.6.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 22:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0a:29:f0:37:6f:59:2b:64:d0:2a:35:f3:ab:a2:0b:fa:1b:df:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Aug 20 02:29:33 2025 GMT
            Not After : Aug 19 02:34:33 2026 GMT
        Subject: CN=91C1650B2C5ED8707608DF40542B8C60E38FBBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:82:f1:43:58:68:6c:7b:76:f2:9b:36:f7:
                    05:a5:ed:6d:5e:d1:30:ee:87:f5:dd:e3:76:36:9c:
                    4c:cf:cd:ed:de:96:14:1d:ba:e8:de:bf:c9:cb:f9:
                    6e:ab:c8:8d:78:9b:96:00:33:35:1f:fc:35:f6:e6:
                    cb:2b:e3:01:91:d2:b8:fa:1f:0c:b6:fc:05:20:d6:
                    a7:12:ca:92:a8:a2:fd:23:6d:7f:96:20:c2:c9:fb:
                    26:bf:8b:39:11:6b:09:75:34:99:d4:1f:8a:0e:d3:
                    bc:97:57:88:d3:e4:c5:35:a0:b8:46:f6:d3:23:e8:
                    ba:9b:f4:65:ac:23:fc:0a:d4:60:28:e4:27:8d:93:
                    87:2e:56:3b:af:8b:01:ae:06:d8:10:e2:3f:2c:d2:
                    f2:7b:5f:8b:71:4e:6f:53:b6:78:ce:08:15:bd:b4:
                    11:34:87:75:96:22:0e:d6:47:13:cd:62:43:f0:d3:
                    2b:a1:b7:58:fe:02:fe:c6:d6:66:e5:3f:75:22:3a:
                    6d:36:7b:60:08:66:f1:26:3e:63:bf:94:c7:fa:52:
                    e1:eb:ce:4c:7b:be:8a:04:ca:c4:a5:1b:bb:11:9e:
                    eb:b0:0c:fa:50:76:07:8e:41:b7:25:8d:f6:c1:7d:
                    71:b8:64:3e:87:38:8f:29:09:a1:3c:82:46:4f:04:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C1:65:0B:2C:5E:D8:70:76:08:DF:40:54:2B:8C:60:E3:8F:BB:B8
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32322d3232203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:d9:62:bf:a8:d8:12:97:82:ec:a5:72:f3:34:38:1e:bf:c6:
         c4:68:2a:e0:ba:9b:99:46:fd:62:c8:fd:8f:d7:52:24:b7:50:
         cf:93:9c:d3:35:18:1a:b6:9f:66:be:fa:7f:fd:ab:03:00:b2:
         14:dc:20:d8:c8:7b:8a:10:3b:38:2f:11:4a:99:30:0a:59:90:
         f8:64:c9:ae:98:b5:89:9e:73:08:89:82:92:ac:5a:f9:9f:bb:
         44:95:86:56:b8:1c:e6:0a:1d:fc:d9:ca:a0:d5:91:e6:97:f4:
         56:0d:06:bc:b5:0b:43:97:8c:df:6a:d3:7d:b4:65:5a:eb:e7:
         f3:35:90:8e:6f:14:31:0a:87:41:f9:62:70:03:e4:ec:ed:c0:
         c1:ae:79:5f:1d:f5:c6:f1:51:17:af:0e:d5:5f:31:4e:6e:7b:
         47:d0:d5:74:ba:ea:23:44:1a:ce:e6:72:92:3e:d1:9f:39:4e:
         62:21:99:af:95:0a:44:90:f2:5e:64:ef:ed:18:de:25:2f:f1:
         19:af:77:a2:f7:a9:52:ce:cf:b7:ba:a4:31:b5:b9:f3:5b:7c:
         06:3f:ad:a8:d6:01:e4:ac:22:1c:4e:d6:35:f6:ba:6e:b5:ce:
         0b:99:77:a6:b1:81:b5:42:2b:90:11:2a:e4:7a:04:79:da:42:
         a5:36:a0:b3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbQop8DdvWStk0Co186uiC/ob3yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIwOUQ5Qzg1N0Y0NjM0NThFNzM3QjJFMjc4OTY5RDgx
QzRGMzg0QTAeFw0yNTA4MjAwMjI5MzNaFw0yNjA4MTkwMjM0MzNaMDMxMTAvBgNV
BAMTKDkxQzE2NTBCMkM1RUQ4NzA3NjA4REY0MDU0MkI4QzYwRTM4RkJCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkoLxQ1hobHt28ps29wWl7W1e
0TDuh/Xd43Y2nEzPze3elhQduujev8nL+W6ryI14m5YAMzUf/DX25ssr4wGR0rj6
Hwy2/AUg1qcSypKoov0jbX+WIMLJ+ya/izkRawl1NJnUH4oO07yXV4jT5MU1oLhG
9tMj6Lqb9GWsI/wK1GAo5CeNk4cuVjuviwGuBtgQ4j8s0vJ7X4txTm9TtnjOCBW9
tBE0h3WWIg7WRxPNYkPw0yuht1j+Av7G1mblP3UiOm02e2AIZvEmPmO/lMf6UuHr
zkx7vooEysSlG7sRnuuwDPpQdgeOQbcljfbBfXG4ZD6HOI8pCaE8gkZPBFNnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkcFlCyxe2HB2CN9AVCuMYOOPu7gwHwYDVR0j
BBgwFoAUEgnZyFf0Y0WOc3suJ4lp2BxPOEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGF1emZBZkxoZHpaVnJQVTdWTDdNVVBjV2NTNzNEWmNHYTlCcURpd0th
M3UvMC8xMjA5RDlDODU3RjQ2MzQ1OEU3MzdCMkUyNzg5NjlEODFDNEYzODRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMDlEOUM4NTdGNDYzNDU4
RTczN0IyRTI3ODk2OUQ4MUM0RjM4NEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhdXpmQWZMaGR6WlZyUFU3Vkw3TVVQY1djUzczRFpjR2E5QnFEaXdLYTN1LzAv
MzQzNTJlMzYyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMzM1
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0GfDANBgkqhkiG9w0BAQsFAAOCAQEA2tliv6jYEpeC
7KVy8zQ4Hr/GxGgq4LqbmUb9Ysj9j9dSJLdQz5Oc0zUYGrafZr76f/2rAwCyFNwg
2Mh7ihA7OC8RSpkwClmQ+GTJrpi1iZ5zCImCkqxa+Z+7RJWGVrgc5god/NnKoNWR
5pf0Vg0GvLULQ5eM32rTfbRlWuvn8zWQjm8UMQqHQflicAPk7O3Awa55Xx31xvFR
F68O1V8xTm57R9DVdLrqI0QazuZykj7RnzlOYiGZr5UKRJDyXmTv7RjeJS/xGa93
ovepUs7Pt7qkMbW581t8Bj+tqNYB5KwiHE7WNfa6brXOC5l3prGBtUIrkBEq5HoE
edpCpTagsw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:29:31 2025 by rpki-client