Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32332d3233203d3e20323733353830.roa
File:                     34352e362e3132342e302f32332d3233203d3e20323733353830.roa (raw, json)
Hash identifier:          nm5WABAZG+rcGsd1KkYsLH9PhDYzub8j2Ywh93+BgQk=
Subject key identifier:   A2:45:C8:DC:44:85:EF:37:E9:24:71:E0:C0:CD:91:9D:B1:60:BB:03
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       3F41D4AF0926DCF4EA09A8AD3A3C4AEEB55E01EE
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32332d3233203d3e20323733353830.roa
Signing time:             Wed 20 Aug 2025 02:34:32 +0000
ROA not before:           Wed 20 Aug 2025 02:29:32 +0000
ROA not after:            Wed 19 Aug 2026 02:34:32 +0000
asID:                     273580
IP address blocks:        45.6.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 22:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:d4:af:09:26:dc:f4:ea:09:a8:ad:3a:3c:4a:ee:b5:5e:01:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Aug 20 02:29:32 2025 GMT
            Not After : Aug 19 02:34:32 2026 GMT
        Subject: CN=A245C8DC4485EF37E92471E0C0CD919DB160BB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:9d:9c:8a:28:0a:c6:7d:88:63:25:a6:d6:
                    7d:2b:31:99:ee:fa:24:d3:5a:f9:3a:e8:19:87:04:
                    df:cb:1b:5f:61:14:3a:a9:fe:64:8a:06:f8:4c:e6:
                    13:09:a2:9c:02:ce:da:9c:c0:b4:fc:69:6d:0f:1a:
                    e7:2c:3f:60:43:69:8e:8b:7d:4d:ed:56:de:ed:2a:
                    b1:95:a7:72:c2:2b:0f:98:de:0a:e7:c0:bd:0b:4e:
                    54:7b:e8:10:90:a4:cc:bb:fc:e7:8c:61:58:2f:3d:
                    ba:89:e7:27:78:9c:4b:7a:a1:e3:0d:12:ac:aa:93:
                    68:7a:a7:e6:03:95:43:21:28:34:89:8b:31:3d:95:
                    b0:46:d7:33:f1:29:a5:10:b0:4c:89:3c:a2:0b:de:
                    dc:07:7b:6c:ff:61:3d:c3:d9:20:a4:fd:04:94:a6:
                    33:6d:d9:72:d2:be:f9:01:6d:64:d4:d7:71:9c:e0:
                    1f:ba:f2:39:34:48:e8:7d:0a:21:40:a1:4d:2b:5d:
                    33:83:07:ec:2e:eb:a5:a3:19:01:83:dd:9a:08:a8:
                    0c:64:f6:db:ff:cf:3c:1f:8e:2c:a1:c8:73:6a:f6:
                    dd:ed:d3:3c:f5:0b:88:1f:93:62:ab:62:6c:d7:1e:
                    ff:00:20:07:27:f3:46:eb:4c:82:89:0c:c5:25:f0:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:C8:DC:44:85:EF:37:E9:24:71:E0:C0:CD:91:9D:B1:60:BB:03
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32332d3233203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:7e:e9:c7:75:3b:aa:d7:aa:04:ab:71:b1:1a:96:5a:84:
         e1:98:72:82:cd:48:e2:63:33:e5:91:b4:f5:43:9e:51:1c:33:
         70:82:5a:98:31:ea:24:24:93:94:0f:7e:9e:a8:59:98:91:43:
         f5:68:a6:6c:d8:40:9b:85:1b:64:bc:05:a1:46:8c:2d:42:83:
         ae:c7:9b:7d:22:07:80:3b:d7:4e:6c:71:9d:5b:3b:2d:a2:e9:
         90:88:e5:7e:3c:77:b3:63:00:25:67:40:0e:d1:08:44:6f:8a:
         ee:e2:4d:04:34:7e:bb:62:92:a4:d7:17:c8:29:60:15:32:2c:
         fc:3c:63:a3:07:f4:e7:8d:f5:1d:f2:cb:59:a1:4c:f9:09:66:
         39:89:77:71:6c:73:3a:c5:fd:72:83:71:e0:0c:86:02:50:16:
         10:ab:01:97:c0:0d:a6:92:87:9f:4d:35:c8:3b:2c:40:ae:ce:
         1b:27:47:90:d6:d1:ae:84:b5:d4:d7:ce:ab:33:24:ae:39:32:
         dc:03:91:a7:eb:fa:bb:51:e0:3c:4f:16:4b:d9:f0:4c:fb:bc:
         af:6b:75:e5:9f:66:ec:d8:63:69:29:25:13:81:30:39:86:2c:
         da:1f:90:30:5f:ae:45:fa:d9:70:0f:6d:c1:2d:b4:b8:8b:db:
         ad:05:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:29:27 2025 by rpki-client