Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32332d3233203d3e20323733353830.roa
File:                     34352e362e3132342e302f32332d3233203d3e20323733353830.roa (raw, json)
Hash identifier:          VEyuVazoy8baEMXx8N/cJx2XV+rWFVQ4Vk35Twu26uI=
Subject key identifier:   F9:3A:E8:99:97:DE:FE:ED:23:63:AB:9C:98:3F:51:1E:51:31:20:52
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       1D76381B8C62EA06939FAB9393DE3A0606B39D1E
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32332d3233203d3e20323733353830.roa
Signing time:             Wed 22 Jul 2026 03:00:09 +0000
ROA not before:           Wed 22 Jul 2026 02:55:09 +0000
ROA not after:            Wed 21 Jul 2027 03:00:09 +0000
asID:                     273580
IP address blocks:        45.6.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:76:38:1b:8c:62:ea:06:93:9f:ab:93:93:de:3a:06:06:b3:9d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Jul 22 02:55:09 2026 GMT
            Not After : Jul 21 03:00:09 2027 GMT
        Subject: CN=F93AE89997DEFEED2363AB9C983F511E51312052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:20:42:65:b4:8f:48:95:28:d4:42:99:ea:
                    cc:d2:ce:48:b9:83:18:18:c6:d6:ac:7f:56:75:dd:
                    cc:8d:51:d1:5e:55:33:33:3d:60:f2:38:ed:9e:71:
                    d8:ad:54:db:7d:36:c6:f3:f6:19:2c:39:56:19:96:
                    4e:63:ae:98:20:79:b9:e2:9e:14:7a:96:9a:37:8b:
                    7a:ec:0c:0d:0d:b6:b9:53:98:2b:e6:d4:d7:81:b7:
                    d8:5c:26:80:72:42:f3:d6:7e:34:d4:45:53:74:58:
                    ed:d8:5a:ab:9a:73:41:21:4f:3a:a0:eb:e7:ac:5a:
                    a6:ea:5d:fe:aa:4c:6f:9c:99:ef:ea:27:3d:87:b3:
                    1d:eb:22:5a:5a:a5:4c:47:18:0b:c8:9a:a4:6f:f2:
                    ca:0a:a6:c4:5f:c4:76:1a:6b:10:00:7f:a7:f1:23:
                    d8:7c:64:ae:74:de:13:08:5a:93:e6:d4:3d:aa:ed:
                    b6:cb:b5:c4:e3:82:2c:55:4e:ec:19:ae:bb:94:19:
                    07:db:39:d9:78:a3:73:7e:c7:eb:60:9c:0a:db:be:
                    d5:53:db:ab:b8:52:f1:5a:7e:0d:dc:c0:ef:b3:8b:
                    3c:6f:aa:93:c9:8b:fc:f0:18:dc:67:c5:6f:ee:13:
                    7b:42:81:94:79:57:89:ef:1e:b4:15:39:9d:0a:0d:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3A:E8:99:97:DE:FE:ED:23:63:AB:9C:98:3F:51:1E:51:31:20:52
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32332d3233203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:84:97:04:53:10:69:96:3e:7f:4a:92:58:81:66:c1:1a:d1:
         3a:71:d6:6e:11:c4:e2:83:35:93:d2:72:21:1b:24:7d:37:39:
         64:1d:dc:4f:28:69:71:c6:7c:7b:49:1a:c8:24:8e:14:06:73:
         42:fa:f0:a5:1a:d2:61:a9:5d:a2:bb:63:fc:f2:c7:c1:62:87:
         3f:2f:03:2b:b0:b0:b0:6e:c0:58:9b:20:c0:82:0c:e9:73:cc:
         7b:95:f7:8e:4c:50:55:25:0f:39:d1:79:a5:93:eb:7a:89:b8:
         1d:41:e7:23:7f:38:89:0c:12:bd:09:92:41:d4:3b:b6:71:62:
         d2:83:99:dd:c1:a7:39:67:5b:e4:2b:40:a9:c8:ba:82:72:fd:
         46:7c:aa:bf:26:bd:60:a9:56:dd:ac:dd:7c:d3:5a:ef:1b:1b:
         43:81:36:9d:a1:bf:a9:8e:93:2f:16:58:33:c2:05:68:44:5a:
         4b:2e:96:d5:48:63:0f:ec:89:79:0a:05:ee:f2:db:6f:3f:84:
         09:41:01:25:2a:d2:a1:8e:c4:f4:b2:60:56:2b:51:28:8c:8d:
         ed:ab:d4:93:3a:da:97:dd:15:76:19:e9:2c:08:c2:ff:1a:dd:
         cb:9f:bc:71:7c:ed:96:07:96:67:e1:f1:d0:8b:9c:c9:36:94:
         5c:63:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:30:07 2026 by rpki-client