Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32332d3233203d3e20323733353830.roa
File:                     34352e362e3132362e302f32332d3233203d3e20323733353830.roa (raw, json)
Hash identifier:          HN0p/WrUFPTz5NucwBOsG+w5ahqeuOtOFlotyb6B4d8=
Subject key identifier:   52:55:0B:FA:7D:03:1E:A9:29:42:D7:FE:14:57:8C:3A:BD:7B:FC:08
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       5C36286901B15C3CD2431854252CEA24E2EA572B
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32332d3233203d3e20323733353830.roa
Signing time:             Wed 22 Jul 2026 03:00:09 +0000
ROA not before:           Wed 22 Jul 2026 02:55:09 +0000
ROA not after:            Wed 21 Jul 2027 03:00:09 +0000
asID:                     273580
IP address blocks:        45.6.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:36:28:69:01:b1:5c:3c:d2:43:18:54:25:2c:ea:24:e2:ea:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Jul 22 02:55:09 2026 GMT
            Not After : Jul 21 03:00:09 2027 GMT
        Subject: CN=52550BFA7D031EA92942D7FE14578C3ABD7BFC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:46:66:af:a1:8e:ba:5c:8a:21:50:8c:28:d8:
                    48:f0:47:e3:c8:1a:fd:02:98:d7:f3:81:ea:dd:f9:
                    c3:37:17:45:ac:52:17:a1:ee:75:8b:d7:a8:95:39:
                    f6:49:6b:96:27:b3:92:b0:af:66:ed:83:0f:1f:10:
                    cf:9c:ad:de:6c:d5:98:cf:b2:53:c3:f5:e5:56:5f:
                    d8:79:92:27:30:e5:6c:d1:b7:aa:22:69:db:96:d0:
                    76:5d:50:07:ae:54:87:bc:7b:98:d8:07:93:dc:e2:
                    8d:1e:9f:5f:6c:41:bd:84:ee:96:46:37:06:95:06:
                    79:e5:59:20:bb:ec:f8:d7:3c:3e:17:ef:dc:3a:e9:
                    89:fe:44:53:50:69:72:38:7f:10:c9:0e:41:3e:32:
                    0a:d9:c7:6f:34:3d:46:e4:d5:c6:e7:af:00:34:00:
                    b9:e3:ce:1b:79:96:58:87:89:b8:b2:cb:00:cb:e2:
                    08:1b:3f:fd:ff:5a:4b:56:b4:b5:61:13:47:a5:f6:
                    90:45:52:d6:05:09:79:f7:7c:ba:5a:72:b4:16:9f:
                    d3:07:f4:e8:90:e4:98:cb:16:ae:e4:57:09:bb:69:
                    d6:ab:2c:5c:54:0b:2c:7b:63:b8:78:30:55:8a:f6:
                    75:ae:a3:3a:ec:a4:5c:14:a2:d6:76:3c:c8:fa:16:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:55:0B:FA:7D:03:1E:A9:29:42:D7:FE:14:57:8C:3A:BD:7B:FC:08
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32332d3233203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:88:07:22:bb:cf:4e:05:18:69:95:f4:f7:c8:ce:98:b0:
         ab:f2:44:7c:bf:4e:e7:e4:34:d9:f1:3c:01:b6:ef:c8:6b:a5:
         d1:18:01:29:89:dd:58:55:54:56:03:f0:7d:66:c2:83:c3:c0:
         ee:67:8a:66:6f:94:91:ce:01:0b:26:fc:e0:77:a2:88:8f:bc:
         24:c9:e1:95:29:e7:d5:11:73:98:eb:92:14:fd:d1:d8:71:56:
         d4:0a:00:c5:8f:a5:5a:41:1b:44:e4:9a:b4:04:fd:c2:db:7a:
         c9:2d:6a:80:97:f9:33:80:35:3b:6c:bf:cf:d4:14:a5:11:89:
         61:4b:a2:81:f8:56:b3:1f:fe:74:6b:b2:01:3f:88:eb:e9:90:
         96:ab:fb:08:1b:f6:bf:db:80:18:cb:11:06:85:d5:f6:c3:41:
         77:43:cc:dc:6a:74:20:af:52:b9:52:e4:aa:a0:e0:6b:6e:eb:
         fa:c6:9f:fc:19:3e:88:7b:b3:80:23:ec:13:74:d0:7f:33:16:
         3a:93:82:c9:1a:40:ed:fe:ce:2d:9f:b9:3e:aa:43:07:9a:bd:
         94:af:71:aa:1a:84:44:7c:f3:d8:a3:9c:aa:fd:7b:4f:be:0f:
         09:46:72:72:4d:43:66:c4:88:d4:50:9c:e7:12:ef:a5:bb:c7:
         ab:5e:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:46:46 2026 by rpki-client