Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32342d3234203d3e20323733353830.roa
File:                     34352e362e3132362e302f32342d3234203d3e20323733353830.roa (raw, json)
Hash identifier:          kYT+dDJ31kiiNDPqGTSWsUyn5mTGtJ1MgFmirL8f4hw=
Subject key identifier:   7E:46:DD:E2:3C:1F:8E:F1:7C:5B:21:8D:2C:12:3D:E0:F0:36:97:1E
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       4959807B1D8B7441ED90C26A7CFD04F47B20B64C
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32342d3234203d3e20323733353830.roa
Signing time:             Wed 20 Aug 2025 02:34:32 +0000
ROA not before:           Wed 20 Aug 2025 02:29:32 +0000
ROA not after:            Wed 19 Aug 2026 02:34:32 +0000
asID:                     273580
IP address blocks:        45.6.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 22:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:80:7b:1d:8b:74:41:ed:90:c2:6a:7c:fd:04:f4:7b:20:b6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Aug 20 02:29:32 2025 GMT
            Not After : Aug 19 02:34:32 2026 GMT
        Subject: CN=7E46DDE23C1F8EF17C5B218D2C123DE0F036971E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:d0:b7:ae:d5:62:68:da:c1:c0:a7:f2:4f:
                    fa:8e:16:5f:d8:09:ba:c0:0f:1a:a5:5c:2a:03:7f:
                    07:3a:15:62:5a:aa:bd:52:7e:2c:10:a8:f4:60:17:
                    c4:28:05:a5:06:bd:ce:eb:af:62:98:4c:7c:98:51:
                    73:d7:5e:6f:af:51:5a:40:d9:69:d4:88:23:b3:34:
                    b8:8a:09:12:4b:9f:1f:f5:a4:cc:df:a9:84:41:73:
                    b8:1b:b9:5b:c4:0e:77:05:10:73:35:6d:21:96:1d:
                    ad:ea:6a:3d:e2:66:e3:61:9c:3d:60:eb:5c:8f:a8:
                    4b:88:de:d6:b9:1f:11:59:1d:7f:ea:77:ec:d2:02:
                    fc:9a:e6:1a:82:bb:08:91:22:8c:26:25:06:16:30:
                    a1:6c:aa:a8:de:b1:52:91:aa:92:59:c2:4f:67:14:
                    db:61:62:d6:f9:a0:37:d7:ae:71:9f:f0:82:ab:e3:
                    cc:42:b5:b8:49:ed:e8:0f:e6:3e:5f:9f:9e:27:d1:
                    df:b3:d3:0d:85:95:f8:3c:aa:d9:30:17:4b:ef:20:
                    52:ad:56:6a:20:36:26:ee:c0:17:62:97:67:bf:1f:
                    83:f0:c6:05:26:d9:71:39:70:e7:7f:04:82:14:a7:
                    3d:89:f1:75:59:3c:50:2c:12:6e:1f:2d:34:5a:0e:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:46:DD:E2:3C:1F:8E:F1:7C:5B:21:8D:2C:12:3D:E0:F0:36:97:1E
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32342d3234203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:11:01:62:9f:50:bc:bd:60:a6:29:3c:48:6d:b3:f1:56:cc:
         f2:cc:77:36:19:5a:89:70:28:46:38:37:6a:ac:61:24:78:f8:
         85:08:9e:da:85:84:05:ca:f6:7a:d9:59:f4:dd:82:de:f5:92:
         9f:b7:41:23:0b:80:6a:1f:f5:29:aa:e7:ff:79:ca:70:1a:e7:
         06:24:22:ef:25:58:fd:13:f1:ef:51:11:27:3f:c5:95:d0:bc:
         42:c4:c1:0c:c0:b4:74:02:1d:c4:3b:b2:de:0c:42:47:8a:15:
         65:5f:e0:be:ee:66:8b:df:9a:ec:91:03:7d:05:0f:f8:4d:15:
         75:38:87:4d:57:a9:1c:ca:ed:c1:b9:48:c1:03:e7:10:d6:9a:
         4d:4d:2b:60:7f:2a:e5:66:51:59:cd:93:ce:ee:f4:fe:fe:c9:
         4d:a4:57:46:88:61:18:49:26:6c:c3:c3:db:07:a6:d0:ae:eb:
         f2:b6:fe:af:50:aa:ee:83:f0:09:65:64:70:1b:8e:ea:0b:65:
         d2:26:e7:a3:65:6b:a0:4f:32:59:6c:9a:d9:e9:f2:39:9e:47:
         94:cf:0a:c7:d7:b1:25:47:14:0d:22:5f:42:67:f4:19:5a:68:
         7b:02:38:92:c9:e0:13:cb:93:85:5a:22:e3:e5:f1:a5:47:16:
         18:b5:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:29:10 2025 by rpki-client