Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32332d3233203d3e20323733353830.roa
File:                     34352e362e3132362e302f32332d3233203d3e20323733353830.roa (raw, json)
Hash identifier:          j/fcU8bEPx4/Rnd5zEkB1qZBl97SZSUQ2RsS4UTVIa8=
Subject key identifier:   34:80:EF:BE:E2:3E:E1:7C:16:7E:62:39:8C:F0:16:2F:69:42:BF:43
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       597F11C6013E401754DBE9424685C291E662313C
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32332d3233203d3e20323733353830.roa
Signing time:             Wed 20 Aug 2025 02:34:33 +0000
ROA not before:           Wed 20 Aug 2025 02:29:33 +0000
ROA not after:            Wed 19 Aug 2026 02:34:33 +0000
asID:                     273580
IP address blocks:        45.6.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7f:11:c6:01:3e:40:17:54:db:e9:42:46:85:c2:91:e6:62:31:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Aug 20 02:29:33 2025 GMT
            Not After : Aug 19 02:34:33 2026 GMT
        Subject: CN=3480EFBEE23EE17C167E62398CF0162F6942BF43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:5c:66:cd:e6:ec:f2:de:93:78:90:b8:da:
                    28:9a:47:ef:08:95:60:7d:c2:64:db:ff:47:4a:4f:
                    06:d0:50:39:aa:ae:22:5a:7a:60:74:3e:f6:7b:85:
                    ce:fe:b2:98:45:2d:86:f1:9c:7d:26:c5:6f:3e:4e:
                    e8:69:92:2a:b1:ec:b1:9f:c7:cb:2a:a6:67:28:a3:
                    fd:37:7f:79:2d:55:2e:08:b9:a0:88:27:62:93:4e:
                    2f:e4:dc:fd:be:f2:4c:31:a2:90:1b:19:ea:6e:ac:
                    5d:42:2d:17:4a:50:a6:54:31:76:6e:9f:1e:a9:5e:
                    03:d6:a3:76:77:8b:8a:19:b1:88:3a:af:d5:36:81:
                    b3:62:63:c3:f4:53:9f:c9:be:eb:c2:91:71:d1:05:
                    d8:e6:03:01:bc:9c:4d:f0:93:d2:bd:6c:48:c0:7e:
                    83:84:c7:3e:6f:bd:12:ce:05:27:56:91:92:30:06:
                    53:58:4e:3d:21:f2:4a:0a:52:7b:b3:0f:88:28:5e:
                    90:ad:cd:f2:02:eb:60:35:b3:b5:f3:13:0c:93:e7:
                    a5:2b:a1:86:41:33:ba:01:98:0e:91:65:5a:c6:71:
                    e1:bb:a4:58:fe:54:da:a9:a6:26:1b:dd:1d:18:92:
                    38:cd:7a:57:4a:aa:0b:46:f4:55:38:ac:91:f8:f4:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:80:EF:BE:E2:3E:E1:7C:16:7E:62:39:8C:F0:16:2F:69:42:BF:43
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32332d3233203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:58:94:6f:a5:e1:47:13:6a:3c:d2:ad:e6:85:39:ff:78:77:
         40:5d:ce:c3:18:98:02:15:8d:e3:61:4e:ba:20:36:b7:63:47:
         5b:44:49:58:af:3f:12:c7:7c:d9:88:a4:a7:c9:62:90:33:57:
         eb:ee:9d:b1:f5:c7:70:88:87:13:d3:90:79:09:6c:8d:99:2e:
         1e:54:ed:c8:c1:a0:59:28:6b:df:36:24:c7:f7:68:4b:ef:b1:
         4b:4f:f7:f5:64:b1:ad:56:f3:dd:01:56:3b:b5:c8:ee:a9:af:
         de:93:40:1a:88:b8:cd:8e:e2:be:7a:a0:3c:94:60:9f:5a:fa:
         80:05:bf:03:2c:d6:7c:26:c2:0c:15:41:49:a4:4f:d2:82:98:
         a2:11:12:4f:c4:38:b7:67:9f:2f:e0:d0:51:e1:53:0e:9f:fa:
         5f:5e:52:45:8a:51:60:83:74:1d:1e:fa:db:52:49:32:fa:c4:
         53:81:e9:db:a1:92:c8:35:3d:32:23:a6:a9:5e:17:bb:bc:7e:
         0a:00:b9:49:04:28:9c:26:13:df:c5:b7:20:ec:bb:04:c7:b0:
         bf:2d:37:70:9c:86:b1:d1:b2:0a:8f:e2:08:62:95:f6:e4:13:
         ce:b0:bb:61:04:eb:9d:29:fb:c1:d8:b7:1c:b7:a1:86:e3:89:
         ef:de:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:30:45 2025 by rpki-client