Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32342d3234203d3e20323733353830.roa
File:                     34352e362e3132362e302f32342d3234203d3e20323733353830.roa (raw, json)
Hash identifier:          Mlz4XuW+0scDeZC7FLsbAKI9LEr+TcHsMiArIZrhn4M=
Subject key identifier:   DC:BF:4F:B0:07:7C:2A:91:8F:F8:73:CD:D9:B1:3C:29:F6:97:40:A5
Certificate issuer:       /CN=E77656D4CD0012959648CF6452F22571614F4C19
Certificate serial:       1BD0C66F72CEE30CC85C2BAB2C091ED32B53E37B
Authority key identifier: E7:76:56:D4:CD:00:12:95:96:48:CF:64:52:F2:25:71:61:4F:4C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32342d3234203d3e20323733353830.roa
Signing time:             Wed 11 Jun 2025 21:50:50 +0000
ROA not before:           Wed 11 Jun 2025 21:45:50 +0000
ROA not after:            Wed 10 Jun 2026 21:50:50 +0000
asID:                     273580
IP address blocks:        45.6.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 04:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d0:c6:6f:72:ce:e3:0c:c8:5c:2b:ab:2c:09:1e:d3:2b:53:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77656D4CD0012959648CF6452F22571614F4C19
        Validity
            Not Before: Jun 11 21:45:50 2025 GMT
            Not After : Jun 10 21:50:50 2026 GMT
        Subject: CN=DCBF4FB0077C2A918FF873CDD9B13C29F69740A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:fc:e9:36:af:0b:8b:30:e1:ea:5b:99:98:
                    f4:b3:26:33:6e:61:ea:fa:10:4d:9e:60:4b:00:f1:
                    da:5a:41:95:be:5b:50:93:19:07:d1:06:fd:52:4e:
                    db:d3:a4:16:a7:cf:46:17:44:74:17:a4:90:e7:12:
                    48:8c:cb:00:bb:19:b7:3d:5b:ce:ff:01:f5:45:a8:
                    68:67:bd:7b:91:d0:7b:0e:94:0b:40:66:a4:6d:c2:
                    58:49:c2:5d:51:8f:56:07:94:76:d7:8f:fd:94:be:
                    72:aa:34:9a:bd:f1:37:ee:40:19:ea:49:2d:15:11:
                    f3:61:40:be:b7:07:4f:37:23:07:9e:3b:3b:b7:11:
                    e7:63:fe:f5:bc:33:07:e1:0d:7e:6f:6f:0c:4f:c2:
                    62:53:d5:bf:4f:78:37:b8:7e:2d:30:89:69:eb:d4:
                    8f:9d:f7:2e:47:ea:73:e0:ec:56:3a:58:93:6f:40:
                    ea:a5:4c:58:d4:94:a8:c2:d7:7a:66:36:1b:9e:06:
                    5b:1d:ff:44:bc:01:5d:6b:ba:5a:18:bb:90:c2:0c:
                    d8:82:4f:3f:64:07:5d:da:39:f5:6e:68:54:67:87:
                    bb:e6:21:52:12:0f:c9:4a:ff:f8:32:09:58:bb:6b:
                    0d:1c:d3:8c:25:f5:60:15:4a:1d:eb:5f:d1:83:af:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BF:4F:B0:07:7C:2A:91:8F:F8:73:CD:D9:B1:3C:29:F6:97:40:A5
            X509v3 Authority Key Identifier:
                keyid:E7:76:56:D4:CD:00:12:95:96:48:CF:64:52:F2:25:71:61:4F:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132362e302f32342d3234203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a2:f0:62:bd:15:3e:d1:de:d9:06:2f:a7:61:4f:1b:c9:c4:
         71:95:f5:dd:e0:c6:56:c5:fa:1b:bf:d7:b3:dc:5d:9a:28:00:
         db:b3:b1:7d:37:8c:10:75:83:70:27:2b:5e:34:18:7f:05:a1:
         f8:63:ae:4a:d1:ff:1e:6d:6a:f7:8b:ba:94:2a:10:f7:66:d4:
         22:d4:93:d7:e1:dd:b5:82:32:d7:f5:ff:00:84:7c:ec:fb:83:
         ac:ea:ca:27:bb:1e:13:f7:f3:48:6a:83:6d:e8:1f:07:39:3f:
         ea:06:fa:b6:77:c2:6e:6a:b9:66:db:97:f4:54:62:4e:a8:83:
         79:b3:de:14:3c:08:77:5c:a0:60:51:07:7c:23:e5:85:5e:67:
         b9:3e:e1:48:5a:9f:ca:a1:8f:eb:8e:52:79:7e:63:8a:38:b5:
         1f:47:38:3b:7b:3e:3b:74:17:c4:88:85:0b:7c:65:69:73:aa:
         2f:14:49:65:ec:4c:4b:e7:5e:37:9b:86:1b:37:8e:2a:ed:ae:
         fd:a7:c7:de:ac:d7:c3:db:ad:cc:36:59:2b:14:28:41:18:c6:
         82:e8:da:aa:4d:18:db:08:fe:77:05:a8:10:8e:d6:b6:86:2f:
         a1:71:9c:08:e6:0f:8f:fe:46:23:55:53:eb:dd:97:5b:57:d5:
         23:37:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:27:29 2025 by rpki-client