Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32342d3234203d3e20323733353830.roa
File:                     34352e362e3132342e302f32342d3234203d3e20323733353830.roa (raw, json)
Hash identifier:          dfgJcMIE/OPec5Mp7aQG2Mq6VA1jgaCOhssdjqAcB2E=
Subject key identifier:   E6:81:D5:17:4C:BC:6F:4A:87:E2:06:5F:44:2A:75:ED:91:F6:65:8E
Certificate issuer:       /CN=E77656D4CD0012959648CF6452F22571614F4C19
Certificate serial:       4E00029946F64BB700574761E99BFC280037A45B
Authority key identifier: E7:76:56:D4:CD:00:12:95:96:48:CF:64:52:F2:25:71:61:4F:4C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32342d3234203d3e20323733353830.roa
Signing time:             Wed 11 Jun 2025 21:50:33 +0000
ROA not before:           Wed 11 Jun 2025 21:45:33 +0000
ROA not after:            Wed 10 Jun 2026 21:50:33 +0000
asID:                     273580
IP address blocks:        45.6.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 05:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:00:02:99:46:f6:4b:b7:00:57:47:61:e9:9b:fc:28:00:37:a4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77656D4CD0012959648CF6452F22571614F4C19
        Validity
            Not Before: Jun 11 21:45:33 2025 GMT
            Not After : Jun 10 21:50:33 2026 GMT
        Subject: CN=E681D5174CBC6F4A87E2065F442A75ED91F6658E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:b3:7a:fb:9f:92:c8:c8:0f:28:d6:62:31:
                    ab:87:a9:65:08:d6:8b:1d:d6:aa:a4:1a:62:2b:6f:
                    bb:9b:b3:47:d3:bc:6c:5c:68:0e:f4:d9:e7:a2:85:
                    48:72:4b:a8:53:66:bd:5f:3b:f3:f6:db:38:44:cc:
                    39:05:95:d8:51:4c:ee:5d:3d:3a:88:15:bb:b6:9a:
                    ed:0b:58:af:aa:2f:dc:13:0f:cf:0e:88:b9:a2:9a:
                    01:15:dd:7b:52:76:b7:3e:05:3f:66:29:77:2f:82:
                    4e:fe:3c:ce:7f:6d:af:e2:a4:e0:b2:ce:9e:0b:02:
                    31:54:54:9d:98:fd:f0:5b:e4:3f:4a:ae:3b:5c:8b:
                    d2:1c:99:5c:59:b5:4e:ff:83:6d:16:69:55:51:6c:
                    a7:c2:1a:ab:7d:ba:ab:4e:b8:d9:f1:22:91:ff:c1:
                    b0:ae:44:0d:72:cf:4e:89:b4:24:56:9f:6c:12:c1:
                    ab:9b:6d:9c:ce:35:0d:8c:17:91:0d:28:b3:2a:1a:
                    25:15:4b:c0:03:12:6f:c7:2c:b5:ef:fd:f8:f9:18:
                    f6:e3:6b:e3:76:bb:4b:6a:63:db:ee:72:e9:0c:73:
                    9b:32:71:59:7b:73:66:84:74:6d:6f:7e:aa:d9:41:
                    5f:f0:36:cb:12:44:96:f9:89:d3:4c:b3:5e:a9:7f:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:81:D5:17:4C:BC:6F:4A:87:E2:06:5F:44:2A:75:ED:91:F6:65:8E
            X509v3 Authority Key Identifier:
                keyid:E7:76:56:D4:CD:00:12:95:96:48:CF:64:52:F2:25:71:61:4F:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132342e302f32342d3234203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:38:40:0b:8f:4a:d2:44:38:ea:dd:52:de:d8:69:28:f3:8f:
         05:42:3e:f1:83:e7:f0:10:a0:8e:29:d5:1f:2c:03:21:3a:66:
         27:90:9b:5c:a6:d3:bc:4b:b7:69:7b:87:62:20:02:66:cc:8d:
         40:0b:38:17:6e:50:24:fa:aa:f0:61:a5:8e:23:b8:56:c0:9a:
         b0:b2:62:e2:cf:64:30:e2:96:74:ea:1d:a2:cf:1f:27:4a:6d:
         65:b7:4f:ce:4a:bd:c9:b6:80:ff:2c:df:82:fc:bf:39:44:b3:
         2f:9a:0b:1c:30:6d:3b:2f:de:0e:a7:78:ac:71:4d:f7:59:a5:
         0c:09:f8:d0:ef:f4:21:9c:60:ea:f9:8b:5a:4c:33:20:a8:9c:
         f5:33:9d:67:7e:c8:82:81:74:90:a3:d9:9d:55:0e:40:2f:98:
         e6:ca:f1:b5:d7:a2:47:3a:b3:93:72:2b:1e:2a:85:7a:c3:31:
         d6:ef:b2:6b:53:c6:8c:d0:d3:6b:c6:b3:ec:60:7a:d1:4a:b1:
         4d:f4:ff:42:6c:38:5b:71:e1:0e:35:45:2c:b1:a5:9f:47:b6:
         43:f4:a4:cc:04:67:77:b2:25:af:4a:90:f5:de:37:46:72:8a:
         ea:cd:92:ba:c3:f6:6e:0d:31:ee:1e:e3:ce:12:cf:c3:6d:60:
         33:a9:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:20:11 2025 by rpki-client