Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132372e302f32342d3234203d3e20323733353830.roa
File:                     34352e362e3132372e302f32342d3234203d3e20323733353830.roa (raw, json)
Hash identifier:          oNb3EZLU2UufozsSBH8eC1/H2DDqPJZI0jcXSisVM9w=
Subject key identifier:   A4:CA:9B:D8:EA:98:A4:83:8F:FB:34:E6:D2:FA:D5:0C:48:2C:C2:0C
Certificate issuer:       /CN=E77656D4CD0012959648CF6452F22571614F4C19
Certificate serial:       0630E772C2C5ADAA05C3FA23D75E2D150B4C17B4
Authority key identifier: E7:76:56:D4:CD:00:12:95:96:48:CF:64:52:F2:25:71:61:4F:4C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132372e302f32342d3234203d3e20323733353830.roa
Signing time:             Wed 11 Jun 2025 21:50:54 +0000
ROA not before:           Wed 11 Jun 2025 21:45:54 +0000
ROA not after:            Wed 10 Jun 2026 21:50:54 +0000
asID:                     273580
IP address blocks:        45.6.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 20:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:30:e7:72:c2:c5:ad:aa:05:c3:fa:23:d7:5e:2d:15:0b:4c:17:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77656D4CD0012959648CF6452F22571614F4C19
        Validity
            Not Before: Jun 11 21:45:54 2025 GMT
            Not After : Jun 10 21:50:54 2026 GMT
        Subject: CN=A4CA9BD8EA98A4838FFB34E6D2FAD50C482CC20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:05:d0:8f:b1:4c:b5:14:e1:82:3f:d8:8b:
                    61:d3:3f:a7:ee:1d:d7:8d:ff:a9:55:39:88:df:70:
                    c3:7e:37:61:33:29:fa:b6:82:89:fa:31:b2:cd:3a:
                    c8:c0:67:6e:06:32:3e:29:67:75:92:02:c6:66:0e:
                    a4:80:75:d4:64:6e:56:74:0f:5a:78:79:f9:a8:53:
                    ea:c4:c1:29:c2:a7:cf:43:a1:7e:bb:78:0e:66:24:
                    a5:a9:3e:8c:ba:a7:4d:ba:81:4a:80:83:bb:82:aa:
                    81:f6:4e:89:9a:1c:bf:6d:20:11:ce:05:3c:91:0e:
                    e9:83:de:6f:74:56:b7:cb:fc:a3:bd:b0:43:bf:68:
                    f5:86:ea:bf:e0:be:bd:cc:b1:d3:19:8f:fd:41:2a:
                    d3:d3:b5:37:37:d1:3c:66:b7:51:0d:d9:2a:be:12:
                    98:a6:df:ae:42:fa:b5:61:d4:c4:21:1c:7d:a4:82:
                    28:47:ab:be:0a:68:ee:60:14:44:39:c4:5c:a1:c6:
                    40:31:a7:de:fe:89:6f:d6:2c:01:81:96:c6:ff:8d:
                    d2:30:0c:69:d6:51:4a:29:f2:97:36:66:c3:f7:cc:
                    ce:6e:74:95:9e:3e:e9:fe:e1:87:97:40:43:2a:40:
                    d5:fd:48:5e:af:e3:24:8a:1d:10:f0:3c:6d:ab:f2:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CA:9B:D8:EA:98:A4:83:8F:FB:34:E6:D2:FA:D5:0C:48:2C:C2:0C
            X509v3 Authority Key Identifier:
                keyid:E7:76:56:D4:CD:00:12:95:96:48:CF:64:52:F2:25:71:61:4F:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/E77656D4CD0012959648CF6452F22571614F4C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77656D4CD0012959648CF6452F22571614F4C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/34352e362e3132372e302f32342d3234203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:2c:87:22:a6:49:e6:ba:05:74:12:21:36:eb:2f:5c:a2:
         81:e1:08:30:43:b2:44:c4:17:10:74:f8:b1:c3:4e:56:b1:92:
         25:0f:30:c6:f7:1d:64:3c:ab:2d:4c:3a:2b:d9:39:4c:a4:77:
         1e:9d:d8:20:74:bc:11:1a:d7:45:a3:06:2d:0d:92:51:4c:52:
         a3:07:b0:2a:8f:64:77:dd:70:b0:9a:e4:7c:a4:c4:2f:8d:83:
         45:6c:ed:e8:9d:c9:59:c6:50:8c:26:88:12:06:47:e9:d7:9d:
         9c:38:0f:f1:49:31:e0:83:7b:a3:d8:e0:31:6e:40:80:d6:c8:
         07:49:73:2d:2b:67:7c:2d:8e:00:a0:1b:ab:9d:cf:00:c4:a1:
         05:76:43:c7:c0:fc:7e:6c:b1:ea:57:d7:28:b2:8e:5f:f5:28:
         3c:32:1a:76:e8:7f:60:c8:7f:f3:47:19:27:f7:7f:99:e7:d7:
         c2:0d:b7:23:84:ba:21:d6:7b:86:13:a3:35:91:91:62:87:3e:
         e7:c7:eb:b2:7f:37:0d:41:96:1c:bf:c4:f8:6d:bd:6c:d0:78:
         f5:4e:d8:89:04:79:f6:70:bf:4a:00:22:bf:08:91:aa:2f:4f:
         ad:1a:e1:62:42:08:c6:f3:c4:57:b9:f6:08:b6:50:ec:24:96:
         34:c2:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:30:02 2025 by rpki-client