Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
File:                     323830343a353734633a3a2f33322d3332203d3e20323638303537.roa (raw, json)
Hash identifier:          bDMzMnOuZd7L1LoPl4Zl6ICEeKEuAAzi8Ccgs5WWZe4=
Subject key identifier:   A0:58:71:8C:2C:7D:87:6C:36:24:87:EC:29:1E:F1:6C:84:C2:3F:F1
Certificate issuer:       /CN=62B52227065F8994E3E8609DF07AC435DD7B941E
Certificate serial:       580F6A01B43269E2A25D4FEB7E0FE2656C2659CB
Authority key identifier: 62:B5:22:27:06:5F:89:94:E3:E8:60:9D:F0:7A:C4:35:DD:7B:94:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B52227065F8994E3E8609DF07AC435DD7B941E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
Signing time:             Mon 21 Jul 2025 15:52:27 +0000
ROA not before:           Mon 21 Jul 2025 15:47:27 +0000
ROA not after:            Mon 20 Jul 2026 15:52:27 +0000
asID:                     268057
IP address blocks:        2804:574c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/62B52227065F8994E3E8609DF07AC435DD7B941E.crl
                          rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/62B52227065F8994E3E8609DF07AC435DD7B941E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B52227065F8994E3E8609DF07AC435DD7B941E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0f:6a:01:b4:32:69:e2:a2:5d:4f:eb:7e:0f:e2:65:6c:26:59:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B52227065F8994E3E8609DF07AC435DD7B941E
        Validity
            Not Before: Jul 21 15:47:27 2025 GMT
            Not After : Jul 20 15:52:27 2026 GMT
        Subject: CN=A058718C2C7D876C362487EC291EF16C84C23FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:15:de:22:3a:b1:d1:8c:53:52:36:ce:64:
                    73:4f:0c:9d:4e:0e:f4:e2:75:b0:e4:10:5e:65:8a:
                    8e:c8:a2:51:12:6a:6d:e9:5c:c5:f2:6b:8a:dd:11:
                    12:06:19:00:d5:3b:7d:4e:4f:cc:69:67:e4:c8:55:
                    71:63:88:6c:df:80:6e:f6:a4:91:44:94:c0:ec:61:
                    eb:33:14:2a:40:a0:1b:eb:52:8a:3a:83:36:41:9d:
                    f5:1a:4e:58:fe:df:8a:a2:fa:c5:07:50:0c:d5:44:
                    86:c4:a9:6a:eb:62:86:4b:ac:52:d3:28:5d:e8:6b:
                    42:9e:eb:7f:14:7d:a5:ae:96:8e:73:57:2d:f6:f8:
                    76:ba:ce:58:e4:45:40:db:de:09:bf:f3:b7:bb:32:
                    d3:d8:0c:22:01:81:69:02:d9:65:46:0b:5d:a0:b5:
                    fc:74:45:69:a7:4f:13:b6:d2:1c:48:65:c8:78:11:
                    8c:bf:e2:a6:81:fa:92:7b:71:54:63:f2:96:cd:62:
                    d3:f4:57:68:fe:86:6a:3e:62:66:9e:2e:f9:63:40:
                    56:d7:32:3a:1e:94:b5:5a:c1:d7:c7:7e:b3:fa:d6:
                    d9:2b:ad:6b:95:fc:78:69:73:52:17:96:0c:61:ad:
                    6c:68:c5:06:fa:1a:9e:90:ca:19:95:6f:5f:1f:cf:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:58:71:8C:2C:7D:87:6C:36:24:87:EC:29:1E:F1:6C:84:C2:3F:F1
            X509v3 Authority Key Identifier:
                keyid:62:B5:22:27:06:5F:89:94:E3:E8:60:9D:F0:7A:C4:35:DD:7B:94:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/62B52227065F8994E3E8609DF07AC435DD7B941E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B52227065F8994E3E8609DF07AC435DD7B941E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:5e:52:0a:7e:65:e4:d0:e4:69:e3:a8:84:3e:23:96:52:
         48:61:d7:a2:66:28:c8:f6:d4:04:7b:ca:b9:79:43:5b:10:44:
         56:11:62:9e:25:09:03:d9:67:7e:9c:b3:70:6b:fb:36:8d:45:
         db:01:88:1a:e1:8a:77:bc:15:1b:79:ba:25:f5:fb:c3:38:af:
         3d:ad:c3:1e:3b:05:93:d6:ff:6b:26:ab:32:87:6a:1e:58:0a:
         b6:30:73:cd:95:81:0a:56:7b:ae:31:c1:18:45:e0:8a:dc:5e:
         30:60:f3:77:52:ca:9c:f4:e2:32:85:31:32:5d:dc:f7:63:6b:
         b8:ba:5e:92:b4:cd:9e:77:4d:3e:28:e4:41:6d:7f:22:fe:7f:
         b1:bc:6e:ec:d5:f2:cc:58:02:ec:26:80:6a:eb:af:2a:1f:21:
         a3:32:b4:93:31:86:6b:98:f1:af:05:e2:4b:79:a3:06:62:f0:
         20:0a:37:7c:9c:4f:c2:38:bf:3f:a9:09:ab:9c:22:2b:27:b3:
         3f:88:84:a9:27:73:76:7b:90:e2:06:c6:9a:87:f7:76:87:57:
         04:63:fc:d9:c1:dc:4a:0f:98:46:cb:99:6d:87:0e:48:5c:14:
         ce:38:77:ae:b5:a5:ed:43:72:0a:30:1a:3d:bb:61:e8:47:90:
         a0:4a:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:21 2025 by rpki-client