Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa
File:                     34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa (raw, json)
Hash identifier:          hs16O2AetsULvW7TZjUmS40ykLHQB4WUNiqKY5+HLuE=
Subject key identifier:   EB:CB:28:56:63:7C:4F:31:1F:BB:67:C7:A5:6F:12:7B:63:F5:E8:39
Certificate issuer:       /CN=62B52227065F8994E3E8609DF07AC435DD7B941E
Certificate serial:       32B27BF1D168D5CFC15F9890451D7286CD830A5C
Authority key identifier: 62:B5:22:27:06:5F:89:94:E3:E8:60:9D:F0:7A:C4:35:DD:7B:94:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B52227065F8994E3E8609DF07AC435DD7B941E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa
Signing time:             Mon 21 Jul 2025 15:52:27 +0000
ROA not before:           Mon 21 Jul 2025 15:47:27 +0000
ROA not after:            Mon 20 Jul 2026 15:52:27 +0000
asID:                     268057
IP address blocks:        45.168.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/62B52227065F8994E3E8609DF07AC435DD7B941E.crl
                          rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/62B52227065F8994E3E8609DF07AC435DD7B941E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B52227065F8994E3E8609DF07AC435DD7B941E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b2:7b:f1:d1:68:d5:cf:c1:5f:98:90:45:1d:72:86:cd:83:0a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B52227065F8994E3E8609DF07AC435DD7B941E
        Validity
            Not Before: Jul 21 15:47:27 2025 GMT
            Not After : Jul 20 15:52:27 2026 GMT
        Subject: CN=EBCB2856637C4F311FBB67C7A56F127B63F5E839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:18:56:c1:e1:1b:6f:3a:48:28:88:55:ac:
                    b2:82:84:34:65:0b:93:29:42:9c:dc:6a:a1:35:e4:
                    6c:99:6a:98:c1:aa:bd:0c:79:f7:f1:38:32:9e:bf:
                    32:b6:cb:3a:96:cb:84:0f:b0:0d:3f:9b:30:27:ca:
                    11:d8:3b:07:a0:84:46:26:ff:f7:8b:b2:61:0e:0e:
                    8a:7a:2c:39:37:07:d8:1f:34:10:b6:fc:06:09:e8:
                    f2:0b:f5:40:f1:fa:d7:cc:97:27:e1:63:c5:74:60:
                    29:7a:54:a1:fb:8b:d6:7a:0d:cd:b7:63:08:b9:59:
                    0b:56:20:17:b8:e4:eb:3a:3d:77:08:4c:a9:2a:72:
                    c9:f3:76:cc:c7:4a:90:18:06:0c:2e:6a:1a:2c:8f:
                    63:81:d6:21:c2:93:30:c7:62:18:68:c4:b8:3d:b4:
                    c7:52:c8:55:d6:5b:6c:1f:4d:54:af:a1:4a:a7:96:
                    9e:9c:38:60:2c:c5:f8:0c:bf:3f:71:18:49:60:81:
                    60:4c:96:fd:eb:ca:c7:7c:db:ac:80:05:1c:7f:8d:
                    b2:48:1f:4f:4a:a1:6d:b6:4b:95:ca:d0:30:eb:64:
                    2a:f8:03:a1:b3:07:b1:61:02:21:46:47:3a:23:c7:
                    88:85:1d:40:4b:5f:54:b7:c5:cf:9b:6b:04:3f:e7:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CB:28:56:63:7C:4F:31:1F:BB:67:C7:A5:6F:12:7B:63:F5:E8:39
            X509v3 Authority Key Identifier:
                keyid:62:B5:22:27:06:5F:89:94:E3:E8:60:9D:F0:7A:C4:35:DD:7B:94:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/62B52227065F8994E3E8609DF07AC435DD7B941E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B52227065F8994E3E8609DF07AC435DD7B941E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:54:fb:3f:a9:4f:07:eb:b9:46:8a:77:9a:ef:22:65:2f:
         0a:29:c4:dc:6a:ba:9f:69:d9:22:50:6e:5f:d3:7e:60:5c:6d:
         05:81:28:33:3c:55:78:1f:d7:76:23:53:50:92:83:bc:9c:40:
         d8:75:53:97:96:b4:96:62:84:80:f5:0a:50:a8:90:83:fe:cc:
         e5:3b:ed:eb:53:05:0b:e2:a6:6d:de:31:25:f8:19:43:70:c4:
         6b:92:75:05:bc:b5:52:30:87:10:e9:62:e9:d9:2b:0a:9f:e3:
         f1:dd:12:02:ed:c7:ca:24:73:44:e3:26:59:09:10:63:7c:dc:
         ed:c5:cd:b4:49:c8:35:4c:95:d9:66:1a:c4:67:b8:12:b8:34:
         ad:21:96:37:d3:db:27:db:04:50:03:24:2c:12:22:b1:2f:49:
         3a:c3:c8:8c:dd:57:05:5e:cc:28:b3:00:00:ab:5c:6e:6c:da:
         7e:50:e3:09:0d:22:26:c9:d4:1d:57:18:c4:b1:98:96:14:f9:
         2d:bd:9f:67:50:b5:74:4f:28:12:86:2a:e7:0b:be:78:33:27:
         11:11:11:c0:9c:b7:61:ac:6d:f8:12:91:0e:e1:fc:31:a2:0c:
         01:55:31:2f:97:4d:47:08:07:ce:f2:d8:5e:b2:5b:4a:53:47:
         bf:c0:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:52 2025 by rpki-client