Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3230203d3e203238333730.roa
File:                     3138372e34352e3134342e302f32302d3230203d3e203238333730.roa (raw, json)
Hash identifier:          40VLgakWbtpiiUNruWaQ2SrDaZ3LanxfAomsddkyfoM=
Subject key identifier:   76:E4:74:05:56:8C:AE:11:98:1E:E2:5C:B9:91:81:5C:D2:5A:FE:58
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5DB2F84A0C6DB2913B07A5AC1F3240A78C3A11AA
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3230203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:28:55 +0000
ROA not before:           Wed 23 Jul 2025 21:23:55 +0000
ROA not after:            Wed 22 Jul 2026 21:28:55 +0000
asID:                     28370
IP address blocks:        187.45.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b2:f8:4a:0c:6d:b2:91:3b:07:a5:ac:1f:32:40:a7:8c:3a:11:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:23:55 2025 GMT
            Not After : Jul 22 21:28:55 2026 GMT
        Subject: CN=76E47405568CAE11981EE25CB991815CD25AFE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8e:99:0b:46:63:17:7a:df:ac:2a:f4:b5:20:
                    e9:f2:ee:49:33:95:e4:ed:27:28:30:88:31:ea:af:
                    cc:a7:a5:3e:3c:58:5e:b5:db:ce:22:6a:06:5d:50:
                    b6:d6:1c:b6:e2:34:14:5a:2a:af:1f:89:b8:f9:05:
                    e3:09:af:a1:4e:b6:04:7d:c3:4e:70:5a:38:25:f0:
                    2d:a8:47:75:1c:bf:fc:eb:f4:14:84:7f:3e:8b:dd:
                    39:2e:7a:24:99:c1:74:c4:48:e3:81:72:93:c2:3a:
                    d1:57:f7:3e:39:4d:74:40:9b:2b:b3:e6:f2:ce:b4:
                    aa:7a:01:0a:15:f3:f5:14:cd:65:2b:47:a6:52:13:
                    0c:cc:03:5e:03:03:4c:a8:40:f6:7c:4e:78:6d:89:
                    cc:59:73:a4:fc:15:e7:bd:24:e4:80:17:1d:33:f9:
                    91:54:27:9c:c0:3b:2d:3d:9f:6c:b5:b0:12:a1:ef:
                    35:43:93:f8:4d:33:7b:e1:2e:9a:14:d9:58:cb:44:
                    e5:89:01:4b:41:aa:27:cd:5a:3c:82:b6:8e:c8:5a:
                    a4:ab:03:4e:cd:19:14:a7:5d:9e:2a:a2:a4:e6:df:
                    45:1d:b5:e8:36:82:44:60:26:14:d7:19:ac:01:b5:
                    c3:6e:e3:37:e7:95:f5:25:fc:bf:07:1b:ae:a6:7d:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:74:05:56:8C:AE:11:98:1E:E2:5C:B9:91:81:5C:D2:5A:FE:58
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3230203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:97:4a:16:32:09:33:09:e6:17:b7:85:78:c1:1c:0a:67:ef:
         43:77:79:95:e6:80:9e:a9:f5:d9:60:07:8e:73:94:b2:57:48:
         5a:f8:1b:7d:ac:b3:e2:2b:81:5f:a5:e0:78:ea:5c:31:6e:e8:
         2e:68:cc:fc:de:8e:a6:33:96:db:9c:79:7a:b5:65:29:cf:6a:
         9b:d7:d3:e1:16:98:17:28:c2:a5:e5:34:64:9c:ee:01:b5:4d:
         0b:30:aa:7e:a4:1e:4b:d0:13:b5:eb:f6:41:e9:48:19:1f:3c:
         99:67:10:91:07:ef:51:28:eb:a7:5b:44:8d:87:40:44:8b:6e:
         51:f5:1f:ad:19:94:33:87:26:1b:28:7c:60:f1:3f:18:23:2e:
         b6:64:18:54:83:f2:bd:08:5c:74:60:73:4e:8c:42:4b:9c:2b:
         1e:2c:d7:e7:a3:84:25:d6:65:23:3e:4b:df:bd:fe:b6:c8:15:
         98:8d:63:ba:58:c0:9d:bc:27:4e:0a:f0:d9:dc:81:42:e1:d5:
         1b:bc:39:c3:d6:ad:b2:71:95:7b:98:d1:38:ed:b3:a9:f4:1f:
         3a:88:e2:ce:2f:36:7b:5c:d8:3d:ad:6d:c3:16:13:71:53:9c:
         81:e4:fa:94:84:e1:e7:22:ec:ff:37:9d:ea:bf:51:71:1c:87:
         7d:88:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:24 2025 by rpki-client