Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32322d3232203d3e203238333730.roa
File:                     3138372e34352e3134342e302f32322d3232203d3e203238333730.roa (raw, json)
Hash identifier:          GIyYeetv1oIL8o0bPm+e/pMzdFQVA2iJxS7MvKQSuKU=
Subject key identifier:   E0:E2:F1:B8:D1:B9:77:02:3A:08:77:14:97:82:A3:5D:38:00:93:6F
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       1D0E18C56B5147E7692FDEB43DEFFFCF66869AE1
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32322d3232203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:30:54 +0000
ROA not before:           Wed 23 Jul 2025 21:25:54 +0000
ROA not after:            Wed 22 Jul 2026 21:30:54 +0000
asID:                     28370
IP address blocks:        187.45.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0e:18:c5:6b:51:47:e7:69:2f:de:b4:3d:ef:ff:cf:66:86:9a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:25:54 2025 GMT
            Not After : Jul 22 21:30:54 2026 GMT
        Subject: CN=E0E2F1B8D1B977023A0877149782A35D3800936F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:a1:f0:37:89:1c:7e:5b:55:4f:b9:8d:b7:
                    a7:cb:a4:9e:33:51:df:9f:9d:2b:e3:0d:1e:44:5a:
                    32:2a:32:04:ea:e3:35:90:94:13:bf:d1:77:d7:d3:
                    03:47:cf:d4:24:65:fa:c2:83:02:2f:6e:ee:35:c5:
                    e4:e4:11:92:8c:b8:b7:09:08:48:d0:82:87:23:29:
                    be:73:f7:80:f8:af:b7:40:de:77:c9:5b:44:a9:66:
                    7d:63:e7:6e:44:8b:00:0b:21:9b:56:59:24:62:31:
                    1d:3e:98:00:f9:58:18:73:05:53:d7:53:89:5d:f2:
                    59:9d:ce:08:51:be:ba:3e:8b:9d:97:4b:a1:79:88:
                    92:af:d6:f0:a4:96:09:b9:00:d9:87:dc:26:ad:51:
                    ad:43:a6:26:37:df:fa:a3:3c:cc:c1:45:ec:8c:f4:
                    93:8f:f0:17:8c:50:1e:30:0a:23:c6:e3:83:36:4c:
                    fc:7c:38:37:14:63:d1:8f:d0:1e:be:6a:6a:ce:42:
                    56:5a:5a:f8:4c:11:7f:bf:a8:eb:6d:58:cd:32:f9:
                    e6:c4:d3:14:af:c0:6c:cd:41:01:a3:f0:c7:76:e7:
                    46:45:59:d4:6a:26:a3:80:39:d5:8b:64:12:36:2b:
                    73:f2:f6:ab:c1:e5:70:f6:f9:71:3f:da:0a:fd:1e:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E2:F1:B8:D1:B9:77:02:3A:08:77:14:97:82:A3:5D:38:00:93:6F
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32322d3232203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:36:57:80:29:35:e0:03:78:ce:9f:8e:86:f9:5b:6b:3d:
         c7:b6:3d:d6:79:38:c5:1e:7d:f3:bb:12:c6:34:a8:1f:db:77:
         d9:84:af:8d:44:59:96:ec:62:30:47:6e:42:0c:d0:e8:e1:21:
         74:5e:a9:1d:b2:84:01:78:85:4c:22:3b:f2:5b:80:7d:06:6e:
         ca:cd:50:cd:f5:ce:3a:01:89:60:8a:c7:d6:b6:72:f5:0c:93:
         65:48:46:72:4e:d6:8d:96:08:2d:58:56:cd:e2:54:b3:41:54:
         30:1b:4c:a3:11:18:3d:52:04:64:19:38:4b:3b:00:78:22:a6:
         80:67:f0:aa:f0:98:56:79:82:4b:37:69:56:2e:ec:84:9b:8c:
         63:03:7f:15:13:5e:f2:66:38:75:ec:e1:a7:d5:12:c0:6f:79:
         7f:5f:bd:49:96:44:92:72:aa:47:f7:20:61:34:55:02:16:4b:
         fa:0d:d5:c0:e1:66:70:a2:8f:4b:8f:9f:f6:05:6c:53:3e:95:
         87:62:fb:23:44:3f:8c:c3:48:d2:47:07:38:ea:9a:96:3f:43:
         7e:cd:7a:bc:6e:4e:62:78:45:c8:97:89:30:24:0b:10:b3:aa:
         fc:5d:46:24:89:f3:e5:1f:87:aa:4b:c0:8b:ba:1a:37:d1:f2:
         9e:d6:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:21 2025 by rpki-client