Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32332d3233203d3e203238333730.roa
File:                     3138372e34352e3134342e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          iKh0DIk6MorL+ACQnzvnCQYfIME4nueWpjioxoyRGfs=
Subject key identifier:   98:EE:EC:E1:EB:7E:AC:F4:25:58:F0:54:10:BB:35:98:5F:54:85:7A
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5E37902601E100544630DBED73BF3E66DDC70DFB
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:33:31 +0000
ROA not before:           Wed 23 Jul 2025 21:28:31 +0000
ROA not after:            Wed 22 Jul 2026 21:33:31 +0000
asID:                     28370
IP address blocks:        187.45.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:37:90:26:01:e1:00:54:46:30:db:ed:73:bf:3e:66:dd:c7:0d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:28:31 2025 GMT
            Not After : Jul 22 21:33:31 2026 GMT
        Subject: CN=98EEECE1EB7EACF42558F05410BB35985F54857A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:ea:d8:47:f0:3c:44:6f:46:3d:b6:08:b2:
                    d5:de:48:9d:dd:5c:09:8a:54:3e:f9:87:ab:16:e2:
                    2a:35:50:58:be:75:b9:fd:77:05:fc:98:fe:d7:d0:
                    d5:e2:3d:4e:bf:0b:ab:79:ef:7a:18:32:96:45:f3:
                    18:21:68:46:f3:b4:c9:e8:73:37:8c:22:9e:f6:c0:
                    8a:c3:91:2c:55:19:76:07:4a:cd:f9:aa:ea:45:21:
                    66:d6:75:58:bb:e8:a3:30:96:d6:c4:5c:f6:aa:3a:
                    71:10:39:b8:30:c9:4a:79:b0:a9:62:2a:2e:30:a9:
                    dc:36:19:26:ca:36:ad:ba:49:90:8c:3d:18:cd:8d:
                    32:d5:5b:3c:95:3a:2f:89:07:62:1d:cc:29:34:58:
                    3a:69:d9:e9:1b:8d:4d:90:43:36:41:05:76:7e:ff:
                    bb:6c:3e:14:48:9c:b4:02:2f:2e:b8:05:c6:e7:ed:
                    27:42:e2:86:ea:dd:71:a9:b6:91:bc:a0:9e:0b:ff:
                    7f:6b:88:e2:fa:2d:02:c9:72:6c:c0:aa:a8:8c:b7:
                    09:19:0e:30:3c:2d:9d:3e:66:bf:6c:a9:57:84:a8:
                    5c:ca:3f:e7:68:60:af:ad:16:30:15:49:34:62:ca:
                    d8:aa:ae:34:5f:86:4c:35:d0:c2:a8:42:41:4d:39:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:EC:E1:EB:7E:AC:F4:25:58:F0:54:10:BB:35:98:5F:54:85:7A
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:03:b6:cd:16:46:45:9e:12:00:78:1f:36:3b:4e:a9:34:
         32:19:3a:25:fe:f5:40:85:03:b8:77:61:a9:34:f8:bb:8a:ac:
         29:7b:b0:d4:8c:cf:e5:f3:bb:93:e0:34:6d:36:60:e1:16:18:
         40:b7:b2:20:5c:e7:5a:61:f0:4b:f9:db:7f:f2:2a:52:21:72:
         3f:34:f5:9d:63:f3:3d:3b:22:c7:a0:47:f4:40:f3:e3:de:54:
         40:47:b9:d8:bf:7d:9a:53:97:a9:64:e8:9b:22:fc:80:d0:46:
         15:bc:98:b4:62:cd:13:61:1b:8b:cd:e6:dc:7b:38:01:3d:98:
         9f:ac:25:54:da:9e:4c:52:d7:17:cf:10:26:42:90:26:82:44:
         df:64:bf:54:f0:44:c2:70:9c:f2:a1:bf:e0:b6:18:93:3f:3b:
         15:96:78:f0:9b:47:ee:4b:c7:33:8f:ae:09:47:83:93:75:55:
         72:ce:fd:37:09:66:07:7f:55:98:0f:a3:b9:25:54:49:18:8b:
         26:5a:fa:e5:2c:96:62:fb:f5:22:d3:44:18:cf:3f:08:bd:ee:
         08:dc:96:c8:d7:2e:6c:8a:c3:87:1b:62:7d:dc:83:87:55:00:
         37:90:d4:1d:c8:33:8d:75:90:57:1a:10:7f:79:ca:c0:30:6d:
         80:2b:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:49 2025 by rpki-client