Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3134342e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          d93DviMEIKaa3RH1antTmPy0WKeHvi4GtPZxRnYaOkU=
Subject key identifier:   09:4B:7C:0A:88:50:B3:D7:91:AE:A1:B2:EC:37:B6:8D:C4:20:2E:32
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       34A37A732F9716DA7FC5DA0426BECD9D41F31778
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:37:20 +0000
ROA not before:           Wed 23 Jul 2025 21:32:20 +0000
ROA not after:            Wed 22 Jul 2026 21:37:20 +0000
asID:                     28370
IP address blocks:        187.45.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a3:7a:73:2f:97:16:da:7f:c5:da:04:26:be:cd:9d:41:f3:17:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:32:20 2025 GMT
            Not After : Jul 22 21:37:20 2026 GMT
        Subject: CN=094B7C0A8850B3D791AEA1B2EC37B68DC4202E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:f5:6b:43:b9:31:6b:5f:3b:9c:9b:d6:1b:
                    a4:96:2d:71:bc:5e:5b:67:83:af:18:00:50:93:e5:
                    79:6f:7c:a6:ff:99:10:65:76:51:39:74:d2:0d:15:
                    b0:91:96:c8:f9:2b:75:cd:9e:48:35:90:8b:a6:aa:
                    7e:50:a1:92:b1:0d:85:ca:4b:82:ac:79:41:78:5c:
                    82:43:8f:84:e3:9f:f9:6e:6b:05:3c:eb:03:a5:13:
                    3a:85:c0:0a:82:70:29:93:39:13:c9:fe:b2:c9:02:
                    4b:3b:c9:09:96:18:bb:e4:8f:e2:93:5a:f1:01:77:
                    3b:e6:9d:64:48:09:c3:cb:a1:6d:1c:a1:f1:98:5b:
                    2a:81:95:42:54:0c:8b:62:4c:3f:b7:29:9f:34:49:
                    1d:8b:04:2d:35:b8:d7:e4:43:57:6d:cb:25:b9:ca:
                    5e:b2:a8:cb:58:0e:ac:2f:47:5d:68:d2:8c:ec:7f:
                    c2:f9:f6:5a:51:51:59:27:04:5e:e7:16:4b:a5:1a:
                    1a:8c:6e:87:04:a4:f9:ef:6a:45:3f:f6:6c:63:41:
                    f6:3d:32:a1:da:fd:dc:21:a3:53:d2:1c:c1:60:d7:
                    78:dd:43:55:08:21:33:c1:1c:8e:8e:36:1c:02:ce:
                    e0:2d:9a:d8:00:55:00:50:11:50:64:6e:81:4e:be:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4B:7C:0A:88:50:B3:D7:91:AE:A1:B2:EC:37:B6:8D:C4:20:2E:32
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:06:4b:89:33:33:e8:ee:d1:a4:47:27:c1:3f:db:14:c9:fc:
         cb:f3:9a:df:d5:92:59:c1:b3:8b:20:e7:37:ae:f1:a8:61:b7:
         ff:08:84:d9:c7:0f:13:37:42:b4:8e:dd:4c:cc:22:fa:14:4b:
         28:76:03:07:9f:cb:a2:85:db:25:43:67:bb:af:ac:19:0b:d6:
         04:ff:3b:a5:6d:73:ed:95:e6:d2:31:d7:8e:1a:ee:6f:1f:65:
         84:ea:50:92:b5:47:f0:99:e0:95:24:34:71:0f:c0:71:99:2a:
         7c:80:43:7b:78:23:1f:59:66:84:40:10:4b:0c:1e:56:dd:36:
         f4:26:37:2c:8b:10:48:6d:0e:f2:78:cf:04:43:96:d7:3c:8d:
         a4:4d:ed:f5:17:62:5d:b1:22:52:6b:93:92:90:e6:34:02:2e:
         28:b4:32:38:fe:57:20:e0:a1:19:58:14:9e:0d:15:eb:36:22:
         ab:2b:44:9e:5a:ee:30:41:2f:7b:a4:e7:71:a5:5a:6f:8c:df:
         4f:29:fa:32:0a:9e:67:93:9a:55:dd:3e:4e:90:94:fc:b6:e0:
         78:2f:59:d6:03:ee:58:21:6e:36:3a:c4:3c:35:b8:d8:67:a7:
         19:4c:61:78:f5:98:75:6e:f9:f6:0e:1e:21:f0:74:4d:c3:fb:
         12:59:a5:85
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNKN6cy+XFtp/xdoEJr7NnUHzF3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA3MjMyMTMyMjBaFw0yNjA3MjIyMTM3MjBaMDMxMTAvBgNV
BAMTKDA5NEI3QzBBODg1MEIzRDc5MUFFQTFCMkVDMzdCNjhEQzQyMDJFMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOvVrQ7kxa187nJvWG6SWLXG8
Xltng68YAFCT5XlvfKb/mRBldlE5dNINFbCRlsj5K3XNnkg1kIumqn5QoZKxDYXK
S4KseUF4XIJDj4Tjn/luawU86wOlEzqFwAqCcCmTORPJ/rLJAks7yQmWGLvkj+KT
WvEBdzvmnWRICcPLoW0cofGYWyqBlUJUDItiTD+3KZ80SR2LBC01uNfkQ1dtyyW5
yl6yqMtYDqwvR11o0ozsf8L59lpRUVknBF7nFkulGhqMbocEpPnvakU/9mxjQfY9
MqHa/dwho1PSHMFg13jdQ1UIITPBHI6ONhwCzuAtmtgAVQBQEVBkboFOvgvZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCUt8CohQs9eRrqGy7De2jcQgLjIwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM3MmUzNDM1MmUzMTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuy2QMA0GCSqGSIb3DQEBCwUAA4IBAQADBkuJMzPo
7tGkRyfBP9sUyfzL85rf1ZJZwbOLIOc3rvGoYbf/CITZxw8TN0K0jt1MzCL6FEso
dgMHn8uihdslQ2e7r6wZC9YE/zulbXPtlebSMdeOGu5vH2WE6lCStUfwmeCVJDRx
D8BxmSp8gEN7eCMfWWaEQBBLDB5W3Tb0JjcsixBIbQ7yeM8EQ5bXPI2kTe31F2Jd
sSJSa5OSkOY0Ai4otDI4/lcg4KEZWBSeDRXrNiKrK0SeWu4wQS97pOdxpVpvjN9P
KfoyCp5nk5pV3T5OkJT8tuB4L1nWA+5YIW42OsQ8NbjYZ6cZTGF49Zh1bvn2Dh4h
8HRNw/sSWaWF
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:07 2025 by rpki-client