Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32332d3233203d3e203238333730.roa
File:                     3138372e34352e3134362e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          pXhxE1cuTMkt6V/8gK9LRIJz1eOjUg/iu6GUz0fzHvs=
Subject key identifier:   3D:8A:56:1B:ED:F2:0E:DD:B4:00:56:8F:A2:E0:50:77:0C:49:F1:F1
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       03CA871966703BACC23165C5A2152A5F8926F1AB
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:33:51 +0000
ROA not before:           Wed 23 Jul 2025 21:28:51 +0000
ROA not after:            Wed 22 Jul 2026 21:33:51 +0000
asID:                     28370
IP address blocks:        187.45.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 17:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ca:87:19:66:70:3b:ac:c2:31:65:c5:a2:15:2a:5f:89:26:f1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:28:51 2025 GMT
            Not After : Jul 22 21:33:51 2026 GMT
        Subject: CN=3D8A561BEDF20EDDB400568FA2E050770C49F1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:19:62:16:7d:df:e5:b2:3b:7f:b2:0a:99:
                    09:36:dc:27:ba:2f:c1:31:9e:5b:86:e6:0a:8f:e8:
                    ff:4f:2f:fc:f7:33:97:6c:07:46:75:18:1e:7e:04:
                    fe:f5:79:28:f7:72:50:72:a9:82:58:45:07:97:fb:
                    24:47:ea:d6:8c:c2:ad:0f:df:91:c1:3a:c5:16:41:
                    f5:59:91:6a:c0:10:6f:6d:b3:64:7c:85:53:34:4e:
                    49:62:76:d0:75:84:31:a4:f5:fe:5d:56:13:6b:2a:
                    14:96:73:ec:9c:7b:1b:92:19:84:14:aa:78:ea:6c:
                    9d:16:1d:23:02:2b:a6:aa:0c:e3:61:41:46:3c:e7:
                    47:8f:dc:16:8c:d4:c0:e1:cc:4a:fa:96:2d:d4:e9:
                    45:bc:44:3d:fb:7a:ee:34:00:fa:db:69:54:60:c6:
                    aa:bc:ec:87:11:ec:c0:ab:fc:e5:9d:6f:65:78:72:
                    78:b2:8a:7d:7c:b5:e3:7d:ac:67:ca:6c:b3:9b:36:
                    4a:1e:29:cd:8e:98:b6:2e:eb:0c:96:97:f8:d0:0a:
                    a1:a0:94:7c:3d:6d:f6:59:7d:db:3a:77:43:bf:ce:
                    80:8d:f1:b8:98:9d:18:52:ce:60:09:d0:cb:6c:da:
                    41:fc:ef:a7:c6:f2:e2:62:97:f7:28:40:78:f8:06:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8A:56:1B:ED:F2:0E:DD:B4:00:56:8F:A2:E0:50:77:0C:49:F1:F1
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:2c:0c:7b:4a:11:5e:a8:c5:99:6b:ee:b9:10:a3:55:b1:1d:
         7f:39:95:c9:d0:9b:70:34:96:9a:91:76:85:1b:f3:56:91:7e:
         52:ff:87:ee:67:dd:cf:06:ea:98:9b:52:e3:7b:4f:7c:1a:71:
         c0:e1:16:9a:2a:a7:51:b7:05:dc:04:1e:15:ba:ca:be:69:c5:
         31:e3:dd:17:ce:48:d5:93:bd:a9:c7:8c:26:49:cb:d6:78:4c:
         6e:ea:43:57:d6:32:2b:47:03:be:4a:6f:bb:09:c9:89:22:9e:
         cf:26:0d:7f:e1:42:7f:0c:18:f5:df:97:60:44:6a:47:69:bf:
         76:58:58:03:cc:da:01:b5:e2:0e:13:fe:8f:cc:29:94:d0:a2:
         65:a8:32:b0:8d:03:ed:cb:33:f7:42:3d:fb:5a:77:20:a1:fd:
         36:07:90:5e:05:ef:a4:bc:43:0d:34:67:a7:9f:37:74:47:37:
         f7:9c:7b:01:97:5b:8d:c1:08:78:67:55:a3:39:4c:7d:da:64:
         02:1c:5c:f2:32:88:1d:2a:8e:5d:45:68:54:83:fc:0c:45:62:
         80:fd:d2:de:5a:f5:98:58:d4:f8:21:17:96:bc:3b:d1:f6:8c:
         1a:90:97:c3:06:dd:02:e4:14:09:aa:10:15:f4:f4:93:fb:40:
         eb:61:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:12 2025 by rpki-client