Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3134362e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          VbZJqW+7tOmqpeck+yMwGXuSKeUKgtTFkvwwEkVYLg0=
Subject key identifier:   7A:CD:7A:73:EF:36:8A:D4:B4:ED:D1:0B:6A:40:18:94:46:A7:1D:21
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       6D0435369B533C9EEE58C8646A5654DD43BC4405
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:38:30 +0000
ROA not before:           Wed 23 Jul 2025 21:33:30 +0000
ROA not after:            Wed 22 Jul 2026 21:38:30 +0000
asID:                     28370
IP address blocks:        187.45.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:04:35:36:9b:53:3c:9e:ee:58:c8:64:6a:56:54:dd:43:bc:44:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:33:30 2025 GMT
            Not After : Jul 22 21:38:30 2026 GMT
        Subject: CN=7ACD7A73EF368AD4B4EDD10B6A40189446A71D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ad:12:ef:62:72:4d:ca:2e:ca:5f:8e:93:f7:
                    ec:e2:f1:e1:88:77:26:87:d9:20:59:e5:78:a0:4e:
                    06:7a:bd:78:e2:2b:e2:11:4a:24:49:81:5e:1b:67:
                    04:bd:b1:a2:82:d2:2b:b2:2b:f1:96:ab:54:4d:b0:
                    1a:4a:bf:fe:9e:d6:d1:a4:1c:47:04:97:69:3b:a9:
                    f2:b8:47:c7:bf:20:17:e8:c6:43:8d:b4:93:55:e7:
                    0d:84:a1:45:9e:87:31:bd:75:33:d4:b7:1b:1a:29:
                    18:7b:7b:9b:d8:30:41:d6:06:44:da:1a:90:32:16:
                    49:24:d5:e9:54:b1:5f:f5:9e:e1:15:f5:e9:fb:96:
                    e8:4d:0c:76:02:13:71:ef:d3:36:ba:bb:c6:ab:ba:
                    6c:80:21:36:18:b2:7e:ab:b9:13:72:72:57:e0:e4:
                    8b:f7:be:35:b0:b3:43:a9:8c:b8:66:84:d0:f8:f7:
                    85:25:07:f5:23:1b:cc:23:3d:85:ae:3a:49:2b:44:
                    5e:4d:de:36:c7:af:b0:b8:5c:d8:75:68:55:89:b2:
                    5b:07:03:b8:12:8b:6a:e9:9d:69:6f:46:e8:7f:67:
                    37:f4:28:1e:18:5b:cf:cc:11:16:bb:df:a1:5a:68:
                    d5:5e:a2:10:bd:8a:c4:83:fe:dd:47:2d:ee:dd:7b:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CD:7A:73:EF:36:8A:D4:B4:ED:D1:0B:6A:40:18:94:46:A7:1D:21
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:72:f1:03:bc:49:69:07:bf:02:a3:ca:13:4b:53:5f:b4:
         09:d9:c7:da:83:fd:16:7d:05:d4:5c:ff:2f:aa:40:f9:53:72:
         f1:17:b1:da:72:66:4c:bc:4b:8f:de:de:70:73:67:8a:98:6f:
         b5:44:19:6b:59:a8:3e:22:75:7e:25:bf:4f:c0:e5:2a:25:96:
         ef:f2:98:3b:e2:48:dd:f2:8a:d4:e8:cf:c3:13:0e:4f:05:9f:
         6f:d5:12:0a:ae:28:66:e8:c5:ff:47:be:36:a2:d6:7c:6e:bb:
         37:1c:3b:5a:51:66:da:64:ec:f0:1c:96:5f:e3:e5:8c:f6:b0:
         8b:12:bb:d2:8f:04:61:79:7c:94:bf:2d:1b:e6:68:f1:c6:84:
         80:a5:1a:b8:29:57:df:16:a2:13:12:24:92:c5:bd:cd:78:17:
         a4:e8:69:7d:de:73:f5:8e:79:c0:16:73:ca:d2:b7:06:6d:6e:
         6d:6b:1b:c2:8c:be:0a:8b:65:d1:73:30:a8:47:87:1b:6d:5a:
         10:d0:45:6a:17:d9:00:68:84:c4:72:7c:94:bb:50:a1:91:77:
         79:ee:01:21:7f:d5:fb:97:c7:81:82:20:d9:35:7a:68:0e:a5:
         f2:12:06:50:03:c0:26:db:27:1d:62:27:33:c5:c6:c5:72:62:
         ae:fe:a2:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbQQ1NptTPJ7uWMhkalZU3UO8RAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA3MjMyMTMzMzBaFw0yNjA3MjIyMTM4MzBaMDMxMTAvBgNV
BAMTKDdBQ0Q3QTczRUYzNjhBRDRCNEVERDEwQjZBNDAxODk0NDZBNzFEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrRLvYnJNyi7KX46T9+zi8eGI
dyaH2SBZ5XigTgZ6vXjiK+IRSiRJgV4bZwS9saKC0iuyK/GWq1RNsBpKv/6e1tGk
HEcEl2k7qfK4R8e/IBfoxkONtJNV5w2EoUWehzG9dTPUtxsaKRh7e5vYMEHWBkTa
GpAyFkkk1elUsV/1nuEV9en7luhNDHYCE3Hv0za6u8arumyAITYYsn6ruRNyclfg
5Iv3vjWws0OpjLhmhND494UlB/UjG8wjPYWuOkkrRF5N3jbHr7C4XNh1aFWJslsH
A7gSi2rpnWlvRuh/Zzf0KB4YW8/MERa736FaaNVeohC9isSD/t1HLe7de9zHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUes16c+82itS07dELakAYlEanHSEwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM3MmUzNDM1MmUzMTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuy2SMA0GCSqGSIb3DQEBCwUAA4IBAQAcSHLxA7xJ
aQe/AqPKE0tTX7QJ2cfag/0WfQXUXP8vqkD5U3LxF7HacmZMvEuP3t5wc2eKmG+1
RBlrWag+InV+Jb9PwOUqJZbv8pg74kjd8orU6M/DEw5PBZ9v1RIKrihm6MX/R742
otZ8brs3HDtaUWbaZOzwHJZf4+WM9rCLErvSjwRheXyUvy0b5mjxxoSApRq4KVff
FqITEiSSxb3NeBek6Gl93nP1jnnAFnPK0rcGbW5taxvCjL4Ki2XRczCoR4cbbVoQ
0EVqF9kAaITEcnyUu1ChkXd57gEhf9X7l8eBgiDZNXpoDqXyEgZQA8Am2ycdYicz
xcbFcmKu/qKT
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:36 2025 by rpki-client