Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32322d3232203d3e203238333730.roa
File:                     3138372e34352e3134382e302f32322d3232203d3e203238333730.roa (raw, json)
Hash identifier:          9YxJnG39wxqWgoiSkJgsTRY4WDa1iYMV0XWLMdatq8E=
Subject key identifier:   44:8A:E0:2B:FD:AB:DD:D7:01:F1:DA:C2:A3:CE:5C:77:AF:BE:2A:E3
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       2815BED7D7C136999FA6DDF857F5CBAD49F7AD42
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32322d3232203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:31:14 +0000
ROA not before:           Wed 23 Jul 2025 21:26:14 +0000
ROA not after:            Wed 22 Jul 2026 21:31:14 +0000
asID:                     28370
IP address blocks:        187.45.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 17:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:15:be:d7:d7:c1:36:99:9f:a6:dd:f8:57:f5:cb:ad:49:f7:ad:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:26:14 2025 GMT
            Not After : Jul 22 21:31:14 2026 GMT
        Subject: CN=448AE02BFDABDDD701F1DAC2A3CE5C77AFBE2AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:f6:26:1f:dc:3a:70:e0:08:72:3d:4f:e4:
                    25:4c:6c:ea:f9:1d:55:5b:28:1c:de:05:84:b7:8c:
                    b9:ca:c3:79:38:a7:00:f7:16:b3:da:ef:e5:cb:22:
                    a3:11:50:31:d9:99:ce:5d:3d:1d:ca:58:11:6c:88:
                    00:f3:3d:d2:4d:26:79:de:89:40:da:a9:55:c0:b0:
                    1b:fe:db:32:72:98:27:d5:d0:bd:dd:b6:74:b7:24:
                    c9:7f:17:a1:0b:6b:4e:d0:00:ce:7c:cf:b8:fd:80:
                    8a:be:93:89:34:12:b9:4f:1f:93:fa:b4:80:98:9a:
                    0a:2b:64:f6:ed:d2:12:2c:de:1b:43:9b:90:bb:1d:
                    38:35:6c:59:8e:8e:5b:e8:eb:fb:51:59:18:d4:96:
                    0e:a2:3c:6e:ed:06:dc:3b:b6:1e:75:38:0c:de:85:
                    24:18:34:35:b2:57:bb:e8:ee:12:f2:9e:54:9b:36:
                    69:bb:22:ce:1a:24:87:65:ad:fc:0c:ec:cc:e0:2d:
                    37:f4:4a:25:28:48:31:30:79:a2:7e:9b:07:d5:4e:
                    f6:6f:cc:34:68:51:b4:4f:bf:15:45:2b:f1:bd:ff:
                    12:23:38:5f:3c:ea:5e:b6:99:6b:36:4a:0b:c2:f7:
                    33:c7:48:58:ec:1c:e8:30:9b:80:89:a0:34:b6:5f:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:E0:2B:FD:AB:DD:D7:01:F1:DA:C2:A3:CE:5C:77:AF:BE:2A:E3
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32322d3232203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:16:ad:08:5a:5f:7c:0b:c5:3a:51:0b:50:5e:d1:2c:05:e3:
         f5:54:02:67:be:50:10:23:bb:3d:69:65:5a:78:a3:dc:2a:b5:
         87:b2:ed:ff:7e:72:a3:e7:4b:49:94:b2:d3:fa:4d:06:2b:83:
         8e:ba:07:a7:13:31:0f:dd:29:d3:56:86:e1:87:2c:cd:e0:46:
         fb:af:bd:3d:f3:10:85:9d:ce:5c:6d:89:b6:91:c9:b5:8a:e2:
         2f:c5:18:9e:bb:65:85:8a:69:75:25:85:89:4d:7b:c7:7e:ff:
         aa:58:e2:d4:38:13:49:fe:5c:cc:76:68:41:d6:eb:b8:bf:96:
         fa:c1:2b:e6:55:e2:16:a6:71:fa:39:f7:8c:44:fd:34:3a:82:
         fc:13:ab:8e:2d:71:4a:88:3a:60:b0:cb:d9:33:fd:8c:a0:ea:
         53:ea:20:e2:b8:3c:a3:83:e7:26:e2:f6:78:ed:99:5d:4e:1d:
         cd:3e:15:37:36:3a:58:ca:53:31:51:a3:d2:0e:9b:57:f4:09:
         e5:6b:8c:e0:9c:9b:1f:08:4f:87:aa:63:cf:7f:2d:14:cf:8c:
         3c:df:9d:2c:3a:66:9c:3f:bc:91:04:1a:e1:e6:e8:48:4c:67:
         6d:36:8a:14:14:7b:dc:e4:80:09:29:75:a8:1e:63:bd:0b:86:
         44:31:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:44:50 2025 by rpki-client