Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135362e302f32332d3233203d3e203238333730.roa
File:                     3138372e34352e3135362e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          iG/13xJWzwTozsNEDCNHkwzMsWhL+NJlVujGh6WvfZw=
Subject key identifier:   AA:D7:CE:1C:76:D7:C7:8B:1F:34:5E:66:98:79:58:1E:24:2E:0A:DF
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       515555CED23244795023C3CBB10033B0916007A4
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135362e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:36:22 +0000
ROA not before:           Wed 23 Jul 2025 21:31:22 +0000
ROA not after:            Wed 22 Jul 2026 21:36:22 +0000
asID:                     28370
IP address blocks:        187.45.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:55:55:ce:d2:32:44:79:50:23:c3:cb:b1:00:33:b0:91:60:07:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:31:22 2025 GMT
            Not After : Jul 22 21:36:22 2026 GMT
        Subject: CN=AAD7CE1C76D7C78B1F345E669879581E242E0ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:23:7a:29:04:56:ef:81:50:ee:c9:f2:f3:
                    83:60:d1:d1:91:0b:df:98:aa:77:69:85:ac:8e:32:
                    d8:52:73:85:1b:6b:04:d3:70:c0:f5:69:52:d4:9a:
                    18:8a:a8:32:67:9a:94:8a:13:1a:78:92:ed:b1:1f:
                    13:dd:c9:65:69:81:d1:fb:75:68:5b:32:a0:6c:72:
                    09:fc:44:83:eb:6a:1a:07:21:4f:12:55:3b:26:e0:
                    be:e8:a7:b6:52:fe:ed:3e:7d:ec:ed:12:c7:21:b6:
                    ca:22:51:2f:d3:99:88:b3:d3:95:0b:48:18:9a:47:
                    c0:13:f1:32:29:4f:11:c9:65:54:35:86:1e:2e:8f:
                    ce:60:ee:e5:9a:b5:8f:7a:a3:a4:3b:63:f0:06:f2:
                    57:a1:15:98:ef:ac:ba:0c:ab:2f:46:da:d8:f6:90:
                    8f:d7:5a:43:29:3a:0c:d1:25:9f:a4:85:06:bd:f1:
                    e2:9f:8e:d2:60:0f:57:b4:91:98:ae:c4:9e:c4:0a:
                    75:15:d5:f9:02:be:dc:b5:41:31:39:16:fa:f8:5b:
                    64:a6:41:33:db:df:7f:bf:82:e3:19:f5:bc:7d:a2:
                    0f:c7:37:e2:20:ff:be:e0:2f:05:8d:19:2e:46:52:
                    a6:e1:e6:44:b8:5d:9b:22:ca:ee:4e:a2:17:e2:82:
                    fa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:CE:1C:76:D7:C7:8B:1F:34:5E:66:98:79:58:1E:24:2E:0A:DF
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135362e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:a6:e2:59:40:59:17:6c:6f:bf:56:08:52:d7:fa:df:95:
         dd:57:fb:9e:39:fd:7b:54:59:59:67:3e:97:42:b0:f6:47:61:
         e0:e1:26:dc:47:7b:73:9e:be:79:42:0f:14:42:90:d2:13:6f:
         d9:b9:dd:19:96:5e:44:5a:7f:f5:a1:e0:dc:63:43:ce:8b:b9:
         53:29:28:7c:a2:ef:77:62:40:68:43:40:50:bf:5d:68:d0:aa:
         7c:e6:0e:e9:58:56:7f:de:8e:87:99:9e:93:3d:86:5b:1f:f2:
         ac:0a:56:ae:c7:bd:12:ed:84:be:cb:c0:89:a9:a5:25:70:1c:
         48:09:c4:6b:f6:a0:a0:c0:f9:f4:c0:09:ef:21:aa:56:48:1a:
         4c:a7:3b:2e:22:a7:90:48:3b:20:bc:df:10:c7:f4:c0:3b:46:
         b4:5b:ca:fa:4f:6a:ff:25:d3:3a:c9:f3:38:ec:11:66:ea:48:
         48:89:f1:27:c1:4f:da:f3:c0:db:e5:72:27:0a:10:1a:07:df:
         e4:b2:2f:81:4e:ef:b2:5e:bc:91:81:e1:d9:c2:3a:62:a7:61:
         50:5b:6e:54:64:f3:e7:e8:bd:72:51:30:02:94:49:7f:be:b4:
         f2:53:fb:88:33:2b:d6:f5:6f:a4:f4:d6:d7:af:37:41:21:6a:
         fe:f5:dc:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUVVVztIyRHlQI8PLsQAzsJFgB6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA3MjMyMTMxMjJaFw0yNjA3MjIyMTM2MjJaMDMxMTAvBgNV
BAMTKEFBRDdDRTFDNzZEN0M3OEIxRjM0NUU2Njk4Nzk1ODFFMjQyRTBBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgiN6KQRW74FQ7sny84Ng0dGR
C9+YqndphayOMthSc4UbawTTcMD1aVLUmhiKqDJnmpSKExp4ku2xHxPdyWVpgdH7
dWhbMqBscgn8RIPrahoHIU8SVTsm4L7op7ZS/u0+feztEschtsoiUS/TmYiz05UL
SBiaR8AT8TIpTxHJZVQ1hh4uj85g7uWatY96o6Q7Y/AG8lehFZjvrLoMqy9G2tj2
kI/XWkMpOgzRJZ+khQa98eKfjtJgD1e0kZiuxJ7ECnUV1fkCvty1QTE5Fvr4W2Sm
QTPb33+/guMZ9bx9og/HN+Ig/77gLwWNGS5GUqbh5kS4XZsiyu5OohfigvqjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqtfOHHbXx4sfNF5mmHlYHiQuCt8wHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM3MmUzNDM1MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuy2cMA0GCSqGSIb3DQEBCwUAA4IBAQCg8KbiWUBZ
F2xvv1YIUtf635XdV/ueOf17VFlZZz6XQrD2R2Hg4SbcR3tznr55Qg8UQpDSE2/Z
ud0Zll5EWn/1oeDcY0POi7lTKSh8ou93YkBoQ0BQv11o0Kp85g7pWFZ/3o6HmZ6T
PYZbH/KsClaux70S7YS+y8CJqaUlcBxICcRr9qCgwPn0wAnvIapWSBpMpzsuIqeQ
SDsgvN8Qx/TAO0a0W8r6T2r/JdM6yfM47BFm6khIifEnwU/a88Db5XInChAaB9/k
si+BTu+yXryRgeHZwjpip2FQW25UZPPn6L1yUTAClEl/vrTyU/uIMyvW9W+k9NbX
rzdBIWr+9dxv
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:59 2025 by rpki-client