Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135372e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3135372e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          EORmUjHhRONcTffFRTBrXhQAuvwhz122XjkRjEDciRA=
Subject key identifier:   3C:22:7D:33:05:31:99:E2:16:36:D5:0D:32:2B:D5:83:DD:6D:81:AC
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       485B495DB1D5521CA3A1916BC7445189ABAE498D
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135372e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:42:06 +0000
ROA not before:           Wed 23 Jul 2025 21:37:06 +0000
ROA not after:            Wed 22 Jul 2026 21:42:06 +0000
asID:                     28370
IP address blocks:        187.45.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5b:49:5d:b1:d5:52:1c:a3:a1:91:6b:c7:44:51:89:ab:ae:49:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:37:06 2025 GMT
            Not After : Jul 22 21:42:06 2026 GMT
        Subject: CN=3C227D33053199E21636D50D322BD583DD6D81AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:77:69:93:81:36:6b:55:48:7e:42:32:69:
                    a1:d2:70:f3:ac:6c:a5:94:85:35:da:a6:1b:87:aa:
                    63:93:f1:0d:07:0b:4d:e7:2e:99:a9:ba:2c:89:9a:
                    fa:fe:82:dd:ad:cf:b9:3b:d1:43:3d:e3:d3:cb:2f:
                    13:c8:2e:4a:f8:1b:d4:84:91:91:c5:67:47:39:2f:
                    b4:a7:57:3d:2d:2a:70:57:13:f0:47:7c:1a:66:7d:
                    a0:d3:98:07:8c:2a:df:f8:e0:f1:27:f6:f5:bc:09:
                    9e:fa:cc:9f:c4:3b:79:25:da:f0:fd:45:ea:f0:76:
                    93:9a:c4:fd:0a:e0:8d:92:28:f5:e4:2e:52:9e:c4:
                    1e:39:82:90:45:bf:ff:2f:c5:38:9f:2f:90:e8:3d:
                    75:29:de:2e:41:a5:21:34:23:f8:5a:e1:0d:71:53:
                    28:53:12:a2:06:23:fc:39:5d:9e:1f:71:19:1a:15:
                    8a:88:4e:9a:48:0e:df:2b:56:f2:59:b9:ff:0b:4b:
                    e2:0e:9b:cc:2d:6a:34:f1:ed:78:98:07:08:72:4c:
                    57:8b:4f:0e:2d:fd:e7:ed:28:f7:42:96:a1:6e:7c:
                    e5:3d:84:0e:43:c6:5f:86:73:95:d9:31:b5:69:ee:
                    3b:39:12:80:63:c9:b0:4e:9a:3f:4e:e0:bc:a5:d4:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:22:7D:33:05:31:99:E2:16:36:D5:0D:32:2B:D5:83:DD:6D:81:AC
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135372e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:de:5e:3f:9e:c1:17:b9:78:fa:db:97:18:95:72:cd:95:de:
         fd:02:e5:d1:a9:23:8a:d8:9a:fc:97:d7:48:d2:21:1b:49:23:
         5d:c1:13:74:df:1e:e5:c0:6a:d5:0b:ca:3b:52:c6:69:dc:88:
         2a:99:18:42:93:63:4a:9f:75:78:f9:31:20:8a:0e:9f:ce:45:
         98:03:28:b9:9f:3c:5b:76:7b:96:2f:e5:64:45:83:01:16:b8:
         fa:7d:33:e7:00:8f:d4:0c:62:e4:85:f1:44:80:1e:f8:c8:38:
         fd:07:8e:ed:a5:19:c9:36:03:66:05:0b:22:1b:ac:24:e2:33:
         bc:51:c4:b3:77:fd:e1:28:36:7f:6f:48:ef:a1:2a:1e:f5:d6:
         11:46:ca:98:36:f0:42:30:ed:6b:a6:54:8f:13:50:2f:2c:57:
         d3:03:6f:67:fa:92:a1:41:73:e4:bb:44:61:74:02:21:89:9b:
         0f:5b:a7:d4:b2:61:2d:b8:a1:5f:6f:cd:e4:99:e3:04:fd:1a:
         84:2c:5b:58:de:89:ed:53:8a:eb:ce:0b:12:bd:b5:c0:86:50:
         47:88:3a:4b:fd:91:71:9b:eb:61:07:71:fb:a2:5c:ec:b3:50:
         60:f8:a2:14:22:01:9f:e4:63:ef:7a:df:33:4a:bd:85:9c:8f:
         3f:3b:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:08 2025 by rpki-client