Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135382e302f32332d3233203d3e203238333730.roa
File:                     3138372e34352e3135382e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          jjqorChCp4U7EdKZ1+xevgtbZTzA2JyU7nkJpqbyrVY=
Subject key identifier:   5A:B0:89:B2:96:9E:B1:5B:80:D9:01:7A:1C:C2:56:5B:88:0F:FE:47
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       47016B462DD855CA8B5D98AAF3A6667E15AB0851
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135382e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:36:44 +0000
ROA not before:           Wed 23 Jul 2025 21:31:44 +0000
ROA not after:            Wed 22 Jul 2026 21:36:44 +0000
asID:                     28370
IP address blocks:        187.45.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:01:6b:46:2d:d8:55:ca:8b:5d:98:aa:f3:a6:66:7e:15:ab:08:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:31:44 2025 GMT
            Not After : Jul 22 21:36:44 2026 GMT
        Subject: CN=5AB089B2969EB15B80D9017A1CC2565B880FFE47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7e:db:dc:a6:4f:19:05:5e:53:46:33:22:fd:
                    9d:6c:9e:7e:34:3e:07:49:81:7b:24:5d:89:88:f4:
                    6b:21:ec:de:81:97:8c:e4:2f:a3:31:88:ba:73:25:
                    3e:ca:d1:e6:1b:19:8c:92:4e:ff:96:bd:58:69:14:
                    13:cf:f2:58:79:f5:e6:e3:89:e5:90:8a:c7:3e:44:
                    8e:bd:0b:3f:77:bd:f1:bd:08:5c:e3:61:0d:2b:10:
                    b6:1f:9e:e5:47:dc:77:c0:44:c2:2c:bb:46:3b:d6:
                    d9:73:d8:ec:bc:5b:b9:9f:f2:66:d7:5a:0d:97:a7:
                    1a:c2:b0:50:48:b7:99:71:46:6c:ec:6c:61:78:39:
                    1c:c3:c9:85:8f:9d:b9:19:1e:7f:9a:0f:ef:a7:a5:
                    19:00:35:b3:1e:3d:f9:ea:db:4b:71:bd:f7:49:00:
                    5f:e7:a8:65:d4:60:42:fc:f6:f8:4d:15:91:5c:77:
                    84:f7:8d:2d:ce:e3:c7:eb:e3:75:89:51:31:82:52:
                    e5:39:db:ac:ca:31:89:f1:34:7d:e0:2a:77:16:d6:
                    9d:76:4c:37:17:00:ac:02:87:a5:fa:4d:df:cc:9d:
                    fe:83:f4:52:52:e8:84:d5:8f:92:2c:af:bd:60:c1:
                    05:11:6a:bb:20:18:53:2a:f5:1f:89:26:a3:33:80:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:89:B2:96:9E:B1:5B:80:D9:01:7A:1C:C2:56:5B:88:0F:FE:47
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135382e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:db:36:dd:a7:a4:e1:71:8a:60:b3:ee:2c:94:62:2a:bc:
         1e:80:c3:39:30:4a:8f:f2:81:8b:a3:5a:3a:43:65:34:e1:eb:
         bc:ec:8e:77:c6:d6:f1:56:93:29:91:81:19:97:4a:55:2f:30:
         b1:6c:df:3d:c8:bf:23:7b:76:3c:60:c1:f2:10:73:59:6c:53:
         76:b1:1e:dd:ba:78:78:77:89:d0:61:02:a7:fb:02:d6:46:17:
         d4:dd:a5:36:e1:0f:7a:1a:0e:d9:27:10:f2:83:6d:3d:2d:7b:
         6c:31:3c:6a:05:38:9c:1f:cc:b9:2a:dc:af:13:c2:84:e3:bc:
         63:b0:a3:d8:b6:f7:b3:21:16:45:9d:d0:86:78:bc:35:64:a4:
         8d:40:55:c0:40:e9:8c:4e:d0:23:5f:7b:2b:b2:97:30:11:22:
         7b:65:fd:98:f3:00:82:79:89:c4:bc:f2:74:1a:ce:a4:50:7e:
         4e:83:73:45:ee:30:6e:0d:17:6a:97:b7:4d:e6:11:8a:82:18:
         75:b2:f3:c2:fc:35:78:23:50:ee:0e:ae:0e:85:67:a4:ae:20:
         b6:ec:5e:0e:eb:9a:24:81:e6:0c:f1:fd:00:71:27:b2:46:4a:
         84:6c:13:bc:ff:d1:35:23:93:19:12:ac:fb:ed:99:b7:6d:b8:
         68:62:15:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:56 2025 by rpki-client