Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135382e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3135382e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          uQ3SvYOIMntPHOedoPseDLuSQEeBNj8JkBZaTsMyOds=
Subject key identifier:   69:52:B4:FA:6B:3A:B6:BB:CF:31:F0:47:A2:D0:0C:4D:46:1B:AA:D8
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       17CE9AC89DCBE9A4530530B8A19C39B520C704
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135382e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 21:42:28 +0000
ROA not before:           Wed 23 Jul 2025 21:37:28 +0000
ROA not after:            Wed 22 Jul 2026 21:42:28 +0000
asID:                     28370
IP address blocks:        187.45.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ce:9a:c8:9d:cb:e9:a4:53:05:30:b8:a1:9c:39:b5:20:c7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 21:37:28 2025 GMT
            Not After : Jul 22 21:42:28 2026 GMT
        Subject: CN=6952B4FA6B3AB6BBCF31F047A2D00C4D461BAAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:af:b1:73:7d:ab:60:0c:fc:1b:24:28:4b:
                    b0:ee:42:65:cc:e5:51:2b:ac:f4:d8:5b:4a:3d:84:
                    ce:13:6c:d3:46:71:a5:c8:17:b6:39:57:b7:66:da:
                    3c:ea:9b:40:10:8c:83:18:1d:59:25:2c:bd:95:3f:
                    34:8e:69:f2:aa:fe:b7:1f:c3:ab:6f:ec:a9:5e:36:
                    87:c7:a6:4e:a6:17:8f:ae:0b:16:61:e9:e3:92:0f:
                    96:08:f8:13:7e:5c:aa:d9:73:5e:3e:4e:83:70:e8:
                    c2:a0:dc:f8:d5:de:7d:3f:6b:fa:dc:d8:f5:98:d9:
                    2e:ad:72:d7:8e:56:80:81:8c:fe:14:9e:98:69:a1:
                    51:c8:dd:62:34:6d:28:cf:ee:bc:4d:08:16:d4:71:
                    16:68:42:8f:54:fd:5a:a6:12:fd:e6:a8:a5:11:b2:
                    77:77:eb:1c:f4:35:e1:0f:04:54:5e:18:02:ad:b5:
                    fb:39:9e:7b:8e:f2:cb:73:9a:fa:42:b0:f2:7a:67:
                    c6:f3:49:98:ab:52:c1:54:3e:80:b0:68:09:c3:6c:
                    a6:b8:0b:bd:17:a9:e6:03:32:5c:fa:cf:fd:c8:2e:
                    ad:f0:0d:fe:65:fa:ff:03:e7:1f:d8:fa:4f:c2:93:
                    a7:02:36:f3:22:bd:1c:fe:a5:ef:e6:50:34:66:46:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:52:B4:FA:6B:3A:B6:BB:CF:31:F0:47:A2:D0:0C:4D:46:1B:AA:D8
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135382e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:4a:eb:a2:b0:92:60:0b:72:11:e4:2c:bd:f3:9c:87:cf:
         43:6f:df:b7:6e:25:28:ff:cc:70:16:8f:a4:5c:d4:9d:43:93:
         01:61:34:d2:97:77:4b:26:4b:55:53:bb:ca:d2:85:92:b6:1c:
         99:ea:41:3f:53:a8:94:a4:eb:c7:40:88:1e:17:81:37:c4:d4:
         96:4e:27:3f:b4:50:3c:e9:02:a9:86:62:6c:1b:4e:6b:95:35:
         81:16:60:af:e8:e7:e1:01:0b:3d:65:65:96:9d:76:0e:96:62:
         79:10:55:a7:a6:fa:d4:ce:5c:fc:37:d9:d3:67:91:85:ce:0c:
         1d:9c:d4:d6:70:9f:ac:c0:3c:9d:48:b7:b7:1e:25:91:b1:60:
         58:da:93:88:f6:6b:06:1f:e3:9b:b3:84:3a:39:4f:b3:2a:ec:
         c1:7f:82:d9:dd:07:bc:1f:9a:24:d5:78:23:4a:e0:40:64:9e:
         e3:9b:c2:b0:9f:c9:9a:f0:b3:4c:61:58:54:08:21:9f:cc:7e:
         b0:d1:bc:24:74:bd:f2:54:dd:d4:20:da:e0:aa:11:00:29:9d:
         ad:20:02:6e:e1:93:35:3f:78:61:07:71:1a:17:97:a2:e0:98:
         de:27:53:b3:19:7f:15:f8:40:d4:2d:7b:ce:67:04:d1:e6:71:
         fe:89:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:08 2025 by rpki-client