Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32312d3231203d3e203238333730.roa
File:                     3138392e38342e3134342e302f32312d3231203d3e203238333730.roa (raw, json)
Hash identifier:          c89qKBtWHuvoyDKmNbzsgNVsgiqRsjxmLPEA4F42Xgo=
Subject key identifier:   05:C3:83:31:70:6C:B2:F3:2A:CA:ED:07:24:75:3A:68:7F:91:9B:79
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       765ED5FF76DD38462FC61E61EF763421D55B26EB
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32312d3231203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:41:55 +0000
ROA not before:           Wed 23 Jul 2025 22:36:55 +0000
ROA not after:            Wed 22 Jul 2026 22:41:55 +0000
asID:                     28370
IP address blocks:        189.84.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5e:d5:ff:76:dd:38:46:2f:c6:1e:61:ef:76:34:21:d5:5b:26:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:36:55 2025 GMT
            Not After : Jul 22 22:41:55 2026 GMT
        Subject: CN=05C38331706CB2F32ACAED0724753A687F919B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:a3:f2:c5:d0:68:9c:eb:16:63:95:cf:0b:
                    6b:3a:c7:1f:bc:41:7a:61:6a:80:aa:89:fb:df:87:
                    69:57:65:66:ad:ec:a9:d7:fb:25:50:5f:44:71:e9:
                    69:a5:05:b9:ee:10:8e:c0:61:50:57:e0:20:3e:a5:
                    09:5e:b2:71:12:e4:6d:1e:9f:39:94:1c:7b:a1:b1:
                    ac:0e:65:b7:d4:4f:99:5c:3a:ca:67:6c:6f:0b:21:
                    68:d2:e1:9e:7a:11:1d:97:2e:40:87:a5:47:1e:fb:
                    af:c5:ff:d8:6c:04:16:83:18:43:a3:6d:10:61:76:
                    d7:9c:11:8c:ad:70:f0:19:6d:0d:22:9a:cb:02:5f:
                    51:a9:7f:bb:5d:e0:a0:08:50:cb:97:03:4d:98:6e:
                    61:3c:ad:4d:11:38:e9:89:23:a9:80:86:7c:06:c5:
                    98:a8:ec:de:dd:50:7c:0a:86:52:e9:f2:85:68:8e:
                    91:a8:25:40:48:9d:c7:eb:af:ce:d1:ee:dc:25:86:
                    d1:89:1c:99:ff:4c:10:01:d2:5b:9f:7f:e1:97:2b:
                    a9:ea:bd:eb:ed:72:64:a1:b7:51:a4:92:30:15:db:
                    f7:59:2c:ab:12:3e:80:bc:38:4f:53:c5:2e:01:ac:
                    ab:4b:97:5e:d1:a5:4f:7c:a6:2b:ca:c3:fe:4d:66:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C3:83:31:70:6C:B2:F3:2A:CA:ED:07:24:75:3A:68:7F:91:9B:79
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32312d3231203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:1e:f6:80:7c:6f:da:b6:b2:28:90:f1:8b:46:e7:05:e8:7e:
         ff:25:dd:d4:0b:f3:ee:81:14:29:ca:be:d7:b1:7f:bf:c1:1b:
         ac:24:2c:04:f3:27:87:23:5f:5c:17:6e:71:2a:1d:4c:4c:7d:
         90:b5:f4:99:c6:a4:48:59:08:15:68:75:94:21:0a:86:74:a8:
         2e:3f:7d:c1:63:02:40:92:1d:81:e7:1a:e9:79:a1:73:87:c8:
         34:29:d2:ce:d9:3f:2b:5d:4b:bb:2b:10:f9:25:79:05:ea:7a:
         29:7a:3a:16:8b:18:7c:f3:6e:a6:4d:15:21:72:00:16:4a:db:
         88:e8:8d:21:88:a2:4a:d6:ab:5f:0c:7a:c4:86:f0:67:a2:5c:
         fa:fa:1c:e1:19:a0:fa:bb:9d:24:f1:da:41:d3:76:31:b6:8a:
         ba:e4:e4:22:9d:da:e5:2c:14:52:85:9e:68:a6:b7:04:2d:fe:
         1b:ad:5d:bf:65:0f:0a:e5:76:63:0a:44:f9:29:7b:45:d0:1d:
         ab:fa:41:c7:a9:42:ab:5f:b1:b1:24:7a:14:cf:7c:46:92:b8:
         15:ea:11:ad:73:cd:c6:3c:93:ca:db:a4:a7:c3:b7:6a:32:78:
         c5:aa:18:dd:d0:20:84:78:d9:9f:83:ba:5c:8d:71:aa:60:19:
         d5:d1:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:58 2025 by rpki-client