Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134352e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3134352e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          POGurHLn1HMWCO/igR3414RAaJ3Ea+WCqejSwzBDOrw=
Subject key identifier:   3B:29:8B:E6:74:D4:E7:E3:83:6D:B9:86:FC:C6:35:66:09:DE:62:74
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5042A5A13863F3C74112E56489FC7CEF177287B6
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134352e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:49:13 +0000
ROA not before:           Wed 23 Jul 2025 22:44:13 +0000
ROA not after:            Wed 22 Jul 2026 22:49:13 +0000
asID:                     28370
IP address blocks:        189.84.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:42:a5:a1:38:63:f3:c7:41:12:e5:64:89:fc:7c:ef:17:72:87:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:44:13 2025 GMT
            Not After : Jul 22 22:49:13 2026 GMT
        Subject: CN=3B298BE674D4E7E3836DB986FCC6356609DE6274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:39:7e:56:1a:ab:57:bd:92:38:72:89:92:
                    7b:57:c9:fe:22:5f:af:fe:a2:c9:2e:bc:dc:45:95:
                    26:33:58:48:71:61:38:58:9c:96:51:83:e2:5a:87:
                    69:6f:b7:56:46:ef:09:f2:b1:99:32:bb:c8:72:6b:
                    11:5a:71:1c:28:ea:34:e6:07:8c:91:60:d6:84:e0:
                    8c:40:1f:d1:34:78:df:05:86:6d:e8:14:6c:31:ec:
                    1a:1d:cb:c3:1b:ca:db:eb:d2:9c:92:61:40:e1:71:
                    6e:da:f8:8b:61:54:5b:2b:ea:40:70:9d:c4:25:ce:
                    d0:c2:7c:43:a9:54:6b:85:9e:12:63:45:30:a1:38:
                    c4:bc:b2:97:89:94:62:11:c4:92:ed:c6:99:84:69:
                    d1:59:e8:9b:bc:1c:f9:9d:4a:59:d8:49:83:0c:5e:
                    6f:14:7e:9f:7c:f6:8b:45:44:45:10:66:3b:e4:94:
                    25:6d:43:4d:03:a7:8c:ce:fb:a2:29:e4:4f:18:a7:
                    91:03:98:5d:ad:dc:52:e8:89:63:9f:13:b9:59:49:
                    de:d6:6e:71:45:a3:c6:92:01:fd:b5:e6:54:0b:bc:
                    01:f5:05:4b:6d:a3:6f:b8:1b:a0:65:d0:13:49:9c:
                    9d:98:d8:3d:75:b1:15:6c:8b:e8:e5:2f:bd:d4:13:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:8B:E6:74:D4:E7:E3:83:6D:B9:86:FC:C6:35:66:09:DE:62:74
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134352e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:01:1e:f2:7d:18:7a:99:e9:3e:b0:0a:96:5a:fd:bc:73:91:
         dd:fa:fc:39:7c:4f:94:45:95:4a:05:ac:09:e1:8e:4b:3e:f5:
         ae:48:e5:04:d3:7a:9e:aa:f0:71:1e:d8:be:ec:1c:42:f9:c7:
         a3:27:6d:35:49:3f:1e:cc:9f:f1:18:31:2f:b0:bb:48:a3:1b:
         6a:a4:ed:a4:e3:f0:cb:3d:75:6e:61:55:0d:e8:e3:77:34:45:
         cf:2f:18:f8:e4:77:69:e1:c5:85:b8:b3:29:d7:ca:94:5d:e5:
         d5:6e:79:ad:72:b9:e7:63:e8:46:e9:f5:33:a0:85:e5:e5:fe:
         12:15:d2:d6:85:ee:f3:d6:1b:a8:83:68:1f:13:b5:22:04:22:
         46:61:9e:c1:1d:3b:08:44:04:68:e6:72:b8:b9:a5:6a:40:17:
         01:70:e7:17:f6:ab:77:8b:b7:9e:20:9a:5c:7b:32:5b:49:19:
         a8:12:eb:87:c9:c1:d5:a0:60:7b:26:e7:22:8e:c3:6e:25:33:
         1a:c2:e9:4c:fc:6d:f9:3d:d3:af:9a:b2:2b:2d:40:2c:dc:ed:
         df:10:1e:24:62:13:a2:a6:4e:71:0e:38:bc:59:09:30:f5:64:
         f3:bb:dc:93:e9:7d:93:a0:d0:71:a0:44:ef:81:a5:48:a4:2e:
         c1:21:6d:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUEKloThj88dBEuVkifx87xdyh7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA3MjMyMjQ0MTNaFw0yNjA3MjIyMjQ5MTNaMDMxMTAvBgNV
BAMTKDNCMjk4QkU2NzRENEU3RTM4MzZEQjk4NkZDQzYzNTY2MDlERTYyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDchDl+VhqrV72SOHKJkntXyf4i
X6/+oskuvNxFlSYzWEhxYThYnJZRg+Jah2lvt1ZG7wnysZkyu8hyaxFacRwo6jTm
B4yRYNaE4IxAH9E0eN8Fhm3oFGwx7Body8Mbytvr0pySYUDhcW7a+IthVFsr6kBw
ncQlztDCfEOpVGuFnhJjRTChOMS8speJlGIRxJLtxpmEadFZ6Ju8HPmdSlnYSYMM
Xm8Ufp989otFREUQZjvklCVtQ00Dp4zO+6Ip5E8Yp5EDmF2t3FLoiWOfE7lZSd7W
bnFFo8aSAf215lQLvAH1BUtto2+4G6Bl0BNJnJ2Y2D11sRVsi+jlL73UE/tNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOymL5nTU5+ODbbmG/MY1ZgneYnQwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM5MmUzODM0MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVSRMA0GCSqGSIb3DQEBCwUAA4IBAQBAAR7yfRh6
mek+sAqWWv28c5Hd+vw5fE+URZVKBawJ4Y5LPvWuSOUE03qeqvBxHti+7BxC+cej
J201ST8ezJ/xGDEvsLtIoxtqpO2k4/DLPXVuYVUN6ON3NEXPLxj45Hdp4cWFuLMp
18qUXeXVbnmtcrnnY+hG6fUzoIXl5f4SFdLWhe7z1huog2gfE7UiBCJGYZ7BHTsI
RARo5nK4uaVqQBcBcOcX9qt3i7eeIJpcezJbSRmoEuuHycHVoGB7JucijsNuJTMa
wulM/G35PdOvmrIrLUAs3O3fEB4kYhOipk5xDji8WQkw9WTzu9yT6X2ToNBxoETv
gaVIpC7BIW23
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:13 2025 by rpki-client