Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134382e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3134382e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          oruJEQJvOmVyWufxVQ/YRaeo3+SZGXtNjqmG/daQiyw=
Subject key identifier:   09:2E:58:CE:6C:9E:E0:21:CE:4F:73:80:B0:3C:BF:5B:47:36:A3:C3
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5C631A75B44879C488A821BB8F0E67F9AA946DCD
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134382e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:50:27 +0000
ROA not before:           Wed 23 Jul 2025 22:45:27 +0000
ROA not after:            Wed 22 Jul 2026 22:50:27 +0000
asID:                     28370
IP address blocks:        189.84.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:63:1a:75:b4:48:79:c4:88:a8:21:bb:8f:0e:67:f9:aa:94:6d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:45:27 2025 GMT
            Not After : Jul 22 22:50:27 2026 GMT
        Subject: CN=092E58CE6C9EE021CE4F7380B03CBF5B4736A3C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:c5:74:9a:07:c3:b7:6d:08:3e:22:8d:ef:
                    f8:62:34:b2:15:9d:22:e9:bd:cc:59:fd:ba:6d:63:
                    d4:1e:6c:33:a6:61:09:64:7e:e4:b4:e6:ff:2d:93:
                    05:06:cc:98:2e:81:0e:6f:62:eb:61:a6:d0:20:53:
                    b6:91:52:90:cf:e1:5d:ca:b2:57:04:a5:83:2a:11:
                    e8:a6:ed:27:9d:54:60:3d:5d:0f:c7:f7:49:a4:f0:
                    c3:1c:c6:1a:a5:31:b1:d9:1f:66:ec:05:2f:32:e9:
                    e2:83:a1:5c:8c:6f:2e:4d:86:7c:d0:fe:42:69:be:
                    41:c7:ea:90:f7:17:43:ea:a7:0a:7f:7e:7c:00:eb:
                    b5:22:28:f6:82:80:d3:42:02:e5:d3:d0:9f:66:f6:
                    80:2f:22:94:c4:92:4b:1a:e2:62:79:73:8b:96:2c:
                    f4:a6:89:a0:46:a9:47:49:45:dd:66:62:fb:ba:a8:
                    c6:44:3d:0a:fe:51:b0:48:98:45:9e:d5:9b:06:88:
                    40:a7:fa:e6:ce:a7:96:4a:92:09:a2:d8:61:8d:e8:
                    76:68:f3:b9:48:36:bf:b5:1a:1b:eb:cf:5b:ab:71:
                    73:5e:ad:ca:42:9d:f8:51:35:88:9f:27:5f:d2:60:
                    0a:57:02:1d:40:f0:04:23:ca:62:20:6e:73:44:eb:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:58:CE:6C:9E:E0:21:CE:4F:73:80:B0:3C:BF:5B:47:36:A3:C3
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134382e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:7b:f1:f6:a1:79:34:83:d9:b6:49:a9:85:1f:5f:a0:a4:2d:
         3f:c0:ce:29:14:f2:e9:ab:03:f4:11:e9:a9:c8:c9:32:0d:ab:
         a2:67:2e:74:3b:47:28:e6:a4:fb:5f:7a:0f:ee:31:cf:cd:b4:
         c3:f0:68:8b:1b:42:26:91:eb:51:4d:a1:ee:f8:47:55:a3:70:
         47:92:d6:12:9c:24:e3:ac:48:7c:26:51:f1:67:4f:24:67:ab:
         84:44:de:64:18:a8:39:46:be:54:36:78:28:df:9b:81:71:ef:
         f2:21:4e:0a:13:02:b0:08:68:5a:d8:70:80:3d:86:ca:42:0c:
         93:c0:7e:c4:79:c6:ba:9a:21:2e:06:cd:90:27:09:d9:df:58:
         ef:ce:e5:d8:0e:c1:0b:e8:61:79:a0:89:48:39:62:71:cf:6f:
         6b:48:04:f6:3b:7c:f7:a1:21:7e:0f:2d:d0:e9:38:7d:65:8e:
         7e:4d:de:a2:14:45:36:85:a6:a0:f1:7f:7f:d5:eb:6e:e7:2b:
         b4:b0:45:63:52:74:33:69:44:6f:50:2b:5c:13:20:2a:50:26:
         da:7a:28:6e:33:06:fe:bc:78:09:38:70:54:eb:ac:f4:9e:c9:
         44:fd:49:66:0f:ef:18:8c:82:8a:80:25:04:3d:c0:d7:a1:0b:
         cf:2f:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:13:30 2025 by rpki-client