Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135312e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135312e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          wSvIWtf4EysNzgdSMVCDr/lel2GHd6gLEmZ29CqzSGE=
Subject key identifier:   57:9D:48:97:6D:8A:C3:8B:0E:BB:FF:F8:AE:5E:60:8C:A1:ED:DF:AB
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       7E70A7EDCE095CC284C57CEE683B30450731B284
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135312e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:51:39 +0000
ROA not before:           Wed 23 Jul 2025 22:46:39 +0000
ROA not after:            Wed 22 Jul 2026 22:51:39 +0000
asID:                     28370
IP address blocks:        189.84.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 17:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:70:a7:ed:ce:09:5c:c2:84:c5:7c:ee:68:3b:30:45:07:31:b2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:46:39 2025 GMT
            Not After : Jul 22 22:51:39 2026 GMT
        Subject: CN=579D48976D8AC38B0EBBFFF8AE5E608CA1EDDFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:9c:2d:02:71:42:16:61:72:92:6e:6a:87:
                    f2:d3:f2:87:3b:4d:3f:f0:23:ac:60:c7:8c:04:77:
                    45:db:0e:2e:6e:ec:92:86:29:9d:4f:2f:6b:4b:a4:
                    84:b1:62:f7:4a:cc:ea:86:b9:97:21:de:6b:b7:8d:
                    0b:40:ef:c6:5d:34:bc:d2:db:c0:26:1a:78:80:37:
                    e0:ca:6e:23:f8:b7:b6:20:16:d5:cd:59:34:c2:a2:
                    1f:6c:1e:af:f4:84:72:ac:c1:60:d1:25:17:95:5f:
                    80:f1:2b:ad:83:57:4d:d9:aa:e6:25:36:98:77:8f:
                    41:49:c2:c3:4e:b6:d1:1f:7f:cc:9c:2d:d5:02:e6:
                    d2:dc:64:67:28:1a:75:90:1a:a0:ab:86:15:14:6f:
                    d2:ac:da:d8:c6:63:da:31:c5:9d:d4:f4:6b:41:00:
                    d7:4c:2a:f4:3e:9d:98:47:5f:a5:b0:21:bf:09:09:
                    e5:22:10:b4:5d:f5:1e:61:53:66:41:5d:0e:db:e9:
                    26:05:84:43:af:f3:49:86:95:e4:cd:b7:56:74:5b:
                    8a:f6:87:37:83:65:da:53:e8:45:7b:78:7e:f3:92:
                    c6:dd:93:b0:01:aa:56:6c:1c:28:f7:f1:be:fe:47:
                    b1:15:95:38:91:4f:1c:6d:d6:c0:2f:7f:9e:d8:2b:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:48:97:6D:8A:C3:8B:0E:BB:FF:F8:AE:5E:60:8C:A1:ED:DF:AB
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135312e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1c:53:d5:f1:07:03:88:94:2a:b1:b9:04:a2:c3:6f:f9:83:
         48:d1:02:5a:a0:1c:69:75:a3:fd:99:52:44:4c:0b:dc:87:28:
         6f:fb:27:7d:d9:da:45:b5:49:85:d0:b1:f3:cd:c5:47:4a:a9:
         5c:97:4d:5c:22:ba:d3:91:76:d0:fb:e7:05:87:07:ac:e6:6c:
         11:d7:c4:a8:6e:30:74:7e:b6:33:4a:60:d9:a1:b9:d6:7a:d9:
         05:28:9d:68:67:a3:c2:39:f4:e5:cb:d4:94:36:a0:ee:7d:f3:
         0c:98:5d:b0:7e:99:d6:a5:4e:e1:fd:8a:56:70:21:07:aa:59:
         bc:8a:05:a9:91:c4:34:a0:44:7c:31:13:b8:f4:00:ee:01:f9:
         d1:8a:01:e4:48:dd:9c:07:72:00:29:e4:ed:f3:57:af:90:ca:
         a1:47:70:7c:e4:fd:24:2f:f6:fd:52:eb:c4:a1:15:7f:63:16:
         04:49:93:83:64:84:14:c3:e9:40:d3:48:e3:f8:3d:ce:9a:af:
         9c:52:10:74:24:64:5d:bb:b5:02:c4:1a:2a:8f:3a:08:a0:7b:
         81:4a:af:22:f4:e1:ab:4f:6b:c3:15:41:7a:aa:2d:b1:c6:80:
         d2:1d:1c:7a:d4:37:dc:16:70:2d:1b:fc:fb:f1:07:5d:54:33:
         cf:c3:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:57 2025 by rpki-client