Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135342e302f32332d3233203d3e203238333730.roa
File:                     3138392e38342e3135342e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          /Tdkyol4IiebhrJzcNLXKVJ1ii3gLsxZBgNKP3uWvt4=
Subject key identifier:   92:E2:AA:AD:E3:8F:7B:0A:08:DD:15:D4:F9:6C:77:A7:05:0D:1F:0A
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       29E5C54A04F4424E5234F2924586222D02D23ACB
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135342e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:47:23 +0000
ROA not before:           Wed 23 Jul 2025 22:42:23 +0000
ROA not after:            Wed 22 Jul 2026 22:47:23 +0000
asID:                     28370
IP address blocks:        189.84.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e5:c5:4a:04:f4:42:4e:52:34:f2:92:45:86:22:2d:02:d2:3a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:42:23 2025 GMT
            Not After : Jul 22 22:47:23 2026 GMT
        Subject: CN=92E2AAADE38F7B0A08DD15D4F96C77A7050D1F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:7a:74:b2:72:01:7e:07:fa:89:a2:eb:85:
                    3d:3b:c3:2b:b0:10:9c:06:17:80:98:27:c2:b5:65:
                    30:46:69:91:5c:ce:40:69:8e:35:d6:b4:8f:98:84:
                    93:09:a1:0f:bd:ba:07:d0:68:7a:9d:89:4a:2b:95:
                    5b:5e:04:2c:2b:ea:23:0c:05:dd:c0:87:6b:e4:73:
                    28:15:0c:46:9a:01:4c:a0:52:4c:68:a6:b0:62:fd:
                    be:2b:7e:70:b5:03:64:91:57:f6:d9:2f:76:38:0e:
                    77:a2:ce:60:32:f3:b2:33:ae:b9:a8:16:69:f9:5c:
                    95:d9:f4:f5:d5:c3:88:88:2f:37:66:2d:5b:cd:34:
                    97:3c:89:88:8e:89:ba:66:f1:8e:e1:b8:80:87:a6:
                    ee:66:59:c5:af:32:d3:46:f7:2f:e5:7a:4f:25:eb:
                    66:0e:4a:f3:34:47:93:75:e8:ab:d5:c4:14:a3:a0:
                    cd:f6:47:d9:30:ee:cc:23:6d:95:6f:51:4a:2c:46:
                    cb:85:f2:1f:93:cc:63:e0:a4:00:d3:af:1c:ba:42:
                    82:a2:18:3a:23:6e:84:9e:b2:75:92:ca:73:27:51:
                    d1:a6:75:83:af:12:85:a0:d6:38:8b:f3:a8:ae:8a:
                    b5:35:ee:b2:14:32:4a:8f:01:6e:34:9b:83:05:5e:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:AA:AD:E3:8F:7B:0A:08:DD:15:D4:F9:6C:77:A7:05:0D:1F:0A
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135342e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:65:cc:87:bb:cd:fa:d5:db:18:a8:68:d7:21:79:de:08:7c:
         2f:89:f5:7d:a8:f7:7a:40:3b:97:56:99:29:9d:96:a2:0d:81:
         4d:b2:ae:16:72:df:63:d2:aa:a1:0b:c6:d4:c9:b7:9d:0d:38:
         86:5f:b6:eb:b3:71:ed:77:df:bf:68:30:51:48:c4:91:1b:4f:
         1e:5c:aa:64:51:4d:3f:40:7c:56:4a:07:11:de:25:97:ce:7f:
         51:6c:81:1b:72:17:d9:0b:8f:ad:ea:20:30:2b:5a:ea:f7:31:
         28:02:c7:f5:2a:2b:b2:61:58:55:86:ae:08:9a:4d:d7:cd:ed:
         c9:a5:bd:15:02:6f:36:7b:2f:cd:d1:a0:42:4a:8d:88:80:55:
         7b:60:6c:40:be:3a:19:de:55:d4:a4:b5:8f:00:b0:8e:f8:43:
         bf:e1:04:05:10:8e:a3:46:47:06:44:b1:de:2d:1f:32:63:82:
         68:75:b0:72:86:ea:90:ae:43:71:71:de:6d:be:cb:22:c6:86:
         1a:e5:7d:b4:ce:85:e9:62:96:3a:bb:64:76:4c:cd:37:62:4f:
         f5:7f:f0:2d:2e:64:17:e1:a0:07:66:bb:77:32:7d:36:c3:32:
         96:54:8c:b1:c5:5c:39:ec:0c:39:64:0f:8a:72:e1:05:ad:73:
         a6:e8:14:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKeXFSgT0Qk5SNPKSRYYiLQLSOsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA3MjMyMjQyMjNaFw0yNjA3MjIyMjQ3MjNaMDMxMTAvBgNV
BAMTKDkyRTJBQUFERTM4RjdCMEEwOEREMTVENEY5NkM3N0E3MDUwRDFGMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbHp0snIBfgf6iaLrhT07wyuw
EJwGF4CYJ8K1ZTBGaZFczkBpjjXWtI+YhJMJoQ+9ugfQaHqdiUorlVteBCwr6iMM
Bd3Ah2vkcygVDEaaAUygUkxoprBi/b4rfnC1A2SRV/bZL3Y4DneizmAy87Izrrmo
Fmn5XJXZ9PXVw4iILzdmLVvNNJc8iYiOibpm8Y7huICHpu5mWcWvMtNG9y/lek8l
62YOSvM0R5N16KvVxBSjoM32R9kw7swjbZVvUUosRsuF8h+TzGPgpADTrxy6QoKi
GDojboSesnWSynMnUdGmdYOvEoWg1jiL86iuirU17rIUMkqPAW40m4MFXucBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkuKqreOPewoI3RXU+Wx3pwUNHwowHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM5MmUzODM0MmUzMTM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvVSaMA0GCSqGSIb3DQEBCwUAA4IBAQAgZcyHu836
1dsYqGjXIXneCHwvifV9qPd6QDuXVpkpnZaiDYFNsq4Wct9j0qqhC8bUybedDTiG
X7brs3Htd9+/aDBRSMSRG08eXKpkUU0/QHxWSgcR3iWXzn9RbIEbchfZC4+t6iAw
K1rq9zEoAsf1KiuyYVhVhq4Imk3Xze3Jpb0VAm82ey/N0aBCSo2IgFV7YGxAvjoZ
3lXUpLWPALCO+EO/4QQFEI6jRkcGRLHeLR8yY4JodbByhuqQrkNxcd5tvssixoYa
5X20zoXpYpY6u2R2TM03Yk/1f/AtLmQX4aAHZrt3Mn02wzKWVIyxxVw57Aw5ZA+K
cuEFrXOm6BTY
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:23 2025 by rpki-client