Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135342e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135342e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          B6xleuCSm+oY60yhkWJJo+eNr3RdIUTuSa8Qtne26eU=
Subject key identifier:   47:5E:04:C3:14:93:DD:94:95:41:C2:74:07:B7:2C:F0:BF:80:84:9E
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       23AFC9090CBB0A3DCD249229172B3203673C4526
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135342e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:53:52 +0000
ROA not before:           Wed 23 Jul 2025 22:48:52 +0000
ROA not after:            Wed 22 Jul 2026 22:53:52 +0000
asID:                     28370
IP address blocks:        189.84.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:af:c9:09:0c:bb:0a:3d:cd:24:92:29:17:2b:32:03:67:3c:45:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:48:52 2025 GMT
            Not After : Jul 22 22:53:52 2026 GMT
        Subject: CN=475E04C31493DD949541C27407B72CF0BF80849E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:8e:2b:34:37:7b:c4:95:20:d1:c9:ff:93:
                    98:e1:32:c6:95:d1:a0:bc:e8:5b:a6:83:fd:ca:85:
                    26:7e:a3:64:06:8c:82:eb:3c:0c:4d:f0:8f:9d:d9:
                    f3:8c:5c:eb:b8:aa:d4:8b:47:3a:24:57:bb:a0:8b:
                    b9:7c:33:7e:05:ff:de:b3:b3:cd:ee:43:55:7a:d4:
                    03:cb:9a:ad:0a:54:71:a5:65:18:67:c7:3e:4b:cf:
                    47:97:94:5d:50:41:15:88:b8:4c:d9:13:e8:c8:2e:
                    3e:1f:69:e3:af:5a:7e:ce:d1:e3:51:32:f8:90:65:
                    a2:47:16:4f:b1:cc:1c:65:09:c6:2c:aa:a7:56:39:
                    13:82:da:cb:6d:e1:6b:0f:87:91:de:a0:3e:be:61:
                    cf:51:26:dc:72:e1:40:43:13:7d:b5:77:5b:7d:51:
                    68:50:08:df:cd:b4:14:bf:ba:67:1a:1f:89:d6:3a:
                    79:19:56:6a:a7:e3:9b:2e:b1:55:27:ef:62:dd:fc:
                    2c:ad:f1:ff:a3:3c:e7:a5:a8:01:05:0a:0a:f0:c6:
                    30:24:36:c8:6a:c1:9b:83:22:99:ef:68:06:c6:3d:
                    2b:29:1a:32:af:91:3d:e6:7e:11:86:74:bb:4e:ee:
                    8a:d2:d7:9b:31:a3:6a:19:de:b7:50:6b:d3:c1:86:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5E:04:C3:14:93:DD:94:95:41:C2:74:07:B7:2C:F0:BF:80:84:9E
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135342e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:84:59:1c:8f:94:e4:6e:22:9e:86:ce:27:69:83:13:f3:
         fc:94:e6:19:6c:51:d3:65:84:0f:10:5b:77:ba:31:2b:67:98:
         b5:54:64:69:94:1f:36:58:2f:62:10:6f:8b:36:ec:a0:12:ca:
         15:a8:2a:2d:40:87:ec:40:4b:6f:59:d9:f1:a0:67:99:64:cc:
         61:f2:ea:0d:21:ea:d0:14:bf:d7:67:a4:5d:fe:9e:54:46:49:
         11:d2:d2:0b:1c:11:be:9a:67:c9:1d:1b:85:7b:47:ae:a2:24:
         50:6c:b2:00:c3:a9:69:95:e5:67:1e:74:07:65:49:22:b4:9b:
         53:dc:d3:ae:34:13:81:44:42:21:ac:6b:52:c2:17:60:90:82:
         c0:b2:f4:3a:a4:bc:e0:62:9f:80:65:00:53:4b:11:c6:e4:ed:
         50:8c:9f:12:e3:06:91:4d:56:19:46:91:b2:e0:d7:e6:80:d5:
         23:d3:07:68:01:2b:a1:07:b6:a6:f5:bf:db:1c:de:7d:6d:a9:
         b0:30:53:7a:77:e6:50:49:27:ba:a3:2a:c2:36:5e:5e:52:f1:
         86:7f:f7:c3:a1:2a:a2:66:a8:a2:d6:20:96:6d:22:ae:a0:eb:
         7c:b6:20:74:5e:c1:7a:05:b6:4a:67:02:1f:26:2a:6d:a1:87:
         f8:fa:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:39 2025 by rpki-client