Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32332d3233203d3e203238333730.roa
File:                     3138392e38342e3135362e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          Vbou6VLX6axqfxQnH1V8RvDW+SMs65R4gMf0426I8cc=
Subject key identifier:   E9:0C:97:9F:42:47:5B:CC:A3:F0:47:77:30:9E:90:82:AC:46:3C:39
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       2F31D5A98385F7A0F45A6149FD8945B06AE1D6D8
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:47:55 +0000
ROA not before:           Wed 23 Jul 2025 22:42:55 +0000
ROA not after:            Wed 22 Jul 2026 22:47:55 +0000
asID:                     28370
IP address blocks:        189.84.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:31:d5:a9:83:85:f7:a0:f4:5a:61:49:fd:89:45:b0:6a:e1:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:42:55 2025 GMT
            Not After : Jul 22 22:47:55 2026 GMT
        Subject: CN=E90C979F42475BCCA3F04777309E9082AC463C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:85:f3:92:d7:ce:b6:8d:df:7e:fc:5b:e0:
                    11:7c:42:ef:c6:78:2d:24:26:b1:d7:57:06:de:d5:
                    c0:95:3d:2f:f2:33:2e:d3:c0:36:c6:e1:1f:da:0b:
                    36:90:cb:cc:29:f5:b7:ef:9f:d9:d6:65:45:51:e7:
                    bb:df:01:b0:4c:67:5d:a1:da:c5:9f:c0:da:a2:d8:
                    73:8f:a7:0c:10:71:71:ae:a3:aa:1f:91:ae:58:5b:
                    d2:83:a1:97:56:1b:68:6c:26:4e:51:b3:ad:b4:f2:
                    77:c2:a0:64:1d:b5:4e:d7:b9:a3:10:9e:98:47:7a:
                    d6:a1:6c:cb:ee:ba:dd:59:48:09:3c:68:f2:4d:ff:
                    7e:d9:68:68:19:a0:2a:0a:1e:70:a0:7d:21:8f:94:
                    23:39:3d:d1:b2:dc:de:7f:97:d6:0b:ac:5d:07:dc:
                    8d:d8:57:15:c7:10:5a:cd:e1:c8:71:9a:5e:f9:f9:
                    b2:de:e4:93:4d:d3:df:c5:6b:b2:4c:62:46:c9:fe:
                    23:76:79:d8:60:9a:6f:c0:39:04:a4:78:eb:d1:dd:
                    75:f8:59:da:48:8b:fe:b2:fc:c5:8e:be:a7:ca:98:
                    fe:f7:d3:50:79:c1:08:dd:5f:42:19:d2:d8:6c:27:
                    5f:ea:58:5b:15:75:57:62:96:08:98:2e:cd:4d:c1:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:97:9F:42:47:5B:CC:A3:F0:47:77:30:9E:90:82:AC:46:3C:39
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:0a:eb:13:37:0c:94:3d:82:23:c2:49:ff:27:90:42:a6:db:
         5d:5a:9c:06:c9:ea:fa:93:7c:a6:4c:4a:29:b1:20:2f:09:a9:
         03:e8:df:d4:87:08:ed:db:e6:40:89:52:55:88:e6:36:57:17:
         b9:e6:37:38:dd:76:f8:9e:8d:c0:47:1c:16:38:7c:54:08:56:
         db:95:8c:62:b1:05:a4:55:e7:bb:39:dd:a1:05:47:a4:0a:75:
         28:be:b1:11:03:3b:9d:ec:71:63:f2:e4:d9:56:39:b9:77:d7:
         c2:8e:e1:e1:bf:55:3b:a2:4a:75:c5:a5:bc:f2:de:78:c8:bb:
         bc:43:31:8e:80:e5:76:45:d0:90:73:6e:e1:d6:eb:ff:36:0c:
         b6:ab:a6:a8:6e:97:56:61:ef:fc:cc:ab:a0:9a:60:6f:ff:e6:
         08:cb:55:b4:fe:57:fb:86:04:1e:59:bf:a8:72:d5:46:99:87:
         12:3a:0f:5e:c1:40:3a:1e:5a:c6:5b:82:8f:b4:01:ee:0b:62:
         02:91:33:d2:35:25:3e:96:fc:fb:65:04:e9:49:7b:59:c3:37:
         11:01:65:fa:03:e7:62:08:1f:71:3c:58:c4:47:04:9a:81:b9:
         92:15:01:cb:91:a0:58:f9:52:1b:36:e6:86:51:3e:a2:98:59:
         0f:0c:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:37 2025 by rpki-client