Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135362e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          fCB4qcnxfiZ2XqUTnYG5gnDXQ46z4fZylPXNv1/5lqE=
Subject key identifier:   C2:50:6E:CA:24:85:68:59:8D:63:9E:3A:C7:46:7E:43:67:A1:DB:1F
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       4143DA9BFED7BFB8AE9814421581F3114BCFA75B
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:54:42 +0000
ROA not before:           Wed 23 Jul 2025 22:49:42 +0000
ROA not after:            Wed 22 Jul 2026 22:54:42 +0000
asID:                     28370
IP address blocks:        189.84.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:da:9b:fe:d7:bf:b8:ae:98:14:42:15:81:f3:11:4b:cf:a7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:49:42 2025 GMT
            Not After : Jul 22 22:54:42 2026 GMT
        Subject: CN=C2506ECA248568598D639E3AC7467E4367A1DB1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:41:20:37:a6:e7:d3:c7:31:03:bb:8a:b8:
                    b8:e9:6c:49:60:a8:d0:79:e6:3a:1e:e3:48:71:8c:
                    1e:fc:dd:a7:7f:27:d8:41:34:7f:19:f3:d3:78:11:
                    cf:db:55:0f:3a:0c:45:2f:7a:46:7d:2e:e5:31:c0:
                    b1:ea:20:0e:a1:7a:9a:76:5a:b6:99:54:34:a4:6e:
                    cd:78:b3:ab:31:81:24:f5:98:a2:7b:83:b1:e5:06:
                    b3:e1:3d:a5:bc:cb:2d:94:d8:16:1c:ec:3c:14:d1:
                    3a:1d:0d:19:ce:6a:e4:f8:2e:04:17:0a:fb:c2:ea:
                    76:22:77:29:7a:41:39:02:25:8b:52:24:52:79:73:
                    1b:14:da:6c:a0:0b:b4:82:e3:96:3f:46:38:50:7e:
                    2e:4f:0a:fa:60:ff:06:cf:84:29:ff:58:4f:e7:dd:
                    b3:5d:2a:13:68:8a:43:c0:b5:ac:07:87:ce:29:94:
                    b2:64:7b:b4:a4:13:7a:75:d2:65:3f:4c:cd:af:07:
                    ae:5d:c4:f0:cf:03:9a:a2:86:9d:da:9f:02:2c:49:
                    26:f9:7d:f0:5f:45:d8:6b:8d:5f:4e:1d:26:a6:53:
                    25:96:1e:5b:c9:7b:8f:6c:26:bd:d5:9b:54:74:0b:
                    ae:83:c4:ea:c2:cb:86:f8:2c:48:67:32:5a:45:7a:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:50:6E:CA:24:85:68:59:8D:63:9E:3A:C7:46:7E:43:67:A1:DB:1F
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:07:20:ce:fc:ba:9a:bf:10:4d:ec:16:39:99:38:ad:c6:
         13:52:4c:79:23:58:92:22:27:d4:3f:2b:b8:2c:5b:ea:02:7f:
         d0:25:b9:92:6e:25:fa:76:c9:55:cf:86:1f:06:16:1b:dd:5d:
         ec:ab:59:1f:37:cd:7e:04:7a:46:37:e9:db:a0:5e:d9:6c:e7:
         61:f5:da:ee:1d:65:0f:9e:b5:4e:b7:8b:b7:05:eb:7c:18:ac:
         ee:36:9d:a4:c9:39:c5:55:b0:89:9c:f7:7d:f8:af:b2:93:21:
         8c:27:93:38:1c:71:30:f9:35:e3:7a:07:9f:65:9f:be:30:e9:
         1f:e6:71:41:79:d4:ea:e0:6b:a5:db:4d:0f:e6:28:96:82:44:
         8a:87:63:89:96:1f:83:4b:fd:bd:36:ed:c1:7a:6d:22:86:18:
         11:f6:2f:77:27:4a:24:27:9b:d1:cd:0a:a5:f4:a6:08:26:cd:
         63:a4:39:3d:bb:6e:8c:22:e8:5a:58:9f:ae:ca:6c:78:c6:0f:
         e8:8a:21:56:cb:d4:6f:81:37:66:44:a0:9a:c1:c3:ad:3c:4c:
         55:bd:b9:04:6a:ff:85:bd:b4:69:c6:75:11:02:3d:08:07:90:
         35:2d:b2:44:5a:bd:73:bf:ed:ab:89:91:b8:a2:4b:09:40:fc:
         d2:73:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:19 2025 by rpki-client