Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135372e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135372e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          ARO2rk0ZXzLa5cEmSENBvkWHEY8J/mYtxG7Ebg/pNyg=
Subject key identifier:   35:7C:BE:F9:DB:9A:66:08:8F:06:58:D8:AA:69:CF:1C:4D:50:E1:78
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       652F1C7169D6EC9791AA5D999192582A1B8459BE
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135372e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:54:59 +0000
ROA not before:           Wed 23 Jul 2025 22:49:59 +0000
ROA not after:            Wed 22 Jul 2026 22:54:59 +0000
asID:                     28370
IP address blocks:        189.84.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2f:1c:71:69:d6:ec:97:91:aa:5d:99:91:92:58:2a:1b:84:59:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:49:59 2025 GMT
            Not After : Jul 22 22:54:59 2026 GMT
        Subject: CN=357CBEF9DB9A66088F0658D8AA69CF1C4D50E178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:0c:c6:6b:d5:78:87:89:e4:b6:f4:83:eb:
                    29:d6:60:e6:6f:7e:a2:30:71:03:85:16:c3:5f:f9:
                    f4:95:6d:d8:81:94:24:ac:15:73:7c:08:6b:dc:c7:
                    32:46:b7:67:05:fc:3f:e9:94:11:b4:7a:d4:20:97:
                    f3:e5:02:b0:2b:9b:8a:e8:58:96:2a:35:f0:37:c0:
                    a0:b7:7d:d3:f4:23:3b:a5:30:c1:cc:b2:0a:96:d6:
                    06:37:f1:3f:8b:1a:af:a2:27:68:a4:9a:d5:40:74:
                    07:06:16:f7:19:2c:16:0a:f3:c4:a0:f8:1a:7a:4d:
                    6f:3e:3d:48:d0:22:17:2c:bf:dd:d6:8c:4f:21:ed:
                    74:1c:36:45:30:0d:c4:47:fc:4e:ab:66:70:49:82:
                    22:55:21:49:ba:a4:db:bd:cc:b1:0e:20:79:a2:05:
                    fe:44:24:a5:ae:e3:af:d8:4d:22:74:d6:60:1d:42:
                    25:ac:44:17:b5:a0:72:2d:33:34:e5:9a:86:08:3c:
                    4d:49:a8:a9:f9:a2:f9:a0:ce:08:8a:98:4d:72:8f:
                    22:14:36:21:eb:47:41:93:5e:73:13:c4:5c:c6:9a:
                    b0:5b:a6:3d:a7:51:7c:f7:f2:d4:32:1e:f3:13:01:
                    87:8e:80:0d:31:52:64:97:c7:97:0b:47:63:d8:41:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7C:BE:F9:DB:9A:66:08:8F:06:58:D8:AA:69:CF:1C:4D:50:E1:78
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135372e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:7e:1a:c0:3e:51:c3:04:a9:ad:f9:95:ca:81:3e:01:b4:87:
         0e:60:73:0d:e2:75:e5:25:38:0a:59:c9:9a:93:9a:9b:97:ed:
         59:12:07:0c:2f:04:e0:9b:ef:95:ad:b4:a9:04:03:a4:97:93:
         9a:1d:a1:41:63:b8:27:3d:25:d1:d8:4e:fe:2b:77:93:56:8f:
         62:dc:37:f8:31:3e:04:83:8c:ec:22:5e:77:b9:20:d9:bc:5c:
         d4:b1:16:21:1f:72:85:48:7c:13:c2:1f:57:3b:0e:f1:85:29:
         e1:14:48:c5:63:37:9f:87:1f:85:d2:c2:a1:11:3a:d2:56:ee:
         84:39:af:bf:9f:6f:91:94:bd:aa:a1:c7:ec:06:01:f1:58:03:
         3f:59:50:e7:75:14:11:36:b8:a9:72:a8:e7:1c:bd:5d:d6:cf:
         2f:fc:36:98:86:38:3c:b0:65:89:fe:3e:b1:63:72:cb:6b:ef:
         24:71:b8:f4:fe:f2:25:ba:a9:2c:a0:59:31:29:4c:3e:0b:6b:
         05:1b:3a:07:ab:1f:b9:eb:f1:10:1c:b5:fa:26:8e:2e:42:45:
         c1:51:66:62:86:52:2f:99:bb:1f:8c:ff:be:60:16:01:0c:39:
         9e:63:0e:80:4e:34:21:6b:16:36:42:46:63:d8:28:be:5c:1d:
         85:22:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:00:48 2025 by rpki-client