Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135382e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          rcS08P1sPtNQKmgxMOZmKYJekj45R40t2gQK2ZU46xw=
Subject key identifier:   3E:19:6A:8F:5F:25:E8:95:5B:E5:9C:B6:76:64:2C:61:D3:53:40:02
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       4A40F29A6E54A381569800BC253FE29F8907658D
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 22:55:16 +0000
ROA not before:           Wed 23 Jul 2025 22:50:16 +0000
ROA not after:            Wed 22 Jul 2026 22:55:16 +0000
asID:                     28370
IP address blocks:        189.84.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 09:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:40:f2:9a:6e:54:a3:81:56:98:00:bc:25:3f:e2:9f:89:07:65:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:50:16 2025 GMT
            Not After : Jul 22 22:55:16 2026 GMT
        Subject: CN=3E196A8F5F25E8955BE59CB676642C61D3534002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:56:dc:f1:8c:6e:82:b6:81:f1:88:6d:a7:
                    60:e6:20:2d:a8:3e:76:98:db:5e:27:93:86:84:fc:
                    ba:65:3c:3f:0f:43:a6:f9:df:08:2a:7e:35:5a:d1:
                    3f:2f:e3:6d:c8:87:59:3b:70:09:97:e6:96:62:27:
                    41:73:49:80:81:ff:a2:74:8a:42:26:64:f8:35:f4:
                    04:c4:e3:61:08:cd:72:ee:74:20:54:3d:9d:ab:51:
                    53:c1:f6:c3:2d:24:18:2b:7a:a9:03:e6:2e:c0:7d:
                    dc:bd:32:98:d2:ba:52:33:28:e4:1f:ec:37:22:49:
                    8f:5a:b8:24:8a:cc:18:37:a4:38:91:4e:7f:35:de:
                    a0:d5:d3:56:95:f7:28:91:f2:eb:5d:10:a5:84:03:
                    5a:21:e5:3f:6e:95:65:e4:0b:59:a5:1b:7c:1b:52:
                    b5:41:af:98:d3:37:60:cb:2d:61:4b:71:07:27:87:
                    1f:57:22:88:c5:c1:00:6f:ad:7f:84:6e:40:8a:f4:
                    95:b8:45:a6:56:99:e0:e4:1e:e0:82:28:14:cc:03:
                    b7:48:7e:aa:a5:ee:b7:18:fc:e2:76:da:2b:22:af:
                    82:cc:41:40:a6:52:4f:91:c6:05:c2:7f:50:72:ab:
                    0e:d9:96:5c:7d:0f:1c:df:b9:5d:de:f2:f3:5b:e3:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:6A:8F:5F:25:E8:95:5B:E5:9C:B6:76:64:2C:61:D3:53:40:02
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:99:6b:a6:b1:f9:62:c0:d1:9e:34:16:26:b8:25:8a:c3:
         52:95:52:2a:3b:9f:06:11:3c:a8:77:af:fd:c5:24:5b:59:58:
         ae:ea:ab:d9:9a:35:0c:e7:7b:a7:c8:ab:59:20:d6:d8:2b:4d:
         7e:b3:b9:07:ce:ae:e4:7f:a5:c2:7a:a7:8c:f4:44:29:a1:b2:
         b1:ec:b5:8f:d4:d6:c0:7f:81:b0:8c:82:da:24:cd:5c:aa:c5:
         17:cb:c6:20:8f:f7:05:42:bc:00:22:7d:0e:9f:4a:a6:15:94:
         bf:6b:34:19:55:5a:ff:7b:7e:1e:03:42:23:4e:b6:b4:6b:76:
         20:e9:01:fd:2f:29:57:6d:13:98:3e:70:4f:0a:af:ea:c5:0e:
         ab:16:f6:e7:dc:d4:6a:54:d9:3d:90:62:e4:de:09:69:fc:12:
         7e:90:10:1d:74:e3:3b:08:8e:6d:2f:2c:d8:4e:80:d0:50:1d:
         04:34:7b:7c:be:a2:f2:af:68:f8:30:60:28:be:27:9f:b7:fc:
         df:13:45:48:ce:46:aa:65:23:01:86:e0:db:13:12:b4:19:47:
         94:1b:37:57:b3:36:70:69:31:63:fc:e3:ec:a0:cb:23:90:b6:
         ff:1e:6d:3d:27:a9:63:d5:5e:b4:12:ae:5e:a1:2b:ef:dd:b0:
         72:ad:d1:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSkDymm5Uo4FWmAC8JT/in4kHZY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA3MjMyMjUwMTZaFw0yNjA3MjIyMjU1MTZaMDMxMTAvBgNV
BAMTKDNFMTk2QThGNUYyNUU4OTU1QkU1OUNCNjc2NjQyQzYxRDM1MzQwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2Vbc8YxugraB8Yhtp2DmIC2o
PnaY214nk4aE/LplPD8PQ6b53wgqfjVa0T8v423Ih1k7cAmX5pZiJ0FzSYCB/6J0
ikImZPg19ATE42EIzXLudCBUPZ2rUVPB9sMtJBgreqkD5i7Afdy9MpjSulIzKOQf
7DciSY9auCSKzBg3pDiRTn813qDV01aV9yiR8utdEKWEA1oh5T9ulWXkC1mlG3wb
UrVBr5jTN2DLLWFLcQcnhx9XIojFwQBvrX+EbkCK9JW4RaZWmeDkHuCCKBTMA7dI
fqql7rcY/OJ22isir4LMQUCmUk+RxgXCf1Byqw7Zllx9DxzfuV3e8vNb41uTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPhlqj18l6JVb5Zy2dmQsYdNTQAIwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM5MmUzODM0MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVSeMA0GCSqGSIb3DQEBCwUAA4IBAQCPBZlrprH5
YsDRnjQWJrglisNSlVIqO58GETyod6/9xSRbWViu6qvZmjUM53unyKtZINbYK01+
s7kHzq7kf6XCeqeM9EQpobKx7LWP1NbAf4GwjILaJM1cqsUXy8Ygj/cFQrwAIn0O
n0qmFZS/azQZVVr/e34eA0IjTra0a3Yg6QH9LylXbROYPnBPCq/qxQ6rFvbn3NRq
VNk9kGLk3glp/BJ+kBAddOM7CI5tLyzYToDQUB0ENHt8vqLyr2j4MGAovieft/zf
E0VIzkaqZSMBhuDbExK0GUeUGzdXszZwaTFj/OPsoMsjkLb/Hm09J6lj1V60Eq5e
oSvv3bByrdEO
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:14:43 2025 by rpki-client