Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134352e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3134352e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          uuWlADb11TBIqbUg/E4hUuG3u9Vdxe2cV+uu1gTgk1s=
Subject key identifier:   3C:C0:C1:F1:BE:87:3E:AD:CB:DC:91:47:FF:55:81:D7:60:38:A1:05
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       51168A8383B387FD781A112FA03FF43106CEA178
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134352e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:23 +0000
ROA not before:           Wed 24 Jun 2026 21:58:23 +0000
ROA not after:            Wed 23 Jun 2027 22:03:23 +0000
asID:                     28370
IP address blocks:        187.45.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:16:8a:83:83:b3:87:fd:78:1a:11:2f:a0:3f:f4:31:06:ce:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:23 2026 GMT
            Not After : Jun 23 22:03:23 2027 GMT
        Subject: CN=3CC0C1F1BE873EADCBDC9147FF5581D76038A105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:85:30:6e:e2:c1:49:fd:82:9b:1b:de:cc:
                    9e:59:97:9d:e2:e9:b7:3c:89:6b:3b:19:06:87:b7:
                    ec:f2:9f:d6:0f:cc:e3:29:8f:2e:77:a1:8e:a5:82:
                    12:fd:8c:bc:2c:ba:c7:77:45:bd:6b:48:7e:6e:4a:
                    c8:03:b3:98:b2:91:6b:43:85:7a:68:29:99:b3:dd:
                    84:6f:89:3b:c1:2c:89:12:dd:2c:2f:45:13:a0:14:
                    ad:a7:8d:29:ad:8d:e1:25:19:63:bb:3a:be:45:e3:
                    2f:53:aa:a5:7b:bf:8f:a5:62:af:16:0f:99:e4:56:
                    86:2d:f5:1d:fe:af:56:51:ce:87:36:75:74:f5:aa:
                    b2:8c:ce:19:62:23:b4:64:7f:f1:ad:36:2d:c0:ad:
                    db:8c:cf:1a:1f:60:2e:cf:2b:12:b4:45:4b:29:45:
                    57:78:69:ad:44:85:71:6e:a9:4d:9a:23:52:a6:87:
                    eb:31:bc:f6:b4:3d:8b:3c:30:9f:11:4e:4f:3b:5e:
                    d5:bb:0d:93:63:3a:83:62:f9:13:e4:ab:1b:14:ee:
                    2a:71:36:49:13:e2:08:c4:ba:49:cf:af:38:fe:11:
                    c9:35:1c:85:0e:5a:02:6a:f5:1c:51:2a:2f:47:6e:
                    53:36:a3:b0:41:26:47:d6:df:66:8d:c3:1d:c8:90:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C0:C1:F1:BE:87:3E:AD:CB:DC:91:47:FF:55:81:D7:60:38:A1:05
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134352e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:37:13:95:26:4d:12:05:68:7e:c3:73:fa:8a:13:0a:bc:
         01:53:8a:d2:8d:56:83:d0:90:88:43:aa:2b:05:ba:c7:5e:d5:
         35:cc:44:5e:d2:96:f6:c6:bb:fa:5b:08:00:b7:3a:9c:3a:3b:
         2b:08:52:95:6e:33:7a:20:ea:f5:db:04:0c:fb:d0:4b:70:4e:
         04:63:17:1b:df:3e:cd:8f:2d:a6:2d:31:fc:d8:66:e8:73:9a:
         11:c2:96:e5:0a:ab:b3:7e:ca:8b:71:9a:dd:bb:67:1d:08:aa:
         bd:2d:82:ab:1e:f2:8f:d9:d2:bc:51:5e:8f:8f:81:28:a2:57:
         1f:c2:33:97:a0:85:66:e2:8a:93:7c:90:38:b6:38:b0:f9:ad:
         6c:46:ce:e4:a8:c3:8a:7b:54:dd:82:b1:fd:e9:0c:b5:9e:28:
         cf:d2:eb:32:09:4b:19:97:4d:af:1a:cd:9a:b5:88:1c:13:e4:
         81:a3:20:da:41:0d:e5:a8:34:3d:3d:ec:5f:2d:00:21:77:0b:
         9a:9d:a5:55:5d:90:bb:90:fc:a1:37:27:20:0e:ad:75:33:b3:
         5a:ea:25:94:b9:8b:94:1f:93:aa:bd:ac:a8:a3:dc:9e:5e:9a:
         18:1f:57:fc:a7:eb:9c:99:ac:17:df:22:e5:6f:3d:8b:c2:a0:
         62:d1:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:05:57 2026 by rpki-client