Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3134362e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          N/tg5Qs3lJNoWdoKlEJ1tmFHafeohjcCSUFpnZtxjMc=
Subject key identifier:   29:1D:39:E5:77:87:3B:7B:48:62:D6:7F:FC:CC:12:4F:CB:C2:A0:47
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       1D496731375D94DF759AF209FFC09015A5EDF58B
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:24 +0000
ROA not before:           Wed 24 Jun 2026 21:58:24 +0000
ROA not after:            Wed 23 Jun 2027 22:03:24 +0000
asID:                     28370
IP address blocks:        187.45.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:49:67:31:37:5d:94:df:75:9a:f2:09:ff:c0:90:15:a5:ed:f5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:24 2026 GMT
            Not After : Jun 23 22:03:24 2027 GMT
        Subject: CN=291D39E577873B7B4862D67FFCCC124FCBC2A047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:a1:29:87:a3:60:4e:6a:7c:44:be:69:a2:
                    66:04:04:02:20:f2:fa:e9:fe:81:48:34:bb:87:dd:
                    81:03:ec:2f:85:0b:01:3b:aa:29:cf:29:da:cd:3f:
                    c5:64:65:13:12:07:55:3a:f6:c7:f3:dc:8e:fe:7d:
                    32:db:0d:82:d9:95:d0:ba:f1:df:d7:57:e6:2a:8a:
                    05:7a:47:96:00:50:b4:f0:21:5b:90:f9:8b:29:37:
                    a2:97:ca:7c:4b:97:9c:2e:33:21:2e:25:20:91:7f:
                    30:3b:57:63:7b:e4:36:e9:0e:0f:91:12:e2:8f:8d:
                    e4:6a:ae:a4:21:0d:15:89:9f:88:28:09:1e:27:eb:
                    53:88:2f:36:de:aa:ab:e9:64:a1:cf:f5:a2:1c:34:
                    28:75:04:61:63:31:aa:f4:8b:93:db:27:f8:a1:fc:
                    c0:a7:e6:5c:21:8b:d8:06:f9:0e:b2:00:e5:e7:b7:
                    73:d2:16:6d:ad:b5:2b:c2:11:b7:f3:9f:3d:c2:73:
                    c6:a7:1e:d3:e7:14:63:93:ed:93:a9:b0:ed:8e:8f:
                    43:9c:a3:ff:6b:01:f4:60:76:33:1c:34:e7:90:f3:
                    e3:a5:f4:ee:6e:dd:3a:2c:2f:96:e0:e8:54:a3:17:
                    37:51:e6:85:a2:59:35:22:91:3f:62:9a:cb:f6:1d:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1D:39:E5:77:87:3B:7B:48:62:D6:7F:FC:CC:12:4F:CB:C2:A0:47
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134362e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:a5:51:ce:6e:f7:2c:15:78:fc:1f:9f:66:ed:ac:70:0b:
         b8:fc:5f:49:6d:a0:54:dd:74:ac:45:6b:01:44:b4:41:39:a4:
         03:6b:15:61:8e:c6:26:a2:7d:b0:d8:fb:92:6d:0b:e0:f0:98:
         1d:fd:af:5e:70:05:d2:1a:09:6d:6e:a8:bf:66:93:a7:48:64:
         39:94:e0:e9:3f:0d:da:1c:55:31:1f:72:68:6d:5a:88:bd:77:
         ee:35:00:fd:60:79:2c:bd:5e:60:8c:14:d2:2d:ab:e0:04:23:
         82:45:97:a9:3c:ff:4a:57:5d:d3:a0:c5:8a:26:cf:f2:0f:c1:
         dc:6c:d9:e9:97:4d:c3:ac:77:ba:ab:09:82:b2:b1:e5:b4:03:
         db:6c:54:5b:7b:52:7d:ce:43:38:6a:c5:39:e3:f5:82:c2:74:
         dd:50:85:83:03:46:fe:eb:41:dd:38:8b:56:ed:fe:d3:20:a0:
         3a:70:31:2e:f0:71:e1:b3:bd:e6:e2:35:4c:5a:ed:00:56:97:
         f6:1c:34:a0:05:54:5c:eb:75:5c:b4:5d:11:a1:69:64:07:3a:
         07:89:e5:de:6e:6a:66:e2:8c:d9:65:6e:f4:1e:4e:d1:07:56:
         f8:4d:7b:97:d7:e2:7b:62:ef:e8:8a:80:6d:ac:5d:be:cf:f2:
         66:56:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:29 2026 by rpki-client