Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32332d3233203d3e203238333730.roa
File:                     3138372e34352e3134382e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          9A6G1QjfNhk6KazcAEDWZHvz/ZYI6z9gCbtAULs9NmQ=
Subject key identifier:   5B:D4:4C:8C:22:17:7F:84:A8:19:49:FB:FE:93:43:F1:B0:7B:D1:DD
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       2E4653186867D1C97B4383B991D123BC2D612A5C
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:23 +0000
ROA not before:           Wed 24 Jun 2026 21:58:23 +0000
ROA not after:            Wed 23 Jun 2027 22:03:23 +0000
asID:                     28370
IP address blocks:        187.45.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:46:53:18:68:67:d1:c9:7b:43:83:b9:91:d1:23:bc:2d:61:2a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:23 2026 GMT
            Not After : Jun 23 22:03:23 2027 GMT
        Subject: CN=5BD44C8C22177F84A81949FBFE9343F1B07BD1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:0e:5b:45:c5:ea:ea:18:2f:fa:a3:03:42:
                    a2:b0:33:bf:4a:9b:c9:22:47:1d:9d:8c:e3:e2:ce:
                    d4:b2:86:48:e9:bf:c2:8f:3b:c4:7a:a4:cc:f6:b7:
                    e1:1b:4e:21:62:8f:a4:2f:3a:b5:b3:12:e9:e8:0c:
                    ca:0e:c4:35:ae:9c:52:a5:a5:e6:93:c9:f8:07:10:
                    bc:f3:7a:15:34:ab:6c:47:41:dd:3a:11:f1:10:a5:
                    d2:e3:d2:95:7c:93:9a:5d:e1:d2:02:b3:d8:2e:dd:
                    66:e9:d0:ef:84:b6:7c:1f:87:bc:44:fb:aa:3e:21:
                    38:19:72:02:f8:92:f0:27:34:6a:1c:2f:af:c2:d2:
                    a5:6f:be:01:ca:c6:f9:1d:d5:4f:54:a5:6c:75:72:
                    5d:dd:75:c7:33:37:4c:9f:f6:f8:54:7d:66:0f:e6:
                    9e:3a:ee:d7:99:26:04:5b:81:15:b6:e2:81:e0:6b:
                    39:0f:d3:49:80:16:f7:e2:c8:7d:b7:8b:91:48:d7:
                    66:b0:4c:ad:19:a4:1d:9a:61:8b:5e:02:f7:31:c4:
                    dc:6c:e6:98:8d:cf:67:47:80:de:0a:8e:62:6d:3b:
                    55:09:21:30:7f:90:1b:ed:bd:87:73:9a:1c:ac:81:
                    f7:99:33:32:a6:1f:00:d7:c1:f2:19:d0:d2:2a:3c:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:4C:8C:22:17:7F:84:A8:19:49:FB:FE:93:43:F1:B0:7B:D1:DD
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:58:59:29:59:ec:5a:be:a6:48:23:0c:fb:61:7a:0a:23:36:
         65:e4:99:1c:81:1e:ea:e7:02:77:bd:f4:bb:77:a3:fa:7d:26:
         de:45:2a:7b:88:8d:f8:a4:20:e1:2a:13:1a:f7:5a:d7:36:c3:
         01:70:5d:d9:54:33:7b:3e:04:dd:38:95:5d:ac:7c:74:10:5e:
         26:bb:58:c1:42:a4:88:36:00:70:09:d3:a5:60:e5:10:5d:72:
         12:f8:e0:5f:96:b7:f0:d7:7a:bb:8a:a6:ee:2b:b7:91:19:c6:
         87:b8:db:25:ff:9a:04:92:c3:c1:41:3d:7c:4d:82:4b:8a:5a:
         58:b3:84:d9:00:41:bc:aa:83:a9:a8:9c:ce:56:07:a1:78:ae:
         76:92:18:ec:ec:21:2d:54:7c:7c:3c:4a:83:92:16:66:87:ff:
         ab:c8:5b:69:7b:42:84:57:77:02:6a:e4:fe:e7:79:44:24:cc:
         b4:37:9d:93:d0:85:69:61:b9:5e:40:c7:1c:aa:7b:2d:04:b9:
         4a:b3:25:61:20:54:a9:2a:95:27:e2:dc:21:98:0c:55:75:f9:
         f8:88:96:2b:65:b9:df:43:e2:f8:ca:10:ba:cb:11:75:1a:e0:
         f2:99:1f:5c:3c:1a:f7:10:f0:e1:c0:58:b4:b5:96:49:d6:7e:
         6d:82:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:09 2026 by rpki-client