Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135302e302f32332d3233203d3e203238333730.roa
File:                     3138372e34352e3135302e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          7BAi6WPrq2CZvkA14f10SJAYbBYsahStwfDgVdW5cBk=
Subject key identifier:   46:EA:6B:B8:32:ED:C1:AF:C3:BD:B0:04:2A:FD:61:79:76:C9:9D:84
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       4ADE1F9B47C3A6969C92F6A26F0FC850FD363596
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135302e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:23 +0000
ROA not before:           Wed 24 Jun 2026 21:58:23 +0000
ROA not after:            Wed 23 Jun 2027 22:03:23 +0000
asID:                     28370
IP address blocks:        187.45.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:1f:9b:47:c3:a6:96:9c:92:f6:a2:6f:0f:c8:50:fd:36:35:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:23 2026 GMT
            Not After : Jun 23 22:03:23 2027 GMT
        Subject: CN=46EA6BB832EDC1AFC3BDB0042AFD617976C99D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:72:e3:1c:d0:b4:ea:fa:b3:01:3c:4f:25:e8:
                    87:07:64:09:ec:e8:fb:03:6d:ed:b1:33:f9:1d:8e:
                    36:ed:7d:da:a4:d6:9b:af:95:f7:1c:b9:cb:90:5b:
                    63:48:ca:8b:58:a1:b1:1d:a4:1e:a8:d3:3b:d4:d9:
                    79:aa:46:05:89:1a:c5:dd:35:eb:27:2a:e9:48:da:
                    29:49:35:52:a8:f6:9e:cf:3c:3d:da:c6:22:79:78:
                    4d:7d:dc:14:3d:3c:7f:54:08:4b:8d:fc:ca:88:66:
                    99:68:0a:09:4e:5a:31:38:fe:50:fb:6a:33:78:09:
                    fb:02:30:dc:86:ce:ef:8d:09:57:b1:3c:80:25:33:
                    f9:97:12:46:fd:dc:ae:8e:40:7b:72:83:fa:39:ae:
                    3f:c9:ba:5a:81:23:41:ce:0f:b4:d7:b7:a2:a1:31:
                    ae:22:7b:32:a0:ef:eb:40:ae:6d:8b:3a:c4:59:e9:
                    6e:1e:89:4e:cb:09:bb:1e:f2:9f:cb:bc:37:e2:ea:
                    a7:4b:98:4c:94:14:b8:f1:46:1e:50:ee:51:82:b8:
                    06:8a:aa:09:96:f6:7b:63:cd:15:27:3e:5c:a0:04:
                    07:85:9f:53:52:56:56:9a:8c:97:c6:e8:f8:e6:ab:
                    72:da:8a:c0:d5:49:71:35:c5:7b:bf:8c:e3:45:cd:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EA:6B:B8:32:ED:C1:AF:C3:BD:B0:04:2A:FD:61:79:76:C9:9D:84
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135302e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:98:d7:cb:5d:00:7b:b6:cb:59:8a:a3:e8:51:e4:83:5c:90:
         78:df:60:95:2d:fb:38:25:56:33:c8:f3:c4:8c:5a:24:b3:64:
         35:19:e7:83:f5:93:f5:9d:98:c8:98:00:37:87:5e:2f:fe:43:
         7b:da:80:97:32:f7:bf:86:c6:33:93:49:4c:2f:05:dc:ad:4e:
         ac:33:b3:66:36:6b:8c:54:7b:4d:5c:93:c1:7a:b7:42:86:50:
         b0:44:77:e4:ba:8c:9e:2f:17:8b:9d:e9:66:4a:8e:7a:28:2f:
         79:be:bc:e7:85:13:5e:26:bc:db:b1:88:7b:7d:87:32:04:30:
         39:5d:07:f6:9f:67:a9:01:ee:19:b6:0a:27:66:60:93:1d:eb:
         c3:9d:01:b5:d0:96:2c:dd:96:0e:8e:4b:19:ac:26:cd:27:f7:
         ab:22:db:ec:55:70:5e:2f:7f:90:da:b1:b1:33:6d:42:d2:30:
         05:74:87:d3:85:cf:b8:21:0e:b4:e4:07:0d:17:b7:26:a1:61:
         8e:56:75:12:65:6c:32:79:ac:b0:30:86:3f:a6:f1:36:9e:4c:
         80:0f:cd:b1:17:4d:a0:03:52:34:95:97:1c:be:e7:c4:7b:af:
         35:bd:fc:5d:97:65:4f:e1:b7:12:c6:84:c1:f3:18:d1:48:7a:
         53:a4:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:10 2026 by rpki-client