Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135302e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3135302e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          A9TEkbzZ5LRvj5J8WZ3H2H7o2+7I/jEFb9gIrUOCjJk=
Subject key identifier:   59:B7:DC:20:52:86:ED:3F:F7:94:02:2D:0D:32:C9:2A:74:00:E3:E8
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       4B1CF3FEABA3157942609107D2B2D21296FABC7C
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135302e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:22 +0000
ROA not before:           Wed 24 Jun 2026 21:58:22 +0000
ROA not after:            Wed 23 Jun 2027 22:03:22 +0000
asID:                     28370
IP address blocks:        187.45.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1c:f3:fe:ab:a3:15:79:42:60:91:07:d2:b2:d2:12:96:fa:bc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:22 2026 GMT
            Not After : Jun 23 22:03:22 2027 GMT
        Subject: CN=59B7DC205286ED3FF794022D0D32C92A7400E3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:83:db:cf:71:74:b8:8b:93:d7:0f:6f:0d:
                    b7:cd:4a:d0:dc:a9:4b:f7:c8:fe:80:a2:2a:99:2d:
                    90:d0:64:92:b7:58:94:ff:97:21:a9:8b:e7:da:5b:
                    70:3e:4a:dd:99:f6:03:ad:c0:f5:b5:48:43:a2:59:
                    10:11:b0:7e:8a:64:37:0e:a7:af:fc:53:01:87:8f:
                    73:47:ca:b5:e3:0d:ec:9b:5b:57:27:1f:13:e8:20:
                    af:ed:27:30:8f:79:a1:5b:37:77:d1:85:dd:ae:ad:
                    c9:cd:bd:9b:a2:1a:25:2d:52:37:72:35:60:56:06:
                    6f:d8:b3:e5:87:4b:a4:50:29:a5:4b:d3:91:84:c0:
                    f6:24:34:dc:1f:4f:4d:c0:f8:ca:d6:40:fc:c2:46:
                    22:0a:53:2d:87:96:ce:99:60:44:2d:d8:e7:5e:e5:
                    9c:5d:80:ba:19:75:da:06:56:76:0c:42:7d:66:af:
                    e9:dd:36:f7:a4:ed:a2:71:b8:ee:ec:d6:e1:b2:4a:
                    e2:0e:d6:fa:f3:20:ed:b2:6e:8d:89:fe:90:1f:3b:
                    f6:09:cd:9f:00:77:f9:b9:35:ac:34:16:cd:b9:d7:
                    55:b9:53:0a:96:f4:d0:0c:df:6d:2d:30:99:75:f9:
                    21:d9:17:57:5d:7c:5b:1b:79:6d:fa:a2:2a:82:23:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B7:DC:20:52:86:ED:3F:F7:94:02:2D:0D:32:C9:2A:74:00:E3:E8
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135302e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:29:94:74:5f:9e:e9:51:e1:51:1b:ac:fd:ed:68:f8:03:c0:
         db:3c:73:bd:ee:75:ed:91:c4:e0:db:d6:31:38:43:a9:6e:97:
         88:b9:e0:ce:cd:db:6d:ad:af:26:dd:c1:a0:18:bd:0e:ae:3a:
         88:41:8e:81:d1:ca:06:72:66:c6:7d:e6:b2:3a:13:ca:98:95:
         52:1c:e2:7a:ae:2d:d7:0b:ac:1c:3e:bf:a4:6c:f3:80:00:fc:
         44:4b:6b:96:b5:54:05:5e:0d:3c:a8:54:bb:fb:21:c2:1a:bd:
         96:67:43:92:67:32:a3:70:62:35:77:d7:c9:f6:ee:e6:84:66:
         74:89:7c:9f:d7:8a:4f:8b:34:26:6f:11:f0:11:ab:6d:a1:5a:
         31:b5:f8:70:ae:6b:6a:10:8b:66:e9:d7:c1:55:c4:04:ad:cf:
         6a:89:98:bc:03:46:62:76:a3:6a:9d:8d:aa:4f:f1:4b:b0:00:
         84:51:5b:70:f0:ee:04:ee:52:4e:74:7e:44:71:e0:a2:82:8d:
         8d:04:64:34:56:30:20:c9:42:7c:2e:e1:54:7d:46:e0:af:52:
         00:a7:2e:da:c5:66:df:f3:ea:f8:e7:ff:4d:9e:55:17:82:85:
         9b:44:e2:e2:01:51:d6:0c:6e:db:49:46:4e:d4:99:fc:5f:b4:
         23:29:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:28 2026 by rpki-client