Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135322e302f32342d3234203d3e203238333730.roa
File:                     3138372e34352e3135322e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          1WHpZOzV+mEeDoc4tw6Jg3kSRwcmcqBi+BLY+FMDFkI=
Subject key identifier:   AD:B0:EB:E8:A8:06:3F:F3:B7:14:59:37:80:13:21:31:85:B2:22:74
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       091A5CF77FA8BA7511E8EF10E8D9B004EC714FA4
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135322e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:24 +0000
ROA not before:           Wed 24 Jun 2026 21:58:24 +0000
ROA not after:            Wed 23 Jun 2027 22:03:24 +0000
asID:                     28370
IP address blocks:        187.45.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1a:5c:f7:7f:a8:ba:75:11:e8:ef:10:e8:d9:b0:04:ec:71:4f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:24 2026 GMT
            Not After : Jun 23 22:03:24 2027 GMT
        Subject: CN=ADB0EBE8A8063FF3B71459378013213185B22274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:cd:80:18:e0:b2:e4:26:0b:d1:31:cc:8a:
                    22:cb:f3:29:42:88:fd:2b:35:ff:ae:8b:91:ca:32:
                    f2:14:0f:f8:91:20:ac:5c:c1:ab:5f:4b:c8:db:c5:
                    2c:47:8e:da:3a:ae:0d:de:05:47:57:fc:6f:56:7f:
                    cd:a7:1a:63:32:82:cf:5d:2f:e2:ef:0b:c0:39:41:
                    50:c8:11:94:00:ee:93:8c:b7:25:d8:b4:73:15:9c:
                    0a:ca:e1:bc:c0:c3:8b:a4:2a:7d:54:6f:97:69:16:
                    59:e8:1b:88:50:37:bb:62:4b:29:0f:e6:41:09:27:
                    a3:a3:54:cc:68:e0:f1:f3:d1:f0:01:af:07:0b:8d:
                    63:b8:3e:e0:a8:bc:d1:43:76:52:f9:92:56:58:3f:
                    30:ad:ca:cf:cc:b9:43:b0:8b:a6:e5:7e:7b:a8:56:
                    53:5f:fe:fb:b3:63:f4:fa:54:52:79:ef:92:16:0f:
                    e7:ab:4c:73:1d:d1:9d:8c:e2:7b:f1:1d:4e:2e:4a:
                    e5:b5:b2:8b:05:26:d8:f9:98:be:d0:be:66:38:24:
                    79:67:e1:98:25:f7:c2:55:ff:f1:13:a1:b8:50:60:
                    2f:1d:27:6a:cf:b5:d0:b9:75:9e:b9:7f:5b:51:f2:
                    9e:6d:53:96:03:ef:44:70:81:4a:77:be:fd:10:af:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:EB:E8:A8:06:3F:F3:B7:14:59:37:80:13:21:31:85:B2:22:74
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3135322e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:05:ac:e9:e9:22:b5:84:ca:93:cf:87:59:ce:56:fe:f1:94:
         92:d6:42:55:3b:a0:e6:9f:43:ed:0d:4e:20:9a:a8:cc:9b:83:
         29:f3:1b:a1:ec:63:66:f9:09:e7:08:ec:6f:07:20:8e:26:ff:
         d1:e3:fc:dd:65:f3:e9:ff:42:f9:5a:4d:aa:3e:9b:50:8a:51:
         8f:6c:20:ba:d3:3e:1b:3d:7b:a8:4c:5f:d3:f5:00:ed:32:42:
         a9:10:7b:c6:47:84:6a:62:28:65:88:cb:79:88:fd:2f:fd:a5:
         23:31:de:16:84:2d:30:41:df:b0:e5:96:9a:cf:e1:9e:93:2f:
         ac:0a:47:07:3b:fe:04:43:6c:53:6f:1c:c6:b0:d1:5f:3f:26:
         6c:95:c1:ad:38:70:1e:fe:60:03:af:e0:e0:e4:ea:c0:ed:d6:
         10:4b:02:df:fe:94:6b:17:da:11:e4:c2:91:72:df:a7:83:3c:
         d9:a0:aa:e0:0e:a6:ea:33:a9:39:f6:50:77:92:e4:2e:00:b1:
         54:36:cc:32:f0:69:e7:74:67:87:1f:8e:76:68:b1:11:33:8e:
         2e:8a:f6:92:8f:da:ac:c4:ac:ad:b8:5c:26:98:47:f6:cb:50:
         30:a7:e4:3a:2d:de:5e:0e:d0:b4:74:2d:c6:eb:0d:51:59:66:
         eb:4e:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:05:57 2026 by rpki-client