Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32302d3230203d3e203238333730.roa
File:                     3138392e38342e3134342e302f32302d3230203d3e203238333730.roa (raw, json)
Hash identifier:          /ZB2btMcZL71AZ/SIs3mbnnzmLu98RrkAe3/Ps/gbrg=
Subject key identifier:   AF:BB:AB:A8:C0:0E:DC:13:06:06:87:27:70:42:72:E6:40:DA:07:A5
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       597852D8201107DD73C9B74845669B31C4B942EA
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32302d3230203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:25 +0000
ROA not before:           Wed 24 Jun 2026 22:58:25 +0000
ROA not after:            Wed 23 Jun 2027 23:03:25 +0000
asID:                     28370
IP address blocks:        189.84.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:52:d8:20:11:07:dd:73:c9:b7:48:45:66:9b:31:c4:b9:42:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:25 2026 GMT
            Not After : Jun 23 23:03:25 2027 GMT
        Subject: CN=AFBBABA8C00EDC1306068727704272E640DA07A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:e2:2d:92:7f:71:85:5a:12:93:39:f9:5e:
                    b9:71:d3:98:91:6c:cc:f0:a2:40:e5:cf:2c:55:67:
                    b9:45:67:a3:fb:9a:19:c2:5e:05:6c:76:14:81:a4:
                    7e:a4:47:75:98:67:fa:8c:73:b3:e4:b1:fb:0a:3a:
                    c0:08:af:0f:57:cb:e9:98:61:a9:aa:21:19:41:2e:
                    83:c8:fa:37:a4:68:c4:6a:a9:53:ba:dc:42:88:fb:
                    61:82:c2:d3:dd:f3:61:c1:d6:04:a5:af:81:58:e5:
                    72:70:03:b9:9d:82:bf:76:39:70:b3:a5:6c:ae:9b:
                    3c:2a:bb:4b:aa:8d:ba:82:08:70:71:ce:12:69:58:
                    22:69:86:45:c3:d7:9a:28:66:f9:21:8a:74:81:35:
                    cb:31:fb:04:fa:0a:f5:da:fb:4e:12:57:67:79:81:
                    e5:91:65:16:5f:00:fa:67:05:74:c1:ac:80:99:e4:
                    c0:05:f4:b1:33:b9:d8:f4:51:b1:dd:4e:86:0c:25:
                    d6:87:2f:c1:a4:a9:66:1a:d9:85:16:99:7d:9f:37:
                    7c:a4:16:71:91:3f:da:09:6f:41:49:6e:8a:4e:c2:
                    19:09:2b:63:4e:c1:5b:fc:9c:82:4e:83:06:af:3d:
                    5c:e4:fd:c2:59:f1:ff:fd:dd:f9:16:e1:c7:9c:62:
                    97:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BB:AB:A8:C0:0E:DC:13:06:06:87:27:70:42:72:E6:40:DA:07:A5
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32302d3230203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:a2:ba:cb:67:b1:84:d0:a1:84:2a:ca:cd:7b:2e:77:77:71:
         6b:08:83:fd:b7:8e:f3:e6:55:77:54:44:21:00:41:87:9c:6c:
         fc:1e:89:6e:fe:05:f2:27:e8:fe:cb:c3:dc:00:44:20:67:11:
         d7:97:55:f8:10:5f:0f:b5:c5:0a:de:58:91:c2:b7:49:18:07:
         50:1f:b3:a4:ff:63:a3:5f:82:6b:e8:d1:31:b2:d7:d0:06:b4:
         35:f8:05:14:a5:89:a8:4f:1c:4d:73:b2:b8:e3:95:3f:b6:b0:
         34:f7:05:cd:13:92:d6:22:69:72:fb:13:af:c0:af:71:52:94:
         de:0d:f9:af:02:e6:76:a2:eb:0e:37:75:73:88:cd:7d:f8:1a:
         b8:ba:8e:54:53:05:a5:93:4a:63:1e:0d:af:36:2f:12:ef:c6:
         68:93:9f:9c:6e:9c:49:a7:cf:b6:2c:30:9b:08:be:51:3f:24:
         19:f3:a2:13:ed:50:f3:88:11:27:fd:61:a0:d6:b1:16:3c:c3:
         18:7b:dc:87:da:a3:03:fa:dc:34:91:eb:ed:96:c6:29:da:8c:
         8b:5c:ef:32:87:ca:6a:be:29:69:a7:bb:f4:a5:de:a3:d9:86:
         a6:8e:73:ae:5c:94:7c:43:6a:15:6b:ef:f1:19:2f:64:d3:c0:
         01:d3:eb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:07 2026 by rpki-client