Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32312d3231203d3e203238333730.roa
File:                     3138392e38342e3134342e302f32312d3231203d3e203238333730.roa (raw, json)
Hash identifier:          NDi1vL2ZqD2k7VkoBMELGUzO1XTGwPXD9yt2B+fRElA=
Subject key identifier:   F0:30:A9:0E:93:70:38:8D:F0:B0:FA:92:32:B0:D3:E2:1A:C7:13:74
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       0D8018CD390049E3B7F32D8C32D05AD7965A7AFC
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32312d3231203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:24 +0000
ROA not before:           Wed 24 Jun 2026 22:58:24 +0000
ROA not after:            Wed 23 Jun 2027 23:03:24 +0000
asID:                     28370
IP address blocks:        189.84.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:80:18:cd:39:00:49:e3:b7:f3:2d:8c:32:d0:5a:d7:96:5a:7a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:24 2026 GMT
            Not After : Jun 23 23:03:24 2027 GMT
        Subject: CN=F030A90E9370388DF0B0FA9232B0D3E21AC71374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:dd:7a:3b:3b:ce:71:18:b1:a4:af:87:05:
                    f9:9b:97:f1:b5:5d:8e:11:9a:b8:9b:c3:bb:c0:a6:
                    fd:d6:8c:2f:74:c4:ad:68:08:10:7a:17:f8:12:b0:
                    fc:17:5e:99:5e:72:62:dc:e0:f2:eb:3f:a0:4d:c3:
                    99:e4:f5:e5:12:f6:3b:c1:b8:81:f5:89:19:24:4a:
                    ff:58:c6:80:ae:0b:eb:65:bf:c7:2d:37:31:04:3a:
                    80:c1:3d:f7:a2:6d:15:ee:46:dd:de:2c:30:6a:f3:
                    cb:81:d6:fb:99:7b:d5:5f:29:56:0b:9b:7f:64:a0:
                    48:e0:32:5d:e4:66:55:fa:df:c6:b1:d1:83:59:25:
                    f6:3e:8b:4e:d3:71:de:3b:98:7f:0e:cf:41:42:69:
                    3f:31:ca:c7:17:f1:5c:c6:78:ce:1f:ff:3d:ec:fe:
                    e1:71:38:e9:4b:4d:14:57:a9:01:9d:50:73:18:08:
                    9d:24:3f:65:90:c6:f5:49:99:3f:48:82:c3:50:33:
                    cb:65:29:28:42:1a:4b:00:d2:88:42:33:76:24:57:
                    b7:58:f5:dc:78:67:3b:b4:1f:7f:ec:71:5c:ee:83:
                    50:fd:0e:85:81:82:9d:4d:e4:c3:46:7d:ff:10:17:
                    34:84:19:01:9a:9c:e7:03:b5:4d:f2:91:3b:ef:38:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:30:A9:0E:93:70:38:8D:F0:B0:FA:92:32:B0:D3:E2:1A:C7:13:74
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32312d3231203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:9a:7b:41:f1:f4:64:6c:a9:b1:3b:17:74:37:27:e5:11:
         54:21:56:69:20:2c:1e:c2:3a:89:0d:93:87:7c:96:58:89:ad:
         33:f4:c2:4e:00:b4:05:b8:c1:09:f4:ae:73:b7:e1:72:a3:fe:
         d5:4d:4f:81:e4:61:0f:90:30:9f:89:98:d6:bb:61:f1:5e:c8:
         92:ae:09:9d:21:c3:ca:d3:cf:dd:1f:d6:da:26:44:d5:5a:95:
         40:49:44:61:cd:3e:c8:c5:fe:ea:b3:96:79:dc:79:23:6b:f5:
         a9:49:4c:12:6d:84:8e:78:9a:5d:60:96:40:8a:d9:95:a9:e8:
         62:2c:9d:be:db:b6:74:e2:93:2c:65:29:76:8a:cd:98:2b:f8:
         3a:9a:e4:2f:73:05:e7:59:ca:76:58:26:18:ca:f0:12:6b:6e:
         27:92:e2:4e:35:d6:27:3e:33:da:c3:62:e6:99:2b:a2:2c:b1:
         80:63:5e:7d:ea:8a:d1:79:66:c8:8c:b8:6c:c1:04:3e:0a:19:
         37:70:2a:70:22:20:bc:4d:a0:30:b4:7e:a2:5a:8c:1f:73:00:
         9e:88:17:a9:14:a9:ef:e3:11:c0:ba:a2:e9:28:ce:9f:ae:df:
         8f:76:f5:e4:83:50:f5:0d:a5:a7:69:19:4d:e0:a6:6e:34:9e:
         a0:3d:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:27 2026 by rpki-client