Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32332d3233203d3e203238333730.roa
File:                     3138392e38342e3134342e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          aKzOFSevND6jt+3ohaQCXXv4SoAlEsOZ9BqSTgFREE4=
Subject key identifier:   AF:D3:EE:3F:F0:F2:83:22:4B:94:2F:8C:F5:2D:06:2A:60:1C:EC:41
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       4DA663C250583C254525F9E8B38ED56F9F79A913
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:26 +0000
ROA not before:           Wed 24 Jun 2026 22:58:26 +0000
ROA not after:            Wed 23 Jun 2027 23:03:26 +0000
asID:                     28370
IP address blocks:        189.84.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a6:63:c2:50:58:3c:25:45:25:f9:e8:b3:8e:d5:6f:9f:79:a9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:26 2026 GMT
            Not After : Jun 23 23:03:26 2027 GMT
        Subject: CN=AFD3EE3FF0F283224B942F8CF52D062A601CEC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:9f:de:b8:32:d5:eb:f1:43:08:a5:05:27:
                    1b:aa:3d:76:08:08:8c:35:57:80:21:d7:07:21:69:
                    19:d2:3a:0a:e4:db:0d:66:18:b8:eb:10:67:e1:c9:
                    b3:17:27:00:6a:fa:05:8b:c9:65:a6:c7:7f:c4:c3:
                    fe:4d:3f:3f:94:c1:8a:cd:e6:a6:6b:f4:7b:16:24:
                    67:05:12:c8:85:65:f2:1d:c7:a7:f5:d0:c2:34:ac:
                    eb:ce:ce:be:31:be:b0:57:97:cd:80:e5:7a:cc:bc:
                    be:e1:ca:81:11:34:94:c7:22:74:9b:a2:30:1d:7d:
                    ee:a6:6d:11:0a:87:b4:64:4a:b9:7a:a9:bd:ab:b7:
                    34:9d:90:b1:e0:41:6d:c6:f6:eb:79:e3:72:3a:b0:
                    db:c3:7f:c5:20:03:bc:a7:ec:ef:57:fe:55:d2:50:
                    22:63:ad:08:c0:3f:eb:a2:43:54:d6:33:46:c8:08:
                    c5:e4:7f:06:12:76:bf:46:f0:d1:e9:21:3c:da:ec:
                    7d:17:e4:4b:51:31:08:5a:37:11:c0:58:7e:8b:1a:
                    8b:5f:3a:6c:ca:d1:a8:14:68:bf:3c:9b:28:b1:11:
                    c9:7e:a8:c8:4c:9e:04:74:74:d0:fb:49:50:10:58:
                    89:24:89:0c:49:b5:4f:4f:44:4e:d9:06:7f:3f:69:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D3:EE:3F:F0:F2:83:22:4B:94:2F:8C:F5:2D:06:2A:60:1C:EC:41
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:ad:97:c2:70:57:01:4d:b0:fb:20:c9:f8:1c:9b:79:4f:
         34:8f:ce:5c:4e:c8:18:e8:21:2f:df:d5:d1:70:69:18:65:82:
         cc:3a:3f:05:81:c5:fe:75:ae:a2:bf:a5:00:3c:6d:8e:02:a8:
         a2:07:70:92:ea:b2:1d:42:a7:39:99:e0:02:25:66:5e:de:f0:
         45:80:54:87:01:5f:75:5c:a7:f3:a2:10:ad:d2:1a:a6:67:35:
         04:a3:8b:ac:14:43:80:f4:ad:aa:9f:23:89:4a:1b:5a:8a:fd:
         2a:56:2c:7f:0c:72:67:6b:b5:ab:db:a2:3c:2f:59:5c:d9:ee:
         48:f2:b9:ad:68:8f:49:dc:1d:1f:63:2f:cc:f4:14:22:19:4f:
         29:13:68:5b:86:78:ec:08:40:5b:04:4a:96:e7:f4:2a:15:7b:
         11:7f:eb:53:67:75:2b:7a:20:2a:b7:49:8b:01:f4:63:e7:ab:
         de:56:e4:4b:04:10:66:0f:7c:ec:62:23:75:34:8b:a9:8f:76:
         d7:42:ce:01:bc:46:23:93:8a:02:5a:0c:c4:f8:e3:a0:20:86:
         8e:13:37:e3:52:3e:fb:15:80:08:0f:47:a8:ca:ed:b4:9f:fe:
         74:ed:cc:2a:41:35:40:49:65:3c:6e:b8:5e:c8:94:e2:ae:f8:
         5a:ec:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:04 2026 by rpki-client