Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134352e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3134352e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          0acJbeCYwguCZ4x2BgHEeBfAq0mSFcFrFEAA3f/J4y0=
Subject key identifier:   A9:43:50:04:B6:5E:3A:A1:9B:D3:58:79:8F:87:CC:2C:69:2A:0B:96
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5A8B98BAB8DED791AED6BF7D466D56A92772B917
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134352e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:25 +0000
ROA not before:           Wed 24 Jun 2026 22:58:25 +0000
ROA not after:            Wed 23 Jun 2027 23:03:25 +0000
asID:                     28370
IP address blocks:        189.84.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8b:98:ba:b8:de:d7:91:ae:d6:bf:7d:46:6d:56:a9:27:72:b9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:25 2026 GMT
            Not After : Jun 23 23:03:25 2027 GMT
        Subject: CN=A9435004B65E3AA19BD358798F87CC2C692A0B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:b6:86:dc:77:f8:a7:0f:0c:39:c6:6b:cb:
                    83:68:1e:d0:0b:21:6f:0c:50:46:5e:0c:06:56:ef:
                    71:6e:78:1a:9e:42:c1:39:9a:4f:75:20:2a:3b:f9:
                    69:bc:0f:04:9b:3a:80:80:79:84:fc:7a:45:3e:2b:
                    82:84:09:71:9d:39:34:47:7c:a3:f1:2d:6e:1e:a8:
                    a8:f5:65:d8:1c:61:f2:90:45:e9:bd:2f:94:ef:47:
                    78:49:62:5a:e6:70:59:f9:b5:23:b1:3f:bc:7a:59:
                    e0:df:72:70:8b:1c:0e:60:46:a8:cf:ec:71:c9:e0:
                    e6:aa:e7:dd:08:33:50:25:de:19:f6:6c:e7:73:c5:
                    52:6c:cd:3e:04:93:c2:2e:55:44:36:02:96:9d:1c:
                    c8:fc:37:77:27:e1:41:43:98:06:42:9c:eb:aa:14:
                    7d:d6:3c:4f:37:e9:7b:65:70:f0:a8:67:f4:13:03:
                    ee:c3:23:35:93:84:55:13:c8:0b:6a:24:75:95:73:
                    21:3e:28:f1:b5:e6:71:6b:62:84:78:a1:de:81:73:
                    64:a6:38:53:dd:23:cd:b3:8c:e9:d8:66:8e:df:02:
                    c9:ed:69:f2:8e:d0:ca:f8:5a:ae:1c:b4:ca:79:d9:
                    f6:4f:e3:92:72:0a:57:ed:ea:43:85:0b:35:d2:b2:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:50:04:B6:5E:3A:A1:9B:D3:58:79:8F:87:CC:2C:69:2A:0B:96
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134352e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:86:17:3d:b2:13:69:04:2d:94:15:73:63:60:cc:d9:fd:79:
         02:86:7c:6e:a0:f2:ec:12:eb:f0:b3:b5:85:ca:b8:b2:3b:09:
         6c:ad:f2:28:d1:fb:d3:66:d9:b8:78:11:a0:d8:2a:67:cf:6d:
         01:f8:53:4b:dd:32:08:73:02:48:41:ba:be:82:93:b3:20:ba:
         82:4c:0c:91:a6:f4:1b:15:89:63:24:36:7d:09:d5:80:0a:a0:
         7e:8a:53:90:96:f1:59:03:33:fe:98:29:09:8c:cb:46:4a:62:
         c7:79:63:c4:83:7d:0a:bf:6e:95:93:86:ae:15:88:67:53:b9:
         d3:a8:7d:77:9c:6d:08:d1:99:f5:60:ff:82:59:dc:e3:50:76:
         67:4f:41:aa:23:8e:42:80:3e:e0:08:f0:e5:f9:dc:ca:2f:8e:
         1c:86:73:b6:5f:5f:74:92:ea:6b:f7:81:c8:72:3b:50:52:4b:
         f6:8a:80:57:fb:a5:03:b1:57:be:e9:77:96:18:4c:75:df:f4:
         b9:ad:5c:9e:2e:ee:91:f3:9e:93:1f:53:ef:94:0e:ac:39:1e:
         84:8a:d8:64:7b:c9:30:ea:3f:67:fa:7f:21:89:b3:58:52:5b:
         b0:f1:ad:0b:c7:fe:17:ab:42:f4:67:c2:44:47:f5:1f:c1:da:
         8a:12:e0:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWouYurje15Gu1r99Rm1WqSdyuRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNjA2MjQyMjU4MjVaFw0yNzA2MjMyMzAzMjVaMDMxMTAvBgNV
BAMTKEE5NDM1MDA0QjY1RTNBQTE5QkQzNTg3OThGODdDQzJDNjkyQTBCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuc7aG3Hf4pw8MOcZry4NoHtAL
IW8MUEZeDAZW73FueBqeQsE5mk91ICo7+Wm8DwSbOoCAeYT8ekU+K4KECXGdOTRH
fKPxLW4eqKj1ZdgcYfKQRem9L5TvR3hJYlrmcFn5tSOxP7x6WeDfcnCLHA5gRqjP
7HHJ4Oaq590IM1Al3hn2bOdzxVJszT4Ek8IuVUQ2ApadHMj8N3cn4UFDmAZCnOuq
FH3WPE836XtlcPCoZ/QTA+7DIzWThFUTyAtqJHWVcyE+KPG15nFrYoR4od6Bc2Sm
OFPdI82zjOnYZo7fAsntafKO0Mr4Wq4ctMp52fZP45JyClft6kOFCzXSskKPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqUNQBLZeOqGb01h5j4fMLGkqC5YwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM5MmUzODM0MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVSRMA0GCSqGSIb3DQEBCwUAA4IBAQAUhhc9shNp
BC2UFXNjYMzZ/XkChnxuoPLsEuvws7WFyriyOwlsrfIo0fvTZtm4eBGg2Cpnz20B
+FNL3TIIcwJIQbq+gpOzILqCTAyRpvQbFYljJDZ9CdWACqB+ilOQlvFZAzP+mCkJ
jMtGSmLHeWPEg30Kv26Vk4auFYhnU7nTqH13nG0I0Zn1YP+CWdzjUHZnT0GqI45C
gD7gCPDl+dzKL44chnO2X190kupr94HIcjtQUkv2ioBX+6UDsVe+6XeWGEx13/S5
rVyeLu6R856TH1PvlA6sOR6Eithke8kw6j9n+n8hibNYUluw8a0Lx/4Xq0L0Z8JE
R/UfwdqKEuDX
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:24 2026 by rpki-client