Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135302e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135302e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          SycrmLQCgiVO6d/YLyX1vX9yvPcgRAE3fo9g5Yhd580=
Subject key identifier:   72:74:5F:AD:6D:D4:9B:97:D1:63:01:E2:FF:9E:17:BA:CA:1B:68:FD
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       4FE887683C7951EADFC20C3F6BAA0F889C37E178
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135302e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:26 +0000
ROA not before:           Wed 24 Jun 2026 22:58:26 +0000
ROA not after:            Wed 23 Jun 2027 23:03:26 +0000
asID:                     28370
IP address blocks:        189.84.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e8:87:68:3c:79:51:ea:df:c2:0c:3f:6b:aa:0f:88:9c:37:e1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:26 2026 GMT
            Not After : Jun 23 23:03:26 2027 GMT
        Subject: CN=72745FAD6DD49B97D16301E2FF9E17BACA1B68FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:66:ab:db:06:2c:f1:24:8c:0e:8f:3d:9c:
                    ca:53:ae:38:75:95:49:07:ab:58:1e:a7:4f:4c:bc:
                    41:34:4a:d1:41:86:48:44:f8:ec:89:b0:d5:ab:a5:
                    d9:29:8d:eb:5c:6b:85:bb:7d:fd:37:cb:75:22:ac:
                    99:a4:59:cc:01:4c:23:86:9b:83:b7:3b:ee:1e:73:
                    ee:59:2e:c2:06:a6:ea:48:80:a8:a6:34:b8:b5:08:
                    40:47:09:a4:73:6b:51:ab:9a:31:09:bb:ac:ed:90:
                    b3:64:12:4c:d6:72:18:27:56:6d:cb:eb:ab:bd:50:
                    5a:cd:27:9e:9c:37:d9:22:95:86:99:7d:18:08:8f:
                    90:dd:cb:53:65:8a:44:ee:9a:a2:f4:88:60:b5:b2:
                    55:3b:fa:ef:1c:15:31:1b:bf:32:d8:54:5a:a4:fe:
                    d7:6b:5f:da:95:5c:63:b2:c7:88:bb:9e:4a:0b:f7:
                    27:65:91:95:cf:7f:6f:6e:7f:51:6e:d3:ab:fd:d9:
                    55:83:a2:3e:8d:a2:52:98:a1:0b:bd:b3:57:7f:3e:
                    e5:4f:14:38:1c:84:f4:0b:dd:32:cd:b2:85:37:b0:
                    7c:73:9c:85:ae:74:a6:5c:d7:27:69:d2:5c:48:06:
                    a0:7e:91:b6:14:d6:fd:14:cf:1b:85:68:9f:fc:d5:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:74:5F:AD:6D:D4:9B:97:D1:63:01:E2:FF:9E:17:BA:CA:1B:68:FD
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135302e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:78:4f:47:f3:f9:59:4a:7d:f7:13:cd:8f:82:b5:db:14:
         d7:91:71:db:e7:ae:14:5e:c8:af:b7:97:34:db:16:ea:e4:ba:
         ff:fe:a7:47:c8:25:b8:7e:ed:29:a3:85:d6:b8:ce:44:58:7a:
         6d:ec:d3:ba:d7:32:75:f1:19:4b:73:cb:c4:3c:0f:bd:55:34:
         fc:68:2a:21:96:d5:88:1d:a2:4d:a0:a5:5b:17:e9:a4:db:fe:
         9c:f9:a8:ff:4a:25:0c:2a:76:b2:5c:4e:37:cb:83:f2:9b:8e:
         c3:5e:db:c4:9a:c8:39:2c:0d:02:4d:1a:67:ae:5d:b7:01:74:
         40:80:49:a5:49:4e:a8:a7:24:54:1d:d3:bc:b4:40:31:c0:4e:
         ff:d6:98:cc:93:a8:96:d0:c5:f7:c1:98:1c:cd:81:c4:d4:0e:
         36:5a:90:ae:86:78:27:30:80:96:60:18:d6:80:ff:45:6f:bb:
         04:69:14:00:8c:95:a3:93:72:f6:98:46:12:4f:7a:80:21:53:
         ba:fd:bc:d0:c2:9d:47:10:dd:18:9e:cc:7f:a6:93:26:4b:a5:
         57:b2:33:46:28:aa:de:67:a2:d5:2f:70:80:8d:50:51:e0:0a:
         3b:75:29:44:c2:fa:ad:08:a8:63:fb:ef:de:9b:04:96:90:a6:
         70:24:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:16 2026 by rpki-client