Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135322e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135322e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          BxTnhjh6pWGtxs9WHSqit2EG+ZbfxsrO0Um50CP0rN0=
Subject key identifier:   AB:D8:25:47:68:6E:6E:12:D4:87:F1:02:17:E8:C0:D8:87:C2:50:B8
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       1971D8FC6F0AFC7961D1151F1BF87F1523887348
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135322e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:24 +0000
ROA not before:           Wed 24 Jun 2026 22:58:24 +0000
ROA not after:            Wed 23 Jun 2027 23:03:24 +0000
asID:                     28370
IP address blocks:        189.84.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:71:d8:fc:6f:0a:fc:79:61:d1:15:1f:1b:f8:7f:15:23:88:73:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:24 2026 GMT
            Not After : Jun 23 23:03:24 2027 GMT
        Subject: CN=ABD82547686E6E12D487F10217E8C0D887C250B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:07:da:6f:f8:a5:df:d9:3a:7a:a5:a7:5f:
                    60:92:bc:9d:6a:fb:10:a5:ed:d8:27:24:c0:56:b7:
                    29:f7:34:27:7c:c0:0b:e9:b0:69:8d:a3:ea:41:18:
                    6f:d9:ef:2a:7d:f6:34:78:2f:85:fd:e7:26:eb:73:
                    c8:60:02:74:84:a4:50:cf:c5:e0:a1:51:d9:7a:53:
                    d8:2f:5a:2b:39:40:d8:35:c8:8d:63:5e:ec:9b:28:
                    cf:01:ab:db:ab:d8:1e:cb:47:8d:e4:ab:ed:08:de:
                    f6:28:5b:40:88:15:17:d3:8e:15:69:a6:a8:90:94:
                    85:10:4e:10:fb:88:ff:77:eb:a3:fb:6c:8b:b0:d1:
                    af:fc:3b:7a:33:02:d5:84:69:a2:cf:b7:21:f5:6c:
                    05:ec:85:25:51:90:7f:ad:a6:64:67:80:1e:05:65:
                    26:af:96:4e:c7:04:ec:58:bd:f6:32:34:16:92:25:
                    38:7b:b7:e0:02:17:df:75:bb:1e:19:ad:10:c1:a1:
                    a4:d3:d1:f2:f3:04:d0:d4:93:0a:2b:60:86:3b:77:
                    30:3e:a2:49:c7:7a:fb:fa:74:e3:88:de:14:a8:b1:
                    57:6c:95:e2:f9:d3:9b:f5:5d:bc:e6:69:27:df:ea:
                    53:7e:2f:1b:d9:b9:6f:95:21:4e:9e:ef:ce:20:91:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D8:25:47:68:6E:6E:12:D4:87:F1:02:17:E8:C0:D8:87:C2:50:B8
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135322e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:52:74:35:71:b5:ac:38:05:ee:6b:90:73:15:01:e8:56:
         57:04:5c:db:d9:bb:40:76:8a:a7:90:70:86:0d:81:a5:44:58:
         7d:2b:6e:21:96:99:ad:de:18:12:6e:94:b6:c3:a7:f9:b0:ea:
         e2:0f:f2:5d:e9:82:01:4c:06:a6:43:3c:8d:5a:9e:b3:10:b1:
         5e:39:fe:99:23:1e:0e:ab:19:fa:73:a5:90:53:61:f1:55:6b:
         90:9e:b1:03:0f:66:77:13:7e:b1:fa:8a:97:f0:19:47:20:77:
         76:c3:4a:52:66:11:c5:2d:8d:c7:cf:34:fc:9e:e4:a2:bd:a0:
         15:67:94:fd:53:a1:b7:c8:26:a2:0b:c6:15:c9:1c:3d:75:44:
         5d:ef:72:f6:5a:a3:96:7a:a4:e7:05:16:52:df:f1:c7:28:47:
         a2:a8:b6:df:bb:62:c2:7a:ba:36:c0:89:e5:90:1e:a5:70:25:
         89:be:a8:a0:3f:a8:6a:64:57:cb:ed:30:d5:15:52:41:a2:06:
         89:84:bc:a7:ee:2e:38:5d:2d:57:4e:24:74:41:93:75:23:70:
         a2:4b:32:d3:10:53:2b:55:c3:c9:73:14:0e:77:c2:65:81:36:
         64:e1:64:3d:33:bc:92:5d:94:64:58:ec:a0:78:a1:e5:d2:04:
         44:0b:bc:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGXHY/G8K/Hlh0RUfG/h/FSOIc0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNjA2MjQyMjU4MjRaFw0yNzA2MjMyMzAzMjRaMDMxMTAvBgNV
BAMTKEFCRDgyNTQ3Njg2RTZFMTJENDg3RjEwMjE3RThDMEQ4ODdDMjUwQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBgfab/il39k6eqWnX2CSvJ1q
+xCl7dgnJMBWtyn3NCd8wAvpsGmNo+pBGG/Z7yp99jR4L4X95ybrc8hgAnSEpFDP
xeChUdl6U9gvWis5QNg1yI1jXuybKM8Bq9ur2B7LR43kq+0I3vYoW0CIFRfTjhVp
pqiQlIUQThD7iP9366P7bIuw0a/8O3ozAtWEaaLPtyH1bAXshSVRkH+tpmRngB4F
ZSavlk7HBOxYvfYyNBaSJTh7t+ACF991ux4ZrRDBoaTT0fLzBNDUkworYIY7dzA+
oknHevv6dOOI3hSosVdsleL505v1XbzmaSff6lN+LxvZuW+VIU6e784gkSo7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq9glR2hubhLUh/ECF+jA2IfCULgwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM5MmUzODM0MmUzMTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVSYMA0GCSqGSIb3DQEBCwUAA4IBAQCjklJ0NXG1
rDgF7muQcxUB6FZXBFzb2btAdoqnkHCGDYGlRFh9K24hlpmt3hgSbpS2w6f5sOri
D/Jd6YIBTAamQzyNWp6zELFeOf6ZIx4Oqxn6c6WQU2HxVWuQnrEDD2Z3E36x+oqX
8BlHIHd2w0pSZhHFLY3HzzT8nuSivaAVZ5T9U6G3yCaiC8YVyRw9dURd73L2WqOW
eqTnBRZS3/HHKEeiqLbfu2LCero2wInlkB6lcCWJvqigP6hqZFfL7TDVFVJBogaJ
hLyn7i44XS1XTiR0QZN1I3CiSzLTEFMrVcPJcxQOd8JlgTZk4WQ9M7ySXZRkWOyg
eKHl0gREC7wC
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:26 2026 by rpki-client