Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135332e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135332e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          GP3RfpoSJ27CL35ljjKtI8Mk8svZ+k4/f4I8dU+gDbA=
Subject key identifier:   F4:18:84:28:9C:F2:28:0D:37:2A:7F:AD:92:72:DA:59:B8:A1:1E:5A
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       1BA52BCE39AF30644A64B3FF4B90766E3DC5238C
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135332e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:24 +0000
ROA not before:           Wed 24 Jun 2026 22:58:24 +0000
ROA not after:            Wed 23 Jun 2027 23:03:24 +0000
asID:                     28370
IP address blocks:        189.84.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a5:2b:ce:39:af:30:64:4a:64:b3:ff:4b:90:76:6e:3d:c5:23:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:24 2026 GMT
            Not After : Jun 23 23:03:24 2027 GMT
        Subject: CN=F41884289CF2280D372A7FAD9272DA59B8A11E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:fb:b1:1d:1b:32:00:21:2c:0e:cc:45:91:
                    fe:df:08:1d:f2:4e:68:5f:fb:af:b2:65:4d:d9:37:
                    90:a4:a8:9c:62:bb:8d:43:e3:c7:56:b5:e0:2a:1a:
                    1e:54:2e:61:6f:b1:c2:73:0b:b3:3a:a7:cd:b8:ee:
                    7b:69:a8:37:99:32:2b:1f:64:0a:4f:19:cf:bf:30:
                    27:f2:d8:2c:af:a3:97:93:40:e0:9c:ab:15:66:17:
                    70:b1:d7:5d:91:ff:b9:f4:17:25:84:e4:19:c2:6e:
                    7b:21:49:85:8c:f6:89:1d:3f:18:eb:c9:6c:7a:76:
                    f2:21:3f:c7:bf:a9:c1:38:8f:bd:1d:e7:5b:80:d8:
                    64:3f:be:77:bc:1a:a3:8e:b2:a1:bd:39:bb:1a:f3:
                    72:16:cb:d2:58:f8:95:61:f9:e7:6e:a4:20:82:e9:
                    3e:57:08:21:f4:80:97:cd:61:55:0d:6c:6c:c0:f9:
                    f8:17:a2:91:06:41:c3:28:ce:40:55:a4:1d:eb:52:
                    2d:de:8c:71:fc:71:06:3a:1f:34:98:01:ab:e3:d7:
                    0f:7f:71:67:91:fe:b3:94:08:6d:8d:30:29:6d:b0:
                    77:68:ad:ec:b9:59:8e:71:da:e7:3d:3b:34:82:8d:
                    56:7f:5f:68:7c:94:e8:27:50:a5:39:01:9f:fe:d9:
                    80:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:18:84:28:9C:F2:28:0D:37:2A:7F:AD:92:72:DA:59:B8:A1:1E:5A
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135332e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:f4:dc:03:0e:96:63:38:22:5a:78:18:e3:66:b5:02:52:
         2a:24:5b:1d:ff:c8:ec:46:04:1b:1e:8b:06:70:8c:79:c4:b0:
         8a:41:06:74:4a:ce:ae:63:b6:f0:24:37:d2:00:3c:91:4d:f2:
         1f:a8:bc:1f:e1:b7:b7:80:54:f7:15:04:34:64:4d:9a:84:44:
         54:29:3b:11:17:11:87:cf:17:0a:fc:64:3e:8f:e5:99:63:c7:
         eb:ea:76:15:e6:7c:85:28:6e:ff:bb:d3:3f:f0:1b:09:ae:83:
         65:0b:bf:0f:c2:81:3a:28:bb:7c:48:9d:09:cd:e2:49:91:b7:
         ab:a6:f3:35:0d:6c:81:e2:83:b3:ab:ab:3e:e0:38:5d:98:ab:
         9f:68:25:31:28:65:07:fc:c4:b4:0a:0e:ba:99:3b:82:65:c3:
         84:0c:6f:80:f4:ce:97:e2:7a:b0:e8:de:9d:fc:50:b6:f1:8a:
         72:6c:d4:70:2d:f7:87:c0:3a:99:c2:a4:15:7d:92:3f:ed:19:
         24:0f:59:35:b5:66:73:a3:2e:d5:5d:e9:fd:e7:e6:fb:06:33:
         9f:2a:09:46:f1:36:fc:59:59:d3:0f:01:f7:1e:97:d1:60:c9:
         f9:5c:33:f8:22:99:90:5e:06:84:63:62:8f:23:56:15:d4:6a:
         71:e6:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:20 2026 by rpki-client