Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135352e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135352e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          13styMrhCPZ20KpUfzuAfGYjXAxL7LFmBYCn3ZF/UtU=
Subject key identifier:   6E:C4:2F:47:E8:E5:24:70:A3:43:10:E7:1F:E9:51:5F:7C:65:4F:DC
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5352A867235142CB8E4534AB15F1DC40595C94E3
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135352e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:25 +0000
ROA not before:           Wed 24 Jun 2026 22:58:25 +0000
ROA not after:            Wed 23 Jun 2027 23:03:25 +0000
asID:                     28370
IP address blocks:        189.84.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:52:a8:67:23:51:42:cb:8e:45:34:ab:15:f1:dc:40:59:5c:94:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:25 2026 GMT
            Not After : Jun 23 23:03:25 2027 GMT
        Subject: CN=6EC42F47E8E52470A34310E71FE9515F7C654FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:3d:48:fb:c0:59:ec:81:7a:37:27:21:f0:
                    7e:5e:44:b5:26:39:76:53:51:46:35:0e:e9:1b:fc:
                    9e:d9:91:ef:8c:40:76:7b:e2:69:08:6b:01:20:46:
                    08:1d:ce:fd:ad:35:09:e9:af:35:fa:86:6c:ab:02:
                    47:e9:12:53:82:9c:06:17:1d:ab:f6:ca:ea:98:78:
                    e2:0d:47:27:1e:c9:fb:ad:4f:8e:75:3e:e5:81:d2:
                    61:49:23:52:fc:b4:93:73:c3:51:2d:e9:00:b2:15:
                    d9:eb:4c:5e:97:e1:76:cc:0e:43:02:15:eb:99:94:
                    f0:04:0b:43:7b:7f:f5:bd:0c:0e:9e:71:2a:84:92:
                    da:51:fd:2e:8f:6b:e8:c8:97:d4:0d:c3:4c:9e:c5:
                    36:53:a0:49:c7:9a:8f:79:5b:f7:41:b9:b4:9e:01:
                    fb:e6:7a:81:cc:ed:f6:c4:73:45:34:aa:2c:52:ef:
                    4b:52:5f:9e:65:d8:6c:49:3a:f4:47:c5:b6:35:20:
                    72:82:f5:23:68:f9:3a:38:50:ee:32:5e:e4:77:26:
                    dc:d6:87:8e:7b:10:a8:af:72:6b:b6:36:23:6a:89:
                    49:73:55:60:b8:a5:a3:56:54:5e:1d:39:7c:87:a8:
                    e9:f8:bd:91:9a:0b:08:44:ad:3b:d5:74:cd:13:47:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:2F:47:E8:E5:24:70:A3:43:10:E7:1F:E9:51:5F:7C:65:4F:DC
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135352e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:bf:cb:93:13:47:22:bd:c2:89:73:ac:ab:b1:31:9f:93:
         3f:95:eb:44:ee:76:e3:18:43:c1:19:f6:52:b8:26:91:63:8a:
         16:f6:d6:72:24:a1:2e:4b:ae:78:af:90:5d:2d:a5:36:9d:86:
         d6:43:78:a6:08:15:01:13:05:71:2e:98:e1:fe:ce:bb:60:1e:
         c3:c9:64:78:d8:ba:79:44:d0:57:95:23:ea:0c:41:9c:aa:b6:
         81:01:eb:b4:67:0f:c0:1e:52:9c:63:cc:51:85:a9:0f:51:91:
         75:18:04:7c:dd:55:0d:ec:7a:02:90:79:b1:32:2b:5a:13:e2:
         2b:50:0c:cf:95:c5:18:ac:c3:cb:b5:44:12:0b:50:48:c5:ba:
         85:60:55:50:f7:c7:ce:61:28:26:f5:7f:85:24:48:dd:63:5e:
         cb:73:31:cb:e3:5b:da:99:29:fe:31:ab:c5:8b:39:36:87:83:
         46:67:b7:2c:8d:87:ed:79:dd:61:61:f2:81:a8:b1:e5:6b:37:
         96:a6:bb:47:45:37:d5:ea:a6:97:6a:8c:f1:36:14:f4:a4:75:
         fb:66:9f:9f:82:c5:d0:57:56:68:f4:ac:35:41:53:d4:2b:6b:
         ad:22:f5:8a:cd:66:a6:cf:45:03:44:ca:91:43:cf:08:a1:4b:
         01:cb:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:22 2026 by rpki-client