Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32322d3232203d3e203238333730.roa
File:                     3138392e38342e3135362e302f32322d3232203d3e203238333730.roa (raw, json)
Hash identifier:          oxZkNLoPfizQl4s90GEMrHVzhVEUR8bE8LIftqrzlqw=
Subject key identifier:   CC:46:7C:60:8F:A4:C4:39:F5:2A:7C:8A:B8:1F:30:CB:70:34:0F:DC
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       0EB7BDFD66BD41B2C64C44ECFA512568FA8A449F
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32322d3232203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:25 +0000
ROA not before:           Wed 24 Jun 2026 22:58:25 +0000
ROA not after:            Wed 23 Jun 2027 23:03:25 +0000
asID:                     28370
IP address blocks:        189.84.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b7:bd:fd:66:bd:41:b2:c6:4c:44:ec:fa:51:25:68:fa:8a:44:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:25 2026 GMT
            Not After : Jun 23 23:03:25 2027 GMT
        Subject: CN=CC467C608FA4C439F52A7C8AB81F30CB70340FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:88:97:af:c6:fd:e6:33:67:dd:b0:f6:57:
                    0f:aa:d1:de:19:15:01:8e:69:98:7b:12:02:1a:ea:
                    e4:ea:76:ac:12:af:86:04:55:5c:86:fd:c3:37:7f:
                    04:0d:45:4f:72:ae:76:b9:31:8f:49:65:0f:e1:2d:
                    16:7d:0c:c7:4f:58:56:fe:dd:be:af:1f:61:bc:ad:
                    ee:47:24:dd:a3:4e:d1:ac:93:87:6d:5c:88:fc:9f:
                    59:1b:22:84:74:91:11:28:3b:96:d7:42:a1:86:73:
                    0c:a8:8a:a9:2b:8c:ce:8c:50:bf:46:5a:95:af:82:
                    4f:81:d2:45:e6:a9:b8:61:9f:02:87:80:82:6d:51:
                    ab:c1:d8:26:af:da:8d:08:69:fd:48:45:a8:00:0c:
                    6f:b9:29:20:79:42:1f:5b:42:32:27:7c:5c:e1:0c:
                    dc:9d:6d:72:e1:f8:dc:5f:49:91:11:52:38:a6:e5:
                    cc:aa:44:a7:34:96:22:75:64:03:ba:b0:24:28:1a:
                    e1:d2:cd:66:50:04:db:dc:72:ca:0e:48:65:3c:61:
                    a6:b9:5b:a3:24:90:b6:e7:cd:c2:78:de:45:84:9d:
                    c8:39:bf:eb:40:6f:0c:fa:be:88:ea:89:0e:c0:2b:
                    07:93:1f:da:57:87:e2:b3:3b:64:77:32:b5:af:cc:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:7C:60:8F:A4:C4:39:F5:2A:7C:8A:B8:1F:30:CB:70:34:0F:DC
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135362e302f32322d3232203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:58:67:c4:83:08:e9:4e:e1:7b:de:2c:4e:88:5a:fa:86:7c:
         ae:f3:d9:e9:ca:c4:b6:e5:8a:56:d7:ad:21:24:73:b1:fe:0c:
         6a:18:ed:05:ae:38:43:ed:38:05:8a:4a:f9:61:3a:67:0d:8c:
         1f:db:d4:8b:5a:71:ea:fe:f6:8d:f2:c8:5f:b4:45:6d:eb:70:
         8a:d4:8f:ef:9a:34:81:69:36:5c:83:4f:27:a2:0a:2a:b1:c8:
         56:ef:10:79:e1:d0:92:52:66:8a:34:25:d1:11:04:c8:85:ea:
         26:94:a3:6d:ff:3f:32:08:35:5a:e5:b3:0b:69:2d:5c:04:3c:
         48:26:8f:f2:d1:0e:3b:fc:65:81:00:c6:de:2a:85:a8:84:3e:
         9c:39:cc:c1:0e:69:f3:72:aa:26:ae:2f:f6:b9:32:1b:d9:d5:
         2a:69:2c:4d:22:70:f7:ad:f9:13:e8:33:8b:08:90:b6:c2:e2:
         a9:ed:e1:55:5d:07:03:89:43:3c:a5:73:2e:44:ce:12:0b:a8:
         87:4b:33:ab:7e:e6:b5:d2:86:1d:28:a0:ea:85:b7:61:d1:7c:
         3c:e8:6a:37:d0:03:02:70:89:77:15:2b:45:c8:70:96:73:09:
         73:87:d5:9b:87:e6:d2:49:86:fc:00:8a:8e:e8:79:57:19:b9:
         1d:8a:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:27 2026 by rpki-client