Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32332d3233203d3e203238333730.roa
File:                     3138392e38342e3135382e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          alnOjwgPyYdtbw5vc+Dop2TmGoeYvLdTXswpklhui6o=
Subject key identifier:   37:00:CF:D5:6B:A6:CE:DE:AA:92:46:A0:7C:3B:1B:B0:75:57:FC:97
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       2CE4252A540542052A3B7721158EC568B780BDFC
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:26 +0000
ROA not before:           Wed 24 Jun 2026 22:58:26 +0000
ROA not after:            Wed 23 Jun 2027 23:03:26 +0000
asID:                     28370
IP address blocks:        189.84.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e4:25:2a:54:05:42:05:2a:3b:77:21:15:8e:c5:68:b7:80:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:26 2026 GMT
            Not After : Jun 23 23:03:26 2027 GMT
        Subject: CN=3700CFD56BA6CEDEAA9246A07C3B1BB07557FC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:73:d8:d2:13:a5:05:de:4f:37:79:7d:64:
                    b3:0b:49:69:bc:22:5a:d3:de:0e:3f:a5:37:3f:56:
                    52:9e:3d:cb:8f:21:7a:93:0d:3a:b1:da:17:c2:d9:
                    11:aa:67:cf:59:a4:bf:6b:54:fe:87:fb:54:4e:a1:
                    7f:85:b8:01:eb:3e:70:b4:c2:d4:f4:fa:3d:0c:07:
                    38:13:bf:20:ff:7a:e1:d0:ac:19:7d:f4:2f:9a:df:
                    53:45:7c:fa:c2:e0:45:a2:0e:8f:54:dd:96:52:4f:
                    c1:a5:3c:c6:f0:9f:da:7c:0a:ea:55:c9:dd:f2:e5:
                    cb:9e:f1:33:cf:2b:cf:14:4a:26:cb:c8:65:40:41:
                    9b:5a:64:76:45:b3:62:94:43:25:29:48:93:5d:8b:
                    ee:1b:aa:e4:70:3e:07:4a:c9:17:49:d3:1d:aa:81:
                    cb:a9:d3:52:7c:e9:53:cb:b0:b5:35:60:fb:68:88:
                    06:f5:eb:c2:91:16:e1:bd:be:7a:9f:4f:0b:11:25:
                    f6:82:a1:df:8f:3f:ad:ee:24:e4:84:82:be:fc:93:
                    11:41:4c:c5:4b:68:93:d2:93:cc:43:fa:be:03:90:
                    27:9c:2a:db:64:5b:09:09:c1:a2:9e:93:f7:bd:a8:
                    bc:b2:3a:c5:3f:53:43:a6:77:c9:c9:bf:cb:d0:d7:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:00:CF:D5:6B:A6:CE:DE:AA:92:46:A0:7C:3B:1B:B0:75:57:FC:97
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:6a:39:94:c5:0a:89:e7:f0:3c:fb:bb:25:f3:e5:c1:4b:
         81:50:3d:f4:ed:d3:92:93:dd:7e:07:8a:fb:94:8c:0e:c3:34:
         12:7c:b8:65:e8:bf:d8:4e:38:ca:79:fb:d5:e1:41:1b:05:70:
         dd:d1:58:de:13:01:1a:a6:f0:40:03:e5:7a:b4:dc:87:f1:3e:
         49:35:cb:86:03:42:50:cb:da:43:b6:17:d6:19:54:ef:58:75:
         3d:b2:3f:03:46:76:12:8a:24:05:57:f0:59:8e:1c:e6:f9:4c:
         c8:b6:82:a9:ef:a2:82:19:7a:03:18:2f:a5:b3:42:d6:7a:d9:
         4c:57:28:e9:10:c3:fc:83:40:54:ed:ff:f1:37:e9:e4:30:3d:
         d6:fe:8b:d1:69:23:4f:39:ef:4f:da:e8:2b:41:74:28:19:1f:
         58:60:02:d5:07:68:0b:1f:8a:6c:a9:05:ab:02:c8:59:7d:e9:
         0c:cd:db:f6:71:c1:9c:a5:2b:80:d7:97:30:ca:c7:c9:74:72:
         15:37:7a:61:4a:0e:d2:fc:8f:b2:d9:8e:f5:bb:63:20:a7:9e:
         76:96:20:11:7c:83:b1:3d:55:eb:c2:dd:05:38:74:d9:42:4f:
         19:54:af:08:bb:a8:ce:7c:f5:10:48:b1:62:45:02:40:b8:9c:
         2b:e0:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:05:57 2026 by rpki-client