Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135382e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          8cnuLb8rK28Ot9umxHkudfqsiFWPWEHklX2Np8BJsSc=
Subject key identifier:   80:A3:04:BD:F2:8E:89:1B:C4:63:26:88:52:B9:24:55:48:D3:DE:0F
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       6BCD4CEBBDAF36907884621EFA5D306C639816DD
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:25 +0000
ROA not before:           Wed 24 Jun 2026 22:58:25 +0000
ROA not after:            Wed 23 Jun 2027 23:03:25 +0000
asID:                     28370
IP address blocks:        189.84.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cd:4c:eb:bd:af:36:90:78:84:62:1e:fa:5d:30:6c:63:98:16:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:25 2026 GMT
            Not After : Jun 23 23:03:25 2027 GMT
        Subject: CN=80A304BDF28E891BC463268852B9245548D3DE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:9b:f5:47:bf:e6:68:c9:dd:25:ca:2a:74:
                    a6:d5:59:ea:4f:00:c0:f5:79:28:89:64:b0:70:3c:
                    4e:c5:23:72:cc:2a:7f:36:c7:28:c6:36:fe:04:bc:
                    6b:dc:e6:bb:d6:d3:f1:c7:4b:a3:80:e4:b7:b2:52:
                    d4:3a:d4:9a:bc:9d:0d:0b:a4:e5:7c:fe:93:84:17:
                    fc:fb:2b:0e:d6:3c:89:96:87:e5:da:8f:31:8e:0f:
                    1b:1a:cb:db:a8:39:de:89:1d:c5:ce:d3:29:25:59:
                    7d:bc:c5:15:85:a1:7c:a2:9e:ed:b9:6b:a5:3d:f0:
                    94:ca:70:35:97:3a:51:20:87:ab:45:4d:c5:75:eb:
                    d4:1d:e7:e5:2b:d6:47:6a:a4:15:c8:bd:36:8e:ef:
                    39:56:bb:e8:54:7e:4b:a0:8d:4e:76:2c:48:3a:e2:
                    fd:f1:68:30:68:b4:f7:83:2b:5d:8e:0a:72:f2:6a:
                    c6:8f:45:63:5c:9a:cc:f7:45:f6:3f:4c:29:92:a1:
                    6e:e1:b3:d1:70:94:59:32:3d:42:49:81:8f:e6:43:
                    30:be:7d:5e:c2:58:bf:f9:57:5f:b8:88:76:f9:6c:
                    43:9a:6c:65:5f:a6:0a:44:e4:38:30:35:d9:c8:df:
                    7f:e8:b6:26:08:d4:22:2e:6a:a5:c0:e6:b3:1b:90:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A3:04:BD:F2:8E:89:1B:C4:63:26:88:52:B9:24:55:48:D3:DE:0F
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135382e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:aa:ec:93:df:2f:46:58:b9:b2:1f:53:39:3e:95:ea:88:ea:
         9f:16:17:8a:52:57:16:2d:57:0c:2d:c3:e6:d3:5b:9c:35:d7:
         4d:3a:a9:40:ca:72:d7:f6:5f:e2:ed:8d:35:e1:36:c7:cf:61:
         d8:b9:e4:e3:c7:14:b8:1c:67:21:b4:ed:47:a6:ad:d4:04:55:
         e5:5e:c9:e1:4e:71:db:d6:db:56:4a:5b:db:b0:90:ea:c2:fc:
         92:28:e0:80:9f:c7:a3:3a:01:0f:8e:ea:ee:16:ba:e5:2c:fe:
         1d:c1:27:89:69:78:27:96:91:63:8d:6b:f4:63:b6:6d:23:3b:
         2b:ab:56:48:6c:06:5e:1b:85:72:d3:4f:99:b9:9e:41:52:87:
         86:ce:ad:d5:27:76:f7:37:e8:e8:00:6e:e2:73:7c:ee:9d:b5:
         17:4a:47:32:9e:02:63:6e:4d:a4:04:06:3b:af:b1:b0:93:92:
         25:51:da:de:01:1e:46:ff:cb:dc:18:ba:5e:b2:04:eb:0b:c2:
         a9:64:cd:3a:35:b5:a3:99:04:58:ed:0a:31:ca:3b:c5:3d:cb:
         3b:93:69:99:0e:08:9c:a5:90:df:26:86:35:02:7c:f1:90:51:
         65:a9:2f:04:12:51:59:0e:4c:f2:9f:95:6c:71:1a:af:17:88:
         b1:1c:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:15 2026 by rpki-client