Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/34352e3137322e3134342e302f32342d3234203d3e203238333730.roa
File:                     34352e3137322e3134342e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          rgM91ueazbzhN58h9FO4kphDGNUlmTsIdTOKSWB/YB4=
Subject key identifier:   F3:FC:6B:42:89:08:CD:4B:B0:3A:34:29:4D:CC:27:06:18:4B:8F:91
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       01CA0C93163944896C999BE1791974748EA35E56
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/34352e3137322e3134342e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:23 +0000
ROA not before:           Wed 24 Jun 2026 21:58:23 +0000
ROA not after:            Wed 23 Jun 2027 22:03:23 +0000
asID:                     28370
IP address blocks:        45.172.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ca:0c:93:16:39:44:89:6c:99:9b:e1:79:19:74:74:8e:a3:5e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:23 2026 GMT
            Not After : Jun 23 22:03:23 2027 GMT
        Subject: CN=F3FC6B428908CD4BB03A34294DCC2706184B8F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:bf:f6:14:77:16:72:b6:2e:eb:38:6b:8c:
                    f1:71:70:5c:49:de:4d:88:78:1f:d2:90:32:eb:4d:
                    6e:d6:5e:bf:10:bf:17:97:b9:15:76:4e:18:f2:23:
                    94:90:eb:c5:e2:44:91:98:a5:6a:e5:f9:1b:c3:76:
                    cb:07:6a:ba:ab:77:31:4c:57:f0:3b:4b:72:f1:28:
                    cd:df:50:88:2c:5f:30:fc:19:c9:d0:ef:df:ae:dc:
                    57:c8:72:5f:56:be:af:9a:e1:9f:2a:77:2d:32:64:
                    90:61:96:08:05:89:e9:5d:18:2f:36:f3:ed:f6:ae:
                    21:0c:35:8c:fd:dd:50:c3:b1:f1:5c:43:3e:b6:f4:
                    21:63:30:f1:cd:23:73:03:00:69:81:95:50:96:cb:
                    b5:5f:da:60:52:fc:6c:8f:ea:86:48:36:75:53:17:
                    a0:9b:bb:e5:21:f3:cf:80:13:b5:bc:5e:ed:f9:c1:
                    3b:18:0e:06:d9:62:5b:f0:42:f0:10:e0:64:be:4d:
                    f8:f9:1e:34:81:51:2f:6a:02:e0:1d:60:e8:71:ab:
                    18:f0:84:c5:8e:61:74:5f:7a:aa:73:e9:88:6b:3a:
                    af:78:27:bf:8c:06:7a:12:55:2a:cc:8a:cd:cd:f1:
                    32:8b:1c:9a:f8:46:80:ce:79:6b:3d:3f:ff:fe:01:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:6B:42:89:08:CD:4B:B0:3A:34:29:4D:CC:27:06:18:4B:8F:91
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/34352e3137322e3134342e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:a6:0e:36:13:56:e7:b4:e5:ac:81:0b:f6:15:81:b6:f8:
         99:a1:aa:a5:0c:17:5b:6b:60:59:e0:4e:3f:b7:b1:d5:ab:73:
         db:35:55:0a:01:c8:db:c7:fc:38:a7:f2:21:db:9b:3e:9b:9f:
         f8:37:71:8e:24:23:02:f3:17:dc:54:8e:4e:cc:32:47:aa:79:
         ba:28:c1:92:d6:c9:7a:99:d0:d3:11:8d:01:fc:8a:59:c1:70:
         87:87:c4:9f:7f:a4:75:72:97:78:8b:8d:df:e9:e9:3e:d3:aa:
         e3:d0:f1:9f:83:cc:f1:c7:f6:52:d8:05:b6:e0:97:98:dd:82:
         c8:56:2d:68:e6:74:8a:af:34:97:3c:01:76:a9:76:75:de:59:
         9a:df:11:14:9a:13:86:ce:7a:ef:ad:42:9a:66:5c:43:5b:33:
         bf:5e:c8:c1:9b:a1:71:eb:73:1b:23:64:a6:81:28:8a:3a:53:
         f3:e0:e4:fe:79:c7:00:a8:87:72:fb:cf:ad:34:c0:68:26:7b:
         55:c8:af:15:57:97:32:99:34:0b:4c:23:0f:2f:9e:9f:51:da:
         48:9d:89:87:c3:29:e3:68:fb:77:fa:8e:64:bc:e9:31:02:d8:
         a3:62:39:7c:54:bc:44:fe:e2:9c:ad:5e:88:db:c2:68:fb:2b:
         70:c5:88:1b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAcoMkxY5RIlsmZvheRl0dI6jXlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNjA2MjQyMTU4MjNaFw0yNzA2MjMyMjAzMjNaMDMxMTAvBgNV
BAMTKEYzRkM2QjQyODkwOENENEJCMDNBMzQyOTREQ0MyNzA2MTg0QjhGOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpL/2FHcWcrYu6zhrjPFxcFxJ
3k2IeB/SkDLrTW7WXr8QvxeXuRV2ThjyI5SQ68XiRJGYpWrl+RvDdssHarqrdzFM
V/A7S3LxKM3fUIgsXzD8GcnQ79+u3FfIcl9Wvq+a4Z8qdy0yZJBhlggFieldGC82
8+32riEMNYz93VDDsfFcQz629CFjMPHNI3MDAGmBlVCWy7Vf2mBS/GyP6oZINnVT
F6Cbu+Uh88+AE7W8Xu35wTsYDgbZYlvwQvAQ4GS+Tfj5HjSBUS9qAuAdYOhxqxjw
hMWOYXRfeqpz6YhrOq94J7+MBnoSVSrMis3N8TKLHJr4RoDOeWs9P//+AZ8jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8/xrQokIzUuwOjQpTcwnBhhLj5EwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzQzNTJlMzEzNzMyMmUzMTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALayQMA0GCSqGSIb3DQEBCwUAA4IBAQBKaaYONhNW
57TlrIEL9hWBtviZoaqlDBdba2BZ4E4/t7HVq3PbNVUKAcjbx/w4p/Ih25s+m5/4
N3GOJCMC8xfcVI5OzDJHqnm6KMGS1sl6mdDTEY0B/IpZwXCHh8Sff6R1cpd4i43f
6ek+06rj0PGfg8zxx/ZS2AW24JeY3YLIVi1o5nSKrzSXPAF2qXZ13lma3xEUmhOG
znrvrUKaZlxDWzO/XsjBm6Fx63MbI2SmgSiKOlPz4OT+eccAqIdy+8+tNMBoJntV
yK8VV5cymTQLTCMPL56fUdpInYmHwynjaPt3+o5kvOkxAtijYjl8VLxE/uKcrV6I
28Jo+ytwxYgb
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:29 2026 by rpki-client