Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/34352e3137322e3134352e302f32342d3234203d3e203238333730.roa
File:                     34352e3137322e3134352e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          uRqxrNqk7urKwZLbqER3PPkzvlDlnWVL5HVFZQNzEok=
Subject key identifier:   B9:9B:F8:8B:D7:75:38:42:4E:83:1D:A0:C4:44:5B:EC:C2:B5:84:82
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       052B632B940156B7914ABCB099342DC8E99AECD2
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/34352e3137322e3134352e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:24 +0000
ROA not before:           Wed 24 Jun 2026 21:58:24 +0000
ROA not after:            Wed 23 Jun 2027 22:03:24 +0000
asID:                     28370
IP address blocks:        45.172.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2b:63:2b:94:01:56:b7:91:4a:bc:b0:99:34:2d:c8:e9:9a:ec:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:24 2026 GMT
            Not After : Jun 23 22:03:24 2027 GMT
        Subject: CN=B99BF88BD77538424E831DA0C4445BECC2B58482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:16:32:14:a4:85:08:df:07:d6:a4:37:ef:
                    2c:51:fb:d5:66:3a:d7:f4:bf:44:fe:33:d9:8e:0d:
                    a2:95:79:0d:ae:d2:ce:2f:f2:ce:5b:9c:a1:77:44:
                    40:0d:b0:7f:35:ae:f3:6f:ad:91:66:d2:f5:23:22:
                    a9:9b:6d:e1:af:33:7b:2e:11:c8:f2:b8:73:ee:c8:
                    bd:85:52:25:45:48:60:68:41:3c:f7:22:f1:fa:f0:
                    46:90:42:ef:3e:fb:27:88:61:e2:a2:ce:5c:47:5d:
                    00:9e:6c:79:42:c3:32:74:ee:50:6b:0f:d0:d0:b2:
                    c2:0c:ba:b8:29:df:cc:69:d9:80:86:74:c0:4e:44:
                    08:9b:f0:92:e5:a4:e8:e6:f9:9e:10:8d:33:33:81:
                    2e:0a:a6:8e:4b:60:e1:b2:cf:83:72:5b:e7:1b:0b:
                    8b:3c:ec:cc:2c:d8:46:c0:be:a4:ec:8d:a7:76:20:
                    fb:02:98:ee:3c:76:87:32:80:5a:54:09:c7:76:e4:
                    59:ab:54:47:12:86:df:cc:ff:50:2c:2b:3c:c0:5e:
                    a8:00:15:5d:07:26:24:04:42:f0:ab:e4:78:22:dd:
                    d6:53:75:15:ec:d3:6d:66:2e:1d:c4:a1:55:65:9c:
                    39:be:2f:66:19:75:41:64:a9:cc:ff:b8:87:95:78:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9B:F8:8B:D7:75:38:42:4E:83:1D:A0:C4:44:5B:EC:C2:B5:84:82
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/34352e3137322e3134352e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:8a:d9:65:14:a2:85:93:ea:dc:38:64:ca:2f:06:84:91:
         af:22:8a:84:aa:36:48:b6:6f:bd:5f:4b:17:2c:81:7c:8d:7e:
         b6:a7:b6:9e:5b:40:70:a3:40:8d:2c:66:cd:9c:56:78:4d:93:
         20:f7:3f:2d:61:a1:61:5c:9e:dc:05:0c:b3:ff:7a:d7:6c:80:
         3b:84:76:22:9b:dc:db:e7:ac:23:78:75:7e:02:2a:bf:2e:db:
         18:7e:db:d5:00:2c:d9:16:9d:fd:2c:81:f5:b1:fa:a4:16:39:
         6a:68:97:28:31:63:38:c3:51:99:84:33:79:8e:f4:13:38:dd:
         df:55:88:78:c9:0e:89:ed:76:26:73:63:64:3d:50:24:43:f7:
         69:91:6d:41:23:3c:c3:26:fd:e5:2b:35:cd:75:13:3b:aa:9b:
         41:3b:0b:b2:23:d6:40:f5:82:57:31:9b:6c:5f:eb:2c:bd:00:
         a8:4d:78:4e:9a:45:75:71:fd:14:44:1a:cf:4d:47:d7:74:e9:
         94:a5:2e:16:a5:8a:c6:0d:bc:5d:95:c3:e4:5d:ae:21:37:f3:
         b0:07:c6:b3:9b:84:06:d3:06:d7:f4:cc:a3:ca:51:83:07:dd:
         0e:71:b0:a9:8f:4c:d7:c4:e9:c0:e6:ad:f0:37:ac:7a:bf:43:
         82:c3:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:05:56 2026 by rpki-client