Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32322d3232203d3e203238333730.roa
File:                     3138372e34352e3134382e302f32322d3232203d3e203238333730.roa (raw, json)
Hash identifier:          CuijewJbCGkauOwjZDw6eekkk/SnBRH1T1zzx8EIkoo=
Subject key identifier:   84:6D:E9:A3:FB:46:D4:F9:51:60:64:8C:49:7A:B1:67:E3:76:9D:57
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       0C8B8F32476CFCC786EC20FEB07334204B6A20CA
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32322d3232203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 22:03:22 +0000
ROA not before:           Wed 24 Jun 2026 21:58:22 +0000
ROA not after:            Wed 23 Jun 2027 22:03:22 +0000
asID:                     28370
IP address blocks:        187.45.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8b:8f:32:47:6c:fc:c7:86:ec:20:fe:b0:73:34:20:4b:6a:20:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 21:58:22 2026 GMT
            Not After : Jun 23 22:03:22 2027 GMT
        Subject: CN=846DE9A3FB46D4F95160648C497AB167E3769D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:2e:59:29:13:9e:78:0d:60:3c:cd:69:8a:
                    13:b5:a5:a3:a1:1c:3e:f5:81:2f:c7:44:8d:b4:93:
                    50:02:c3:c6:83:29:bd:1b:45:5d:fa:aa:70:40:16:
                    a2:17:45:69:b0:16:d5:b4:29:29:87:58:85:f3:c3:
                    82:a6:da:fd:63:3d:7e:ff:03:ea:d7:85:01:ee:8c:
                    b5:a9:b1:c6:70:28:b1:b8:46:5d:ba:a6:1e:10:fc:
                    c3:cf:71:f5:a4:89:05:07:f7:a2:4a:43:5f:5e:2f:
                    6e:5c:20:55:4d:ca:ac:1d:ba:da:fe:2a:ca:ae:0b:
                    7f:39:3e:d0:c2:59:3e:7b:af:e8:fb:07:0a:3d:c5:
                    ad:e7:7b:5a:0b:1a:61:14:66:03:02:97:0d:bc:64:
                    96:b7:36:f1:0a:5b:8e:5d:a7:fc:92:f7:18:2f:e5:
                    29:e8:f1:bd:92:d8:33:77:21:d2:e2:b2:61:5e:20:
                    91:7d:4d:55:21:cc:74:87:01:59:1c:d8:89:05:9b:
                    33:7c:54:ec:c8:86:11:05:4a:9f:86:8e:28:4f:d6:
                    33:f0:5f:04:e7:a5:26:a5:0d:d2:b7:d1:9c:67:90:
                    20:ed:9c:d4:14:58:6c:0b:fe:5e:2f:71:09:16:99:
                    35:56:3c:de:51:b3:ad:c6:4d:61:c6:8f:ec:67:f4:
                    ef:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:E9:A3:FB:46:D4:F9:51:60:64:8C:49:7A:B1:67:E3:76:9D:57
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134382e302f32322d3232203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:c5:fa:ca:34:c1:68:b3:19:8c:a5:69:eb:62:8a:6a:9b:
         8c:78:8e:eb:ad:64:70:28:7f:c1:30:9a:84:b5:ad:d8:6b:09:
         cc:97:d0:38:f3:c1:4f:70:bd:2f:75:93:5b:41:2e:20:1f:fa:
         69:e6:42:07:c0:2c:ee:74:c4:9d:70:49:81:76:42:15:6e:08:
         9d:4d:9c:6b:71:82:85:d1:c8:ac:db:52:ea:07:aa:99:50:ed:
         70:52:3b:ab:30:06:37:8e:5e:8f:57:12:99:6b:bc:80:da:36:
         df:1d:86:e0:c6:e3:fc:b4:26:ce:16:21:88:ed:f3:93:99:29:
         8d:57:3c:2e:dd:92:7b:8b:0e:4e:a5:fb:44:41:fb:1e:de:56:
         a6:42:3e:2d:31:81:8b:23:56:3a:4d:e4:69:0d:22:41:14:a6:
         56:9e:a8:9a:a6:3b:4e:31:16:c0:4d:f0:ce:88:b5:20:89:eb:
         aa:3c:c5:99:fa:24:7c:99:7f:77:65:53:60:12:ad:41:be:42:
         6c:df:18:1f:6e:b2:3f:cb:d7:70:24:d1:a1:49:15:89:58:cb:
         b5:81:cf:f6:9a:66:84:c0:e1:45:fe:d9:2d:b6:65:8e:dc:f1:
         56:dc:d6:79:54:a3:d5:7c:16:4a:44:3a:73:f0:f0:a9:46:c0:
         a0:59:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:34 2026 by rpki-client