Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32322d3232203d3e203238333730.roa
File:                     3138392e38342e3134342e302f32322d3232203d3e203238333730.roa (raw, json)
Hash identifier:          3N/84C3NAIjXWID914YxncFhXyg3re2wVYbNueIfZfI=
Subject key identifier:   37:CB:70:BA:AD:77:F2:C4:12:C5:92:32:CC:C0:E3:9C:31:25:E1:98
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       23DB564CC8D364BA0C84EA408DC53926CC75EE48
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32322d3232203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:26 +0000
ROA not before:           Wed 24 Jun 2026 22:58:26 +0000
ROA not after:            Wed 23 Jun 2027 23:03:26 +0000
asID:                     28370
IP address blocks:        189.84.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:db:56:4c:c8:d3:64:ba:0c:84:ea:40:8d:c5:39:26:cc:75:ee:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:26 2026 GMT
            Not After : Jun 23 23:03:26 2027 GMT
        Subject: CN=37CB70BAAD77F2C412C59232CCC0E39C3125E198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:db:9a:b3:d3:d4:0a:52:74:e5:9e:6d:b3:
                    0e:d6:ef:55:08:45:af:cc:7c:33:12:58:e2:16:fe:
                    9f:5b:29:4d:bd:3b:dd:97:6a:60:dc:0a:00:b5:b5:
                    31:a6:30:21:36:83:4c:b8:08:a1:50:92:8d:bf:03:
                    be:e3:ab:5d:a0:32:61:52:b6:bf:b0:f2:36:f7:90:
                    0c:e5:f5:30:4c:4a:79:09:aa:44:8c:a2:0a:43:31:
                    bf:f9:f5:86:8b:cd:a5:4e:9b:d4:18:39:2b:9a:a7:
                    04:32:d9:59:3c:77:72:c0:af:7c:21:5c:ee:c7:2d:
                    c4:a2:87:3c:99:9c:40:c4:bb:60:35:94:06:bb:9e:
                    67:4f:11:77:f4:e5:18:47:8b:c1:6e:18:db:cd:8c:
                    c3:16:11:a3:e2:c8:b0:a3:10:01:40:1e:e3:9f:a3:
                    85:f0:03:c9:e7:34:6d:04:86:b5:9f:88:16:f0:b9:
                    b8:6d:d9:b5:e1:c1:00:0d:e7:55:c1:34:cd:8e:bf:
                    b3:7b:8d:1f:42:29:72:5d:fa:57:41:b3:f0:ac:fa:
                    76:5f:c8:08:14:48:ce:bc:89:07:39:43:d5:3f:9d:
                    7d:58:cf:fa:e2:90:ee:f5:53:dd:86:28:74:6d:41:
                    87:36:c1:57:04:6c:83:d8:ad:68:a1:d9:e4:15:92:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CB:70:BA:AD:77:F2:C4:12:C5:92:32:CC:C0:E3:9C:31:25:E1:98
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134342e302f32322d3232203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:08:c0:9c:af:b2:1c:d0:ed:e3:7e:5f:5e:da:07:c1:67:
         36:fd:83:50:cf:b5:cf:5d:0d:e8:eb:2c:2a:35:41:4e:95:56:
         73:bf:b2:f6:12:54:84:bd:10:90:4e:a0:fb:09:84:5f:7e:a0:
         56:22:71:b6:1c:9b:48:eb:40:cb:8b:7e:de:de:52:af:16:95:
         52:0e:84:f7:b6:d1:70:82:07:b3:07:ac:7f:4e:47:f2:de:4f:
         6b:ba:dc:37:e6:69:91:66:b6:24:8e:47:ee:b4:d3:ae:2d:83:
         37:b8:7b:85:50:5b:af:db:bc:65:1a:77:c2:9c:b1:ac:a5:fb:
         83:0d:3e:32:66:ba:0c:99:5d:26:b4:0a:3c:d4:6c:40:ef:e7:
         fb:2b:48:09:8b:07:ab:1a:bf:e1:df:0b:86:7e:67:c1:39:57:
         21:34:f9:77:fe:38:c4:59:b5:05:fb:2c:02:d9:09:4e:8a:07:
         16:09:26:7a:17:9b:c2:ec:98:2f:dd:61:2a:07:b3:50:da:fe:
         d1:6a:cb:36:15:ed:c9:d7:ad:3f:99:89:c3:26:f6:13:f4:4b:
         95:45:54:02:c7:58:1f:0d:16:31:84:a0:85:be:3d:bd:fc:d6:
         36:c8:86:1d:71:2b:81:d8:fe:1d:ab:11:42:d1:28:35:e7:50:
         10:51:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:31:37 2026 by rpki-client