Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134372e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3134372e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          H1G3j1kLWVxI0zs6Er0vRGR2n78sfvn+9Z4hCI9142o=
Subject key identifier:   F1:4B:39:10:1E:83:9F:61:B3:18:C5:6F:2D:16:54:1E:27:98:1B:F4
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       5DCF6339AFCB8E6CE2C5FE48F308542492952669
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134372e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:25 +0000
ROA not before:           Wed 24 Jun 2026 22:58:25 +0000
ROA not after:            Wed 23 Jun 2027 23:03:25 +0000
asID:                     28370
IP address blocks:        189.84.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cf:63:39:af:cb:8e:6c:e2:c5:fe:48:f3:08:54:24:92:95:26:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:25 2026 GMT
            Not After : Jun 23 23:03:25 2027 GMT
        Subject: CN=F14B39101E839F61B318C56F2D16541E27981BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:92:fd:91:88:a6:a4:9a:83:9a:d2:74:05:
                    54:3c:8b:5f:84:f4:88:a1:26:fa:54:06:a2:23:23:
                    57:cb:96:7d:09:40:18:1d:f1:7c:b4:bd:eb:22:d9:
                    dc:e9:24:a3:bb:68:9d:7e:46:ba:b3:f9:24:b9:ac:
                    36:2f:50:c1:2f:26:6c:6d:c9:d8:1b:94:69:67:09:
                    87:94:6d:cb:4d:a7:3a:73:8d:91:87:44:81:d3:c8:
                    78:d0:d6:94:67:7d:ab:82:0e:dc:20:c8:96:24:07:
                    bc:f6:5f:22:21:2e:f8:f4:ab:0d:3c:59:5e:a4:25:
                    f0:b4:6b:89:56:41:c1:2b:74:05:6a:8c:64:26:9c:
                    8e:29:05:19:6c:39:14:53:f7:1b:82:74:f7:b5:82:
                    ee:f4:86:71:e5:21:ee:fe:e1:2a:7a:19:4f:3d:c8:
                    5e:6d:e0:a0:d0:d0:1e:64:a9:d9:db:c7:66:35:22:
                    46:bb:bc:2c:15:90:0b:6c:a4:cb:06:a2:3b:32:7a:
                    d2:af:68:7a:91:ff:f9:49:95:10:39:14:cf:4a:91:
                    1e:bb:1a:5e:28:a0:f5:f3:fe:98:09:76:64:bc:be:
                    d9:ea:1a:22:9e:fa:60:a7:82:cc:65:a8:66:3d:c7:
                    46:34:93:f3:cb:0d:ee:15:9b:56:43:91:2b:fb:97:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:39:10:1E:83:9F:61:B3:18:C5:6F:2D:16:54:1E:27:98:1B:F4
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3134372e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:98:c4:aa:5e:fd:18:e1:45:f4:8c:05:06:14:30:15:8e:66:
         95:ce:4e:67:2b:ca:3a:92:8a:b8:76:f6:d2:05:1d:07:5a:0a:
         f1:ba:44:8a:6d:36:07:4c:2b:97:07:6d:a9:78:21:fa:61:55:
         df:aa:e4:a5:91:5e:3c:bc:c0:a1:44:d6:da:6a:b4:3c:77:e4:
         f4:1a:93:1a:03:01:fb:48:96:77:f8:b6:37:c2:58:10:c9:1c:
         44:f4:f0:df:38:7e:01:20:18:dd:d2:27:d7:77:c5:a7:24:c7:
         b1:ad:2d:76:d1:25:a5:87:ef:39:6b:4d:33:53:07:14:ec:2e:
         13:88:c0:cc:b6:7e:2f:4a:28:5b:e4:51:fa:9f:6c:ec:1a:39:
         86:74:de:04:99:cd:c3:41:dd:51:2c:ec:b4:3f:0b:4d:91:8e:
         99:85:c2:fc:e2:da:8e:b2:eb:d6:11:79:92:41:fb:ef:3d:da:
         56:3a:08:90:65:36:35:28:79:3f:2d:05:c6:f4:ec:16:a5:59:
         2b:59:62:ce:28:8a:48:df:10:f6:2c:8b:18:a6:89:cc:b8:9b:
         c4:c9:1f:fb:d6:97:22:5a:1c:e9:aa:7c:a9:98:54:92:79:d5:
         a4:0e:1f:73:4d:a8:54:13:93:ec:7e:67:ad:bc:1a:d7:f6:9e:
         1d:92:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:51 2026 by rpki-client