Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135322e302f32332d3233203d3e203238333730.roa
File:                     3138392e38342e3135322e302f32332d3233203d3e203238333730.roa (raw, json)
Hash identifier:          lM8CxCjqJHlrLfjVF7A/ufPV1IsiMu38lF2KPr3jmTE=
Subject key identifier:   D2:31:50:84:68:78:0A:40:EA:52:FF:3F:B6:65:12:A2:3B:EC:76:EC
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       621ED13A5600E9EAF59CAA1B4E119A1AB70B5A17
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135322e302f32332d3233203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:25 +0000
ROA not before:           Wed 24 Jun 2026 22:58:25 +0000
ROA not after:            Wed 23 Jun 2027 23:03:25 +0000
asID:                     28370
IP address blocks:        189.84.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 14:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1e:d1:3a:56:00:e9:ea:f5:9c:aa:1b:4e:11:9a:1a:b7:0b:5a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:25 2026 GMT
            Not After : Jun 23 23:03:25 2027 GMT
        Subject: CN=D231508468780A40EA52FF3FB66512A23BEC76EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:f5:51:b7:b6:6e:af:77:5e:34:3b:b5:87:
                    dd:c6:16:09:d9:f7:3f:fe:25:e0:9a:50:c8:d3:11:
                    9d:d9:95:34:9d:96:ea:92:a9:a9:54:67:47:f0:ea:
                    c3:42:1e:62:55:e0:4e:db:ab:00:32:b3:e6:74:3e:
                    e1:df:2e:24:bf:c5:7a:15:8f:ba:7d:15:b5:b1:99:
                    00:b3:15:12:9a:10:1c:d5:84:e1:06:50:11:5e:14:
                    df:4e:f8:c2:d3:75:4b:5e:99:52:a8:54:6a:b6:7a:
                    2a:41:c6:3d:cf:e6:cd:4a:db:de:24:2c:bf:d8:15:
                    5e:88:e3:b0:50:f4:f9:cd:c6:30:1a:2c:f9:50:5f:
                    ab:c5:62:df:b4:83:4d:c4:e7:bf:55:17:ae:17:dc:
                    40:7f:f2:d7:56:45:20:eb:77:9d:8a:75:f5:0e:0c:
                    7a:67:68:6f:ee:84:45:71:e8:b2:0b:df:f5:bd:58:
                    5d:32:6a:7f:0b:58:c9:7b:17:60:f7:f4:1d:b3:93:
                    4c:0b:dc:3d:65:0b:65:0a:72:97:61:b1:29:df:49:
                    33:94:10:ad:03:ab:42:77:ba:33:5a:00:0c:4f:ff:
                    5c:5b:30:69:a6:c1:37:ee:b9:f9:af:57:73:8f:18:
                    5e:0f:68:ab:9f:2d:0c:20:34:6f:9f:f1:8d:d8:e4:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:31:50:84:68:78:0A:40:EA:52:FF:3F:B6:65:12:A2:3B:EC:76:EC
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135322e302f32332d3233203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:b8:06:65:b4:f9:c5:99:5b:d7:39:70:33:35:6b:98:54:
         37:37:3f:9a:e7:38:68:f3:83:e8:df:33:6c:09:dd:2c:10:99:
         7c:6c:bd:7e:b9:df:13:47:4a:57:d3:9d:77:7d:22:7f:0c:f7:
         4e:be:65:e8:73:75:d4:e9:f8:58:06:d6:ac:2f:9c:0b:d5:34:
         3b:b3:3e:3a:42:f1:df:79:d4:18:63:84:2f:60:76:e4:47:6e:
         38:65:8d:47:8e:91:a9:50:50:6b:cc:f5:e8:61:a1:74:79:42:
         de:90:95:32:63:12:b9:0f:fe:6c:aa:88:18:e4:c1:10:31:cc:
         ac:94:96:4b:84:28:9a:1c:0e:a0:c3:85:f1:14:5b:f9:99:41:
         d3:42:2f:3b:00:3f:60:dc:aa:f6:27:ab:ec:08:bc:f2:38:21:
         fd:f1:0e:e7:81:de:56:2f:1f:7e:d9:c1:f0:66:de:b5:92:7f:
         6e:e3:94:17:b3:81:2e:d2:15:03:be:49:89:0c:92:cc:7f:b0:
         e2:84:80:a7:80:f6:c9:3f:d6:f8:82:92:46:b9:1b:86:9a:85:
         09:c8:05:92:14:86:c3:ea:87:9e:c9:ef:ea:6b:12:e9:b4:b8:
         4c:d3:89:3c:f5:75:5e:dd:19:28:60:5f:a8:f6:ab:3c:23:e9:
         62:f7:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:37:33 2026 by rpki-client