Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135372e302f32342d3234203d3e203238333730.roa
File:                     3138392e38342e3135372e302f32342d3234203d3e203238333730.roa (raw, json)
Hash identifier:          Rse7BK0dMTkt2obcWenBKJ3eAq0hTcny4WVrlrbZQD0=
Subject key identifier:   28:99:7C:A6:41:0F:65:C9:27:07:8A:3A:33:39:F5:B3:53:48:42:F2
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       10701B18ACA172F95D847B3F58F0CA1927505B95
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135372e302f32342d3234203d3e203238333730.roa
Signing time:             Wed 24 Jun 2026 23:03:26 +0000
ROA not before:           Wed 24 Jun 2026 22:58:26 +0000
ROA not after:            Wed 23 Jun 2027 23:03:26 +0000
asID:                     28370
IP address blocks:        189.84.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:1b:18:ac:a1:72:f9:5d:84:7b:3f:58:f0:ca:19:27:50:5b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 22:58:26 2026 GMT
            Not After : Jun 23 23:03:26 2027 GMT
        Subject: CN=28997CA6410F65C927078A3A3339F5B3534842F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:50:45:d3:9c:4e:e6:22:11:b9:a6:d8:fc:
                    99:95:84:1d:4a:a7:ee:e5:d9:33:96:1c:a5:53:8a:
                    f0:4b:24:d9:91:81:a4:0b:15:ab:d9:21:36:59:29:
                    ef:1d:9f:9d:1e:93:4a:c5:f7:ba:e7:4e:b5:f6:74:
                    ca:a0:3f:1d:ea:bb:78:05:1f:31:6e:9a:32:04:56:
                    3d:52:2f:d4:26:ad:2f:25:af:86:8d:4e:d9:6f:63:
                    bc:02:a7:38:7e:aa:24:a8:ca:81:6a:68:10:02:4b:
                    b0:e1:d1:22:9f:95:2a:7c:5f:ce:7c:4f:40:c2:4a:
                    c2:aa:be:3a:08:f8:f6:1f:78:d9:55:54:eb:60:09:
                    f6:be:f7:ff:07:be:cb:37:d8:69:74:44:16:25:75:
                    a6:21:eb:f9:59:ab:58:62:bc:bb:23:45:0e:23:cc:
                    8c:ab:a7:88:74:8b:05:e9:58:7b:b9:85:b1:07:22:
                    bf:67:b8:5a:d9:e6:c3:cb:df:b1:a4:54:b7:c0:70:
                    be:18:97:53:9e:67:82:56:54:1a:21:d9:e8:6e:df:
                    aa:a8:e7:19:5b:17:3d:7d:c7:91:fc:d3:a3:dd:ce:
                    66:59:10:e0:d3:af:a2:0d:36:35:7f:d1:03:58:d0:
                    be:37:3a:8a:a5:3e:d8:b2:cd:67:ec:9e:db:dc:03:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:7C:A6:41:0F:65:C9:27:07:8A:3A:33:39:F5:B3:53:48:42:F2
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138392e38342e3135372e302f32342d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0c:98:f2:85:51:36:7c:82:41:4b:bd:37:af:5a:6d:9d:13:
         c5:da:f5:b5:c0:34:d8:43:f1:67:e9:0f:1a:34:52:07:9a:58:
         1b:05:2f:98:02:4e:74:80:0f:93:77:65:af:4d:01:de:a9:3d:
         e9:d8:05:9c:31:94:32:f0:89:f3:ac:fd:b0:d9:16:9a:95:49:
         6e:4f:4a:05:90:67:3f:8a:95:ea:2b:a3:98:c3:28:61:f1:e3:
         a2:64:5a:20:a1:eb:5b:f5:bd:06:d7:03:7e:40:c7:f3:5c:3e:
         78:95:b6:e6:af:45:57:28:3b:96:10:c9:ac:1f:a9:1e:91:23:
         0e:2f:75:63:f5:7e:5d:1e:dd:2a:fe:38:19:48:93:d1:a7:52:
         56:59:60:3b:31:79:91:a7:08:b7:87:54:28:28:6a:34:f2:31:
         26:3a:d7:52:0b:e2:50:84:a2:cc:2a:b6:ea:c8:64:43:3e:ea:
         9b:17:4a:98:47:cd:2c:34:2b:41:ae:f8:ff:72:dc:39:22:5c:
         21:f0:0f:de:2f:a8:e7:82:78:41:07:58:1e:21:3c:d0:8f:dc:
         0f:d0:bb:36:9e:d2:53:e0:38:b6:63:28:40:1a:bf:3f:09:79:
         cb:9f:ee:ad:13:32:2d:f3:68:a7:ea:7a:12:25:d7:34:16:fb:
         2d:db:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:28 2026 by rpki-client