Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          Tei4h3OLTlIorzW29X5jvOAap6YjxbXJQfhA3cpXSH0=
Subject key identifier:   C2:A8:D6:22:7A:34:15:F4:79:AD:C0:A5:63:CC:A0:81:7E:7D:93:E7
Certificate issuer:       /CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
Certificate serial:       4739186C3CF69B8E6B61C1B01480BBC3D0CCF256
Authority key identifier: 96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Tue 16 Sep 2025 13:06:36 +0000
ROA not before:           Tue 16 Sep 2025 13:01:36 +0000
ROA not after:            Tue 15 Sep 2026 13:06:36 +0000
asID:                     274726
IP address blocks:        2804:92a8:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:39:18:6c:3c:f6:9b:8e:6b:61:c1:b0:14:80:bb:c3:d0:cc:f2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
        Validity
            Not Before: Sep 16 13:01:36 2025 GMT
            Not After : Sep 15 13:06:36 2026 GMT
        Subject: CN=C2A8D6227A3415F479ADC0A563CCA0817E7D93E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:bf:3a:dd:90:86:af:b9:98:dd:ac:ea:37:
                    a5:97:a0:87:7f:c7:1a:1f:3f:ba:89:bd:3a:80:f2:
                    0a:da:94:6b:82:d4:fc:ec:48:ab:13:bf:7b:d5:f8:
                    04:af:8a:e1:6a:e6:93:fd:8a:cb:44:12:2d:58:5d:
                    ef:b6:e8:b0:9b:77:df:92:e0:7d:d6:53:38:a8:8a:
                    eb:15:df:f6:5c:c1:8a:3d:05:4a:a7:84:68:fd:b6:
                    76:80:41:6a:09:71:58:82:31:fe:f0:54:96:80:b2:
                    b3:ec:62:8e:44:11:57:31:ba:87:82:b0:14:49:3a:
                    dc:2f:37:56:9c:e2:00:b7:bc:5a:eb:52:3f:24:f0:
                    6a:28:4d:d2:d2:0f:fc:e2:21:53:76:9d:e0:d1:e1:
                    8b:76:46:50:0d:94:0a:84:9a:32:27:21:1e:d6:dc:
                    a5:99:50:90:b9:08:69:fc:a1:37:33:30:b6:9c:8b:
                    8d:83:fb:d7:1f:bb:ad:07:0f:b9:5b:53:d2:fd:c3:
                    1a:8c:c0:47:52:28:83:7e:65:22:9c:20:fc:3e:2b:
                    f3:1d:75:3f:0a:c7:dd:fe:e5:aa:0c:96:3a:01:9e:
                    a4:1f:53:22:63:6f:86:4a:59:35:d0:20:ec:34:32:
                    6c:58:cc:91:99:c1:c9:dc:c9:e4:5f:ef:33:06:b1:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:D6:22:7A:34:15:F4:79:AD:C0:A5:63:CC:A0:81:7E:7D:93:E7
            X509v3 Authority Key Identifier:
                keyid:96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:8b:f4:03:d4:9f:4d:3d:c1:39:bd:20:1a:fe:43:ba:05:
         60:8b:ae:0f:dc:f2:a2:15:aa:00:9a:89:c7:58:52:f1:b7:04:
         84:a8:66:0f:3b:c6:22:3a:47:f5:9d:3d:c4:e6:94:e5:0a:cd:
         47:9a:1d:22:8b:f3:c5:11:8c:e1:80:bf:44:76:09:07:bd:a6:
         42:48:bc:35:80:80:92:1f:07:7e:a8:57:b8:4c:ca:4e:22:6a:
         95:e3:62:8b:1b:2b:16:8a:69:e6:ca:1f:87:95:d2:d5:8e:04:
         63:c2:af:fe:0a:0d:7b:6f:54:98:df:4a:0e:b5:91:03:fa:e4:
         f8:2c:83:69:1d:2a:47:97:77:55:47:d6:89:57:70:9f:61:40:
         87:ba:6c:47:5d:b2:8b:45:1a:3e:73:21:c9:47:8d:d2:c5:d3:
         af:ab:77:d7:29:d5:d0:05:fd:b8:c1:45:4b:0d:74:c2:56:99:
         ae:b4:87:0c:20:7a:5e:ee:1a:92:66:d1:4a:f3:f1:c8:1c:f0:
         8d:a3:ce:77:65:26:a1:fb:f2:27:27:9a:fd:fe:7f:9d:df:c6:
         32:81:79:cd:1b:c3:73:8b:a2:63:3e:71:a7:5a:d2:b4:c7:1c:
         ed:c5:c5:89:94:81:7c:95:4e:e6:48:d5:b1:15:2a:bf:5c:c1:
         59:c5:b0:1c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURzkYbDz2m45rYcGwFIC7w9DM8lYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZCOUU3RDMxRTEzQUNDNEQ2RUFFQzQ2NTBGNTk2NjlD
OTBERTVFNzAeFw0yNTA5MTYxMzAxMzZaFw0yNjA5MTUxMzA2MzZaMDMxMTAvBgNV
BAMTKEMyQThENjIyN0EzNDE1RjQ3OUFEQzBBNTYzQ0NBMDgxN0U3RDkzRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksb863ZCGr7mY3azqN6WXoId/
xxofP7qJvTqA8gralGuC1PzsSKsTv3vV+ASviuFq5pP9istEEi1YXe+26LCbd9+S
4H3WUzioiusV3/ZcwYo9BUqnhGj9tnaAQWoJcViCMf7wVJaAsrPsYo5EEVcxuoeC
sBRJOtwvN1ac4gC3vFrrUj8k8GooTdLSD/ziIVN2neDR4Yt2RlANlAqEmjInIR7W
3KWZUJC5CGn8oTczMLaci42D+9cfu60HD7lbU9L9wxqMwEdSKIN+ZSKcIPw+K/Md
dT8Kx93+5aoMljoBnqQfUyJjb4ZKWTXQIOw0MmxYzJGZwcncyeRf7zMGsQi7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwqjWIno0FfR5rcClY8yggX59k+cwHwYDVR0j
BBgwFoAUlrnn0x4TrMTW6uxGUPWWackN5ecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC85NkI5RTdEMzFFMTNBQ0M0RDZFQUVDNDY1MEY1OTY2OUM5MERFNUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2QjlFN0QzMUUxM0FDQzRE
NkVBRUM0NjUwRjU5NjY5QzkwREU1RTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEkqgQMA0GCSqGSIb3DQEBCwUA
A4IBAQB2fIv0A9SfTT3BOb0gGv5DugVgi64P3PKiFaoAmonHWFLxtwSEqGYPO8Yi
Okf1nT3E5pTlCs1Hmh0ii/PFEYzhgL9EdgkHvaZCSLw1gICSHwd+qFe4TMpOImqV
42KLGysWimnmyh+HldLVjgRjwq/+Cg17b1SY30oOtZED+uT4LINpHSpHl3dVR9aJ
V3CfYUCHumxHXbKLRRo+cyHJR43SxdOvq3fXKdXQBf24wUVLDXTCVpmutIcMIHpe
7hqSZtFK8/HIHPCNo853ZSah+/InJ5r9/n+d38YygXnNG8Nzi6JjPnGnWtK0xxzt
xcWJlIF8lU7mSNWxFSq/XMFZxbAc
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:48 2025 by rpki-client