Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          RcG+cJ3mKinsbqRspIOcEalfwC8GZlfTZzjb+nUyZro=
Subject key identifier:   28:6E:E0:49:E2:62:B8:10:92:17:7F:13:4C:B7:0E:2A:32:06:8B:B2
Certificate issuer:       /CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
Certificate serial:       27F1CFAF1C2E97D4B138DB2EF08B222520BAC737
Authority key identifier: 96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Tue 16 Sep 2025 13:06:47 +0000
ROA not before:           Tue 16 Sep 2025 13:01:47 +0000
ROA not after:            Tue 15 Sep 2026 13:06:47 +0000
asID:                     274726
IP address blocks:        2804:92a8:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f1:cf:af:1c:2e:97:d4:b1:38:db:2e:f0:8b:22:25:20:ba:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
        Validity
            Not Before: Sep 16 13:01:47 2025 GMT
            Not After : Sep 15 13:06:47 2026 GMT
        Subject: CN=286EE049E262B81092177F134CB70E2A32068BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:4d:1f:87:38:e5:44:2c:e6:3c:57:64:19:
                    1b:af:38:df:17:d5:be:f9:fa:91:37:4a:2c:46:53:
                    87:d1:80:1d:d3:c3:ca:33:27:36:04:dd:77:2b:fc:
                    b5:e5:42:ef:bb:25:07:d4:ce:60:df:da:37:74:17:
                    73:33:97:47:c0:af:b5:ed:29:ba:ac:3b:b6:07:c0:
                    5f:7b:f5:40:df:a9:8c:77:f0:6f:8b:3f:2e:10:b7:
                    a9:06:f7:2c:48:ed:1b:1b:2f:54:e0:5f:58:ee:0f:
                    9b:e7:36:ba:d1:ab:c8:1f:91:e9:41:54:23:ec:88:
                    2c:b2:0a:1b:09:7c:c5:e6:2e:ee:f0:62:7c:a4:bb:
                    a9:bb:2c:8b:95:63:22:c0:0b:b9:ed:c8:82:86:17:
                    d4:3d:25:c5:a5:f6:86:9e:cc:ee:9f:08:ec:30:cb:
                    48:2a:a0:e7:85:09:8f:74:3e:a5:6a:54:d8:2c:56:
                    db:d9:5d:1f:85:59:47:a3:98:75:e5:47:c2:de:63:
                    6d:71:96:03:aa:b7:9e:ae:13:6f:b3:d4:6f:61:8c:
                    b8:ce:47:c9:15:36:67:6b:08:9f:b8:41:f8:be:f5:
                    49:3f:db:d8:b9:80:06:1a:34:5f:ae:9a:c0:57:47:
                    cd:8e:2b:2e:7c:90:72:1f:71:d8:f3:3f:a7:ee:5a:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6E:E0:49:E2:62:B8:10:92:17:7F:13:4C:B7:0E:2A:32:06:8B:B2
            X509v3 Authority Key Identifier:
                keyid:96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a353030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:3f:42:c9:fa:31:6f:d8:1e:a6:9e:74:27:dd:45:1a:d7:
         4f:77:2c:d0:8c:b2:c4:2e:fb:79:3b:97:9c:93:5f:2e:75:72:
         3e:ce:be:db:97:69:3b:d2:19:97:7b:a2:8a:51:ec:1d:a5:5c:
         e5:ce:fd:40:22:c6:20:2d:4e:1e:fc:85:f5:7f:90:5e:14:32:
         65:0b:2a:cd:cd:fd:b9:25:d6:74:ac:b0:21:57:24:f6:eb:92:
         4e:26:63:ec:2a:35:d1:05:c1:c5:f4:07:c8:13:34:b8:9f:15:
         9b:96:15:36:5c:d7:59:d7:26:7c:00:f9:2b:fc:db:cb:c4:19:
         19:9e:17:9d:99:12:07:16:09:05:ef:26:a1:61:de:ad:5e:d3:
         1d:11:ec:d4:6a:d1:2d:ab:93:f7:e5:1e:1c:5e:be:a1:68:ae:
         b3:28:71:04:94:3f:e4:68:45:60:26:10:b8:38:5e:d0:c9:98:
         98:2f:42:0b:b9:77:fe:d9:f9:b0:01:13:7e:bb:1e:b8:a1:53:
         88:d7:b9:da:18:f4:82:83:b0:ce:64:b3:6b:d0:23:14:b5:b5:
         b4:15:82:7f:d4:7d:34:c6:26:f7:fe:5f:5d:cd:81:cd:f7:e9:
         92:7c:b2:fc:98:91:a1:e2:89:89:e9:ee:b9:16:d2:63:37:44:
         2e:ab:8e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:32 2025 by rpki-client