Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          fGZj4FPpgKZLeVD5bPmULd/U0BoAiNPG0lqx3rFjsTA=
Subject key identifier:   82:E8:9A:05:FD:B1:CA:94:DE:F6:72:10:A3:A3:14:67:A3:21:4A:BC
Certificate issuer:       /CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
Certificate serial:       1DF21257538F4E983DBC1B1DA7906A92B7E9BF80
Authority key identifier: 96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Tue 16 Sep 2025 13:06:56 +0000
ROA not before:           Tue 16 Sep 2025 13:01:56 +0000
ROA not after:            Tue 15 Sep 2026 13:06:56 +0000
asID:                     274726
IP address blocks:        2804:92a8:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f2:12:57:53:8f:4e:98:3d:bc:1b:1d:a7:90:6a:92:b7:e9:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
        Validity
            Not Before: Sep 16 13:01:56 2025 GMT
            Not After : Sep 15 13:06:56 2026 GMT
        Subject: CN=82E89A05FDB1CA94DEF67210A3A31467A3214ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:f9:34:95:eb:a4:91:28:b3:0e:85:a5:b0:
                    9a:ab:c4:5f:e6:cf:19:b8:32:02:2a:34:80:9b:98:
                    9b:ce:4a:f2:c6:17:78:d0:6d:91:10:e8:fb:20:ad:
                    90:9e:48:9f:0e:84:0e:06:0a:42:42:73:99:c7:90:
                    5f:c8:4d:46:28:e0:60:48:f9:74:18:3b:60:90:f7:
                    a0:aa:16:45:41:ff:96:89:82:a7:36:4b:1b:25:8b:
                    95:44:7e:a6:3e:32:1f:04:d1:2d:0f:f3:c3:0b:6f:
                    0b:0f:cf:77:aa:68:77:b3:c2:09:58:ce:e9:9e:d7:
                    ff:e3:88:d2:6d:c2:67:62:89:1f:33:d9:81:1f:07:
                    2b:3d:d2:8a:7c:8d:23:7b:d1:b0:f0:56:f5:eb:e0:
                    8f:b8:f4:10:fb:5a:bf:d6:58:6c:72:73:4c:02:c6:
                    15:19:1d:e2:a6:a1:f3:c8:bf:39:c1:2c:69:d2:5c:
                    1b:3c:67:39:73:51:7e:ac:99:6e:63:ac:37:d6:77:
                    a7:71:5e:96:e9:cf:2c:a3:b3:4c:98:0b:97:f8:5a:
                    ea:29:85:7c:dd:0f:c5:b7:2c:94:93:8e:10:e2:1d:
                    8e:fb:c2:39:87:a8:47:36:01:5b:47:d0:a2:a2:8f:
                    a4:e3:25:40:b4:0a:00:0d:f0:71:16:5d:9a:c5:e5:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:9A:05:FD:B1:CA:94:DE:F6:72:10:A3:A3:14:67:A3:21:4A:BC
            X509v3 Authority Key Identifier:
                keyid:96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:13:0a:54:22:e0:34:11:a3:b4:c5:1f:fd:a6:9a:31:6e:2f:
         63:b6:98:17:82:0c:6e:00:5a:e0:92:8a:fd:91:df:a4:43:f4:
         7e:c9:7d:21:fb:da:97:52:84:a4:3d:4c:57:66:a6:db:d5:79:
         0b:d9:8a:fd:0b:13:16:ae:a3:67:44:ab:53:23:55:4a:c4:89:
         ff:49:8f:21:2d:a9:87:fa:b1:a6:72:f3:6f:a5:40:0d:73:6d:
         f4:b6:53:4e:9c:45:67:3d:48:ff:44:08:1e:ab:f9:78:2d:59:
         d7:71:0f:8e:d1:f0:7a:66:3b:4c:0b:03:92:16:d7:87:67:2e:
         f5:06:c7:20:e5:dd:3d:a7:d4:cc:a2:92:4f:7f:ff:15:c3:75:
         96:bd:14:0f:c8:82:ac:60:59:5d:83:2d:03:3f:52:ce:43:d5:
         c8:d2:bb:64:bb:00:c1:7e:ec:3b:8b:e4:74:74:5b:9d:6d:d6:
         38:68:ac:ed:ec:b6:96:37:00:5a:89:7b:6c:d7:60:c7:87:da:
         66:c1:1e:80:d3:41:51:ad:5b:fe:c6:2e:fe:47:78:3c:65:28:
         8e:d3:18:72:84:2c:60:bb:ee:9b:42:5b:5b:29:53:42:ac:0b:
         68:91:09:f2:eb:1c:d4:14:7a:82:78:6f:bb:68:f6:88:a8:fa:
         a2:35:f2:b3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHfISV1OPTpg9vBsdp5Bqkrfpv4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZCOUU3RDMxRTEzQUNDNEQ2RUFFQzQ2NTBGNTk2NjlD
OTBERTVFNzAeFw0yNTA5MTYxMzAxNTZaFw0yNjA5MTUxMzA2NTZaMDMxMTAvBgNV
BAMTKDgyRTg5QTA1RkRCMUNBOTRERUY2NzIxMEEzQTMxNDY3QTMyMTRBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+vk0leukkSizDoWlsJqrxF/m
zxm4MgIqNICbmJvOSvLGF3jQbZEQ6PsgrZCeSJ8OhA4GCkJCc5nHkF/ITUYo4GBI
+XQYO2CQ96CqFkVB/5aJgqc2Sxsli5VEfqY+Mh8E0S0P88MLbwsPz3eqaHezwglY
zume1//jiNJtwmdiiR8z2YEfBys90op8jSN70bDwVvXr4I+49BD7Wr/WWGxyc0wC
xhUZHeKmofPIvznBLGnSXBs8ZzlzUX6smW5jrDfWd6dxXpbpzyyjs0yYC5f4Wuop
hXzdD8W3LJSTjhDiHY77wjmHqEc2AVtH0KKij6TjJUC0CgAN8HEWXZrF5YchAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUguiaBf2xypTe9nIQo6MUZ6MhSrwwHwYDVR0j
BBgwFoAUlrnn0x4TrMTW6uxGUPWWackN5ecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC85NkI5RTdEMzFFMTNBQ0M0RDZFQUVDNDY1MEY1OTY2OUM5MERFNUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2QjlFN0QzMUUxM0FDQzRE
NkVBRUM0NjUwRjU5NjY5QzkwREU1RTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEkqhwMA0GCSqGSIb3DQEBCwUA
A4IBAQCBEwpUIuA0EaO0xR/9ppoxbi9jtpgXggxuAFrgkor9kd+kQ/R+yX0h+9qX
UoSkPUxXZqbb1XkL2Yr9CxMWrqNnRKtTI1VKxIn/SY8hLamH+rGmcvNvpUANc230
tlNOnEVnPUj/RAgeq/l4LVnXcQ+O0fB6ZjtMCwOSFteHZy71Bscg5d09p9TMopJP
f/8Vw3WWvRQPyIKsYFldgy0DP1LOQ9XI0rtkuwDBfuw7i+R0dFudbdY4aKzt7LaW
NwBaiXts12DHh9pmwR6A00FRrVv+xi7+R3g8ZSiO0xhyhCxgu+6bQltbKVNCrAto
kQny6xzUFHqCeG+7aPaIqPqiNfKz
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:39 2025 by rpki-client