Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          hHx/fX90FBLRYTzxmaSSYhPVYEXCJQ2a2qmkzvz5VbE=
Subject key identifier:   06:60:B3:C1:FA:32:93:7F:71:DC:E8:63:87:7D:17:4A:5A:57:84:CD
Certificate issuer:       /CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
Certificate serial:       0E09FB9C3CC173621D94D8DC40643E25C98DAFD6
Authority key identifier: 96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Tue 16 Sep 2025 13:07:01 +0000
ROA not before:           Tue 16 Sep 2025 13:02:01 +0000
ROA not after:            Tue 15 Sep 2026 13:07:01 +0000
asID:                     274726
IP address blocks:        2804:92a8:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:09:fb:9c:3c:c1:73:62:1d:94:d8:dc:40:64:3e:25:c9:8d:af:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
        Validity
            Not Before: Sep 16 13:02:01 2025 GMT
            Not After : Sep 15 13:07:01 2026 GMT
        Subject: CN=0660B3C1FA32937F71DCE863877D174A5A5784CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:c4:c3:27:b9:03:9e:52:ee:23:0c:71:d9:
                    8b:ab:d3:f2:ff:a8:64:7d:34:8e:85:74:30:4e:c1:
                    ff:ed:03:10:2d:4f:48:a8:91:44:72:68:a1:82:2c:
                    2f:1a:b5:8a:ca:d1:fe:3e:a3:7e:f1:5f:1e:19:e9:
                    59:f9:69:cb:1b:8d:ee:7e:21:d6:0c:89:5f:4e:a3:
                    c1:6d:63:00:90:9d:3d:6e:86:2a:e9:dd:ac:29:90:
                    31:e1:6d:28:29:19:4f:8e:14:97:43:dd:ca:1b:41:
                    83:49:d0:97:88:d2:a9:1d:c9:24:a2:21:bc:f3:29:
                    a7:bc:1f:8c:dd:f2:4e:93:fa:92:6f:c1:dd:a6:85:
                    9f:9b:98:1d:cc:f6:a7:a3:1e:b9:13:0c:0f:03:8d:
                    84:7d:91:50:24:29:4f:2d:ef:f7:cc:46:1c:4e:4c:
                    a3:24:7b:7c:78:27:67:e3:f3:73:c5:3f:ed:b6:da:
                    fa:94:16:69:83:67:8f:c0:2f:c7:ee:37:b2:79:b3:
                    08:fe:4c:34:e3:86:8f:f0:62:dc:5a:c2:0e:67:18:
                    9c:9b:11:be:ab:8e:e6:dd:37:01:13:f7:e9:d1:c8:
                    5d:f7:a5:5a:5c:90:75:b2:44:d2:9a:bb:63:9d:39:
                    46:bf:01:96:37:f2:01:00:9d:da:0b:52:f0:61:87:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:60:B3:C1:FA:32:93:7F:71:DC:E8:63:87:7D:17:4A:5A:57:84:CD
            X509v3 Authority Key Identifier:
                keyid:96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:51:3c:ab:a6:4f:b0:b1:46:7d:2e:ea:7b:77:a6:03:24:35:
         d8:1b:6d:40:a6:c2:4b:cf:d2:70:16:3d:e4:9d:13:b2:65:d8:
         b3:34:14:f0:bd:13:a8:65:c7:e1:5f:b9:3c:bf:be:02:82:f0:
         9e:47:b8:e2:cb:f2:8f:2d:de:48:2d:f6:42:65:06:bf:58:a8:
         a5:cf:65:0f:20:c2:bf:cf:d7:f2:88:b8:79:3e:1d:a4:65:93:
         0c:bc:af:52:7b:a6:77:72:cb:9e:e1:f8:9a:bf:5d:7b:3e:65:
         79:36:eb:f1:ff:62:5f:06:8d:9c:63:3c:d8:42:f0:c1:7d:e4:
         fa:f4:9e:7d:e6:95:de:5f:9b:f0:f1:01:77:6d:a9:ec:fc:4b:
         9e:1f:0a:97:70:13:4f:a0:39:62:2d:97:d2:68:ea:ac:51:33:
         b6:a5:5d:8f:77:ca:74:e0:60:61:c7:1b:f0:6a:82:99:0f:04:
         42:b3:ba:7b:f9:01:4d:c9:ca:20:f4:ac:c4:27:6f:8d:1d:97:
         59:c8:d8:f7:8d:c3:b0:2e:39:42:77:38:81:f0:55:b6:c5:86:
         8d:b5:b1:8f:2e:98:2a:e8:18:c7:87:49:2b:b4:0c:25:e5:61:
         a5:ac:2b:53:72:21:4c:46:bd:0a:e8:26:65:fd:8a:6a:25:9f:
         51:b4:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:01 2025 by rpki-client