Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          PwIw1DaHG3TBvZrrrip0RnOBWnoA7kgwzSvDbQae/e8=
Subject key identifier:   B6:ED:61:5F:95:9E:8E:92:65:DB:9D:8A:3B:54:66:66:AE:EB:5D:7C
Certificate issuer:       /CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
Certificate serial:       79647852554F831A6C93EE748048E19AA301725E
Authority key identifier: 96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Tue 16 Sep 2025 13:07:04 +0000
ROA not before:           Tue 16 Sep 2025 13:02:04 +0000
ROA not after:            Tue 15 Sep 2026 13:07:04 +0000
asID:                     274726
IP address blocks:        2804:92a8:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:64:78:52:55:4f:83:1a:6c:93:ee:74:80:48:e1:9a:a3:01:72:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7
        Validity
            Not Before: Sep 16 13:02:04 2025 GMT
            Not After : Sep 15 13:07:04 2026 GMT
        Subject: CN=B6ED615F959E8E9265DB9D8A3B546666AEEB5D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:11:8e:7a:e2:bf:a1:b2:58:cf:94:ba:7e:
                    01:4a:6a:bb:8f:4d:44:5f:89:6c:64:92:ea:b3:dd:
                    dd:18:86:fa:e0:1f:77:08:e5:b1:3e:db:78:6e:ea:
                    c2:2b:4f:6e:32:ce:6c:d1:a5:34:3e:4e:c9:8f:f3:
                    32:55:50:d2:4b:42:c6:c9:28:ab:98:76:1d:d5:f5:
                    53:b4:3f:07:ad:b2:2d:03:71:0b:49:4a:be:30:86:
                    7c:2e:1d:46:92:84:50:7b:a8:0a:00:14:68:4f:66:
                    43:87:b1:ea:f8:8c:63:3a:fb:d4:80:03:b4:96:d4:
                    d5:53:dc:8e:71:2a:f9:57:c0:d0:ac:04:4d:06:cf:
                    ff:f2:f9:93:5f:9a:92:f1:9b:a6:7c:df:aa:0e:12:
                    99:9b:29:7d:ab:e4:23:58:4c:fb:4b:b9:f7:13:6c:
                    42:7c:2c:d2:08:af:3e:32:1d:c7:1a:cb:91:b8:b9:
                    e4:2b:5f:36:b9:42:b1:39:c9:20:bc:46:9a:7e:ce:
                    4c:11:c3:4a:b9:ed:14:63:7a:8c:b1:d4:2b:90:81:
                    23:89:36:73:3f:1e:06:06:2c:b1:d2:24:56:57:44:
                    50:ad:a6:58:c7:60:37:21:87:79:bf:39:1d:57:76:
                    7b:65:e6:d8:fa:d7:d2:c6:d5:cc:f7:2f:6d:57:96:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:61:5F:95:9E:8E:92:65:DB:9D:8A:3B:54:66:66:AE:EB:5D:7C
            X509v3 Authority Key Identifier:
                keyid:96:B9:E7:D3:1E:13:AC:C4:D6:EA:EC:46:50:F5:96:69:C9:0D:E5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96B9E7D31E13ACC4D6EAEC4650F59669C90DE5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a393030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:54:c3:70:b7:a8:4f:b6:98:c3:84:b7:5a:b0:a4:9b:6d:
         db:68:11:4c:f3:26:10:d0:6b:f1:14:f3:25:58:2f:cb:ed:f4:
         bf:dc:72:20:dc:10:08:17:1f:db:20:bc:11:a8:34:06:b4:f0:
         18:79:ba:17:f7:8d:d1:cc:24:86:b0:86:dd:4b:a3:dc:f3:65:
         68:02:65:a5:a5:53:25:d5:97:6d:b1:03:08:7a:e3:a3:3b:26:
         5c:59:04:6d:8a:72:70:f7:c3:1e:ad:4e:a1:02:50:5d:b2:ea:
         72:50:f8:07:75:ab:c3:bb:f2:22:35:fc:36:07:81:37:32:41:
         b2:5f:f9:9f:60:24:72:c5:14:9f:63:27:a4:d6:9c:b1:b5:d8:
         d4:8a:62:68:28:bb:8d:1a:18:cc:c8:7a:4f:bf:5a:cd:e7:58:
         88:82:85:a2:e4:fc:4d:d8:c9:a3:d6:e8:6d:4d:4d:a7:60:2f:
         51:d6:45:20:dd:06:99:6d:2d:fb:0e:f7:0c:3d:db:a4:43:59:
         43:5c:e6:aa:2e:3d:92:f8:5d:9e:32:d7:6c:12:81:2a:58:9c:
         02:ce:59:55:df:08:e8:6c:7b:8f:ff:a5:ac:aa:91:b6:c1:32:
         ac:73:3b:63:8a:2e:4e:8d:bc:64:cc:18:b6:37:3b:73:1c:80:
         ec:37:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:06:46 2025 by rpki-client