Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          7AIPHzhdsTvf2AWWhRj3AnJfNq8Qsy8tPNQS9wVFq70=
Subject key identifier:   36:24:F8:60:5E:C3:01:E2:13:C3:DF:E0:DC:A5:EE:84:06:E6:5D:02
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       21049856663F312CDB3709B265DBABB2CF0AF6A7
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:42:39 +0000
ROA not before:           Tue 06 Oct 2026 11:37:39 +0000
ROA not after:            Tue 05 Oct 2027 11:42:39 +0000
asID:                     269463
IP address blocks:        2804:6504:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 16:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:04:98:56:66:3f:31:2c:db:37:09:b2:65:db:ab:b2:cf:0a:f6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:37:39 2026 GMT
            Not After : Oct  5 11:42:39 2027 GMT
        Subject: CN=3624F8605EC301E213C3DFE0DCA5EE8406E65D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:e2:64:79:3f:b8:41:b1:98:59:91:0b:01:
                    13:f0:7f:76:e9:ff:aa:94:f2:7f:28:52:9a:e8:e4:
                    48:ef:01:fd:82:c5:72:0d:b8:a7:5d:59:2f:94:08:
                    fe:f0:82:bc:6d:6f:cd:7a:08:da:44:a3:a4:8e:af:
                    b6:45:45:a0:8f:2f:0a:1f:ed:86:2c:38:75:14:9c:
                    fa:e9:1f:a0:be:f6:11:9b:05:a1:2b:1a:2f:23:36:
                    a3:eb:61:bc:1e:e6:51:7d:b7:20:8e:7a:25:84:3f:
                    9a:4c:ff:a1:39:22:ec:83:6e:1a:bb:f8:32:10:f0:
                    3b:55:cd:6c:a6:17:89:85:ed:41:c7:0b:57:5c:87:
                    71:94:b3:3e:d9:dc:51:d2:81:b7:c1:a6:41:04:c6:
                    65:24:26:7d:c6:c0:35:f6:2e:63:b1:7e:36:53:86:
                    dc:22:4a:8f:50:fe:8b:b8:2e:7c:79:06:66:d3:93:
                    18:84:05:47:d5:13:5f:f3:ab:17:43:47:30:17:57:
                    9e:cd:ad:36:59:2a:45:cd:ae:09:66:46:77:f2:48:
                    8f:24:58:10:9f:2c:08:9e:72:da:95:9d:c7:ee:95:
                    37:c8:c2:ce:2b:21:05:2f:83:b4:dd:c4:da:c2:cd:
                    e3:8b:35:de:a9:5a:28:bf:88:2f:64:3b:d5:2d:b9:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:24:F8:60:5E:C3:01:E2:13:C3:DF:E0:DC:A5:EE:84:06:E6:5D:02
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a313830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         c3:0c:c3:22:14:48:d1:24:11:70:1e:4c:c7:3e:2b:6a:f4:92:
         13:e9:b6:5d:a6:e5:40:65:af:29:01:2b:21:1e:99:cd:2a:1d:
         eb:71:94:c8:b1:7b:56:4e:0d:16:48:d3:7f:28:58:c2:72:5c:
         0c:7a:71:e6:d0:19:d4:54:da:82:93:ca:45:8e:62:fd:f3:b6:
         41:f5:57:30:41:6b:00:4c:ce:62:14:5b:2f:60:00:3a:7d:6a:
         18:89:54:29:9b:ff:57:d1:c3:9e:75:79:25:62:c4:d3:a9:78:
         8e:c7:36:c5:17:5c:4a:e6:1b:8a:93:de:28:e8:8b:47:72:fb:
         31:eb:c6:24:00:15:88:e7:d3:49:ab:04:7a:46:e1:3c:33:6d:
         8d:b9:53:52:4c:17:b4:29:36:db:36:ea:93:66:8c:55:13:8d:
         43:ce:fe:f3:50:38:f1:cf:ee:12:fc:21:44:70:76:aa:59:11:
         e1:5f:0a:aa:aa:2b:31:9e:34:02:fc:95:b5:3c:57:f8:25:37:
         7c:1d:82:b7:4d:27:44:0e:df:54:49:49:f7:49:9a:c7:4b:d9:
         3a:05:80:54:c7:2f:f1:eb:ea:64:5d:32:02:26:4d:3e:3d:3f:
         e2:be:b4:2b:95:6f:3d:56:c2:23:1f:5f:e9:27:49:6d:8d:b9:
         df:3c:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:06:00 2026 by rpki-client