Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          S6MkgWFjh2fCjzHSouAHNAvfU2tX02pJI7RsBjQMMz8=
Subject key identifier:   09:F4:3A:EB:50:45:83:BE:3B:F3:A9:13:70:5A:A3:84:4B:AC:06:79
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       1D5BAD7380B54F9095F3AA1906F1F9ABE2D56AD6
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:42:44 +0000
ROA not before:           Tue 06 Oct 2026 11:37:44 +0000
ROA not after:            Tue 05 Oct 2027 11:42:44 +0000
asID:                     269463
IP address blocks:        2804:6504:2400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 08:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5b:ad:73:80:b5:4f:90:95:f3:aa:19:06:f1:f9:ab:e2:d5:6a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:37:44 2026 GMT
            Not After : Oct  5 11:42:44 2027 GMT
        Subject: CN=09F43AEB504583BE3BF3A913705AA3844BAC0679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:50:c6:93:eb:53:57:4c:a3:a6:e1:26:24:
                    d6:c0:22:09:76:6d:48:7c:55:24:57:2b:c6:e9:3e:
                    98:0d:dc:37:0e:52:03:ed:1d:15:6d:88:65:0f:1d:
                    1d:0e:05:64:7d:8b:0b:cb:f4:ba:7c:a7:58:64:d7:
                    63:69:7a:47:93:f4:60:b8:43:d3:2e:d5:75:29:d4:
                    ca:c7:ab:11:7b:b1:26:ca:98:e8:b6:fe:d8:25:a6:
                    bc:66:4e:64:15:ff:70:b7:07:38:4b:5f:7c:2a:a3:
                    2b:e7:15:50:67:eb:b6:4c:59:48:d5:dc:de:e9:4a:
                    ab:74:7a:b7:66:0b:27:8b:41:9a:21:11:d7:7f:04:
                    97:49:48:81:a9:0e:99:ab:4c:64:8c:ce:83:b2:88:
                    e1:8f:ff:5e:73:21:8b:95:af:02:dd:db:03:c4:2a:
                    46:2d:37:3e:04:61:e4:54:0f:94:72:a9:29:e8:94:
                    0b:01:6d:b1:60:59:9e:40:72:90:19:8f:12:9c:94:
                    26:42:35:42:e3:c7:0a:fc:82:f5:38:61:e5:12:60:
                    55:af:95:ce:80:d3:86:12:88:52:2c:19:be:6f:cd:
                    d6:e8:b2:01:30:7c:0b:8f:6d:0f:2f:17:e1:f5:a3:
                    95:c1:bf:86:03:9c:be:5d:b8:4d:5b:0a:b2:1b:f5:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:3A:EB:50:45:83:BE:3B:F3:A9:13:70:5A:A3:84:4B:AC:06:79
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:2400::/38

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:12:3e:14:ba:72:23:f5:45:a6:56:75:bd:c4:d9:30:a4:
         d1:ba:00:8c:d1:37:44:02:f6:58:b2:91:44:d2:74:50:81:f8:
         6a:34:5c:df:8b:b0:d5:aa:e0:2c:2c:ac:f7:57:a4:7e:59:0b:
         da:0f:89:0b:44:99:54:e7:d2:c6:bc:6f:8a:70:1f:7d:69:91:
         ca:98:25:75:c0:59:6e:69:98:f7:4a:c9:67:0b:92:af:cb:8e:
         9a:a4:1a:38:6f:bd:4f:a1:a6:f6:17:30:6e:12:55:31:91:8b:
         e7:31:9b:18:44:57:b3:f2:54:aa:e9:b6:53:6f:e6:99:92:e0:
         e6:4e:93:46:17:58:d5:13:bf:57:f5:81:4b:9d:4f:49:53:5f:
         d1:ce:be:db:55:88:54:36:1b:91:87:ef:16:b4:d1:41:3c:5d:
         f9:3c:b1:67:63:80:f3:74:57:54:dd:b3:df:4d:af:a7:f8:2c:
         0b:f1:f9:34:8c:54:a1:fc:4d:44:88:d7:36:9f:c6:23:99:b0:
         78:79:17:e2:87:25:79:99:12:b4:bc:7b:33:ca:05:1b:62:a5:
         17:07:48:78:80:6f:66:76:ab:69:48:af:ea:d8:2a:4b:f0:37:
         a7:90:7a:32:0e:c9:f2:98:0d:be:51:0e:59:a4:7d:2f:0c:1d:
         81:77:a5:ac
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHVutc4C1T5CV86oZBvH5q+LVatYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI5N0IzOUUxMzRBNzFGOEUwMTk1M0U3OUUzQzJEMjhF
MjQyNDM5NzAeFw0yNjEwMDYxMTM3NDRaFw0yNzEwMDUxMTQyNDRaMDMxMTAvBgNV
BAMTKDA5RjQzQUVCNTA0NTgzQkUzQkYzQTkxMzcwNUFBMzg0NEJBQzA2NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyVDGk+tTV0yjpuEmJNbAIgl2
bUh8VSRXK8bpPpgN3DcOUgPtHRVtiGUPHR0OBWR9iwvL9Lp8p1hk12NpekeT9GC4
Q9Mu1XUp1MrHqxF7sSbKmOi2/tglprxmTmQV/3C3BzhLX3wqoyvnFVBn67ZMWUjV
3N7pSqt0erdmCyeLQZohEdd/BJdJSIGpDpmrTGSMzoOyiOGP/15zIYuVrwLd2wPE
KkYtNz4EYeRUD5RyqSnolAsBbbFgWZ5AcpAZjxKclCZCNULjxwr8gvU4YeUSYFWv
lc6A04YSiFIsGb5vzdbosgEwfAuPbQ8vF+H1o5XBv4YDnL5duE1bCrIb9f3bAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCfQ661BFg74786kTcFqjhEusBnkwHwYDVR0j
BBgwFoAUcpeznhNKcfjgGVPnnjwtKOJCQ5cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC83Mjk3QjM5RTEzNEE3MUY4RTAxOTUzRTc5RTNDMkQyOEUyNDI0Mzk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyOTdCMzlFMTM0QTcxRjhF
MDE5NTNFNzlFM0MyRDI4RTI0MjQzOTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2EzMjM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQQkMA0GCSqGSIb3DQEBCwUA
A4IBAQBdpBI+FLpyI/VFplZ1vcTZMKTRugCM0TdEAvZYspFE0nRQgfhqNFzfi7DV
quAsLKz3V6R+WQvaD4kLRJlU59LGvG+KcB99aZHKmCV1wFluaZj3SslnC5Kvy46a
pBo4b71Poab2FzBuElUxkYvnMZsYRFez8lSq6bZTb+aZkuDmTpNGF1jVE79X9YFL
nU9JU1/Rzr7bVYhUNhuRh+8WtNFBPF35PLFnY4DzdFdU3bPfTa+n+CwL8fk0jFSh
/E1EiNc2n8YjmbB4eRfihyV5mRK0vHszygUbYqUXB0h4gG9mdqtpSK/q2CpL8Den
kHoyDsnymA2+UQ5ZpH0vDB2Bd6Ws
-----END CERTIFICATE-----
Generated at Wed Nov 4 19:39:00 2026 by rpki-client