Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          4a+ZlYNq1JBZvsWPXpO0QZGjrtEXh5Yve4lBnSdwJc4=
Subject key identifier:   A8:26:8E:D4:A5:B6:A5:36:2E:4E:BB:26:2D:A5:D1:77:58:E2:4E:84
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       078A4D9365D1FA061CEC0260BA380DDE6CF11517
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:42:52 +0000
ROA not before:           Tue 06 Oct 2026 11:37:52 +0000
ROA not after:            Tue 05 Oct 2027 11:42:52 +0000
asID:                     269463
IP address blocks:        2804:6504:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 02:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8a:4d:93:65:d1:fa:06:1c:ec:02:60:ba:38:0d:de:6c:f1:15:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:37:52 2026 GMT
            Not After : Oct  5 11:42:52 2027 GMT
        Subject: CN=A8268ED4A5B6A5362E4EBB262DA5D17758E24E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:0e:57:07:1c:e8:2a:d0:73:09:cd:57:8a:
                    78:16:d3:b6:ae:15:b1:a5:be:40:17:33:be:80:2a:
                    c4:4b:78:6a:74:51:1c:8c:c1:f3:27:2c:e9:47:9b:
                    a3:6d:27:db:96:9c:f1:f8:a5:b7:68:00:5e:29:24:
                    e9:7b:02:ee:e9:14:69:2c:c2:aa:c8:38:7b:e9:b5:
                    c2:cc:fa:09:23:c2:02:92:dd:78:b0:67:eb:14:5f:
                    bf:08:e5:7c:52:28:67:ab:49:50:c9:b0:fc:b9:e7:
                    d0:d6:7f:83:55:6f:d9:bb:99:e4:50:6d:38:ab:7d:
                    66:e6:34:09:83:aa:58:6b:00:d3:a8:cf:cb:30:14:
                    6d:6a:f1:ba:97:e1:37:9e:51:3a:36:a3:53:68:79:
                    f7:21:f4:4e:95:94:1f:5c:41:ce:e7:0a:27:b4:8d:
                    47:70:fd:5b:52:fa:e8:e0:db:90:61:df:0c:a3:c3:
                    f3:a3:f9:bd:df:87:8d:63:43:e6:dc:48:d5:95:72:
                    2d:4a:a2:1f:dd:91:bf:a7:1e:82:f7:3d:cb:11:74:
                    ee:c9:19:1b:23:92:63:a8:7e:9e:1c:98:6c:bd:23:
                    2c:47:e9:74:32:12:84:47:21:6c:34:9d:5b:79:0a:
                    d3:8e:b5:44:68:da:ed:fb:2e:f6:cd:dd:5a:62:c4:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:26:8E:D4:A5:B6:A5:36:2E:4E:BB:26:2D:A5:D1:77:58:E2:4E:84
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:3000::/38

    Signature Algorithm: sha256WithRSAEncryption
         81:79:17:d1:f6:41:6e:5a:3c:ec:b4:f4:f7:a4:2f:51:21:4d:
         a9:4b:51:82:61:f1:94:18:aa:5f:9e:a1:e6:65:8b:4a:b9:08:
         21:eb:c5:cc:84:7b:ad:55:e2:f7:e3:1b:ea:1d:ab:0c:c1:f7:
         1f:f3:73:41:ab:90:40:00:45:db:f3:e2:eb:e6:b1:ed:3a:60:
         9d:2a:29:c8:d0:d8:7d:61:d5:24:a0:e9:9a:d4:ba:d2:54:d3:
         70:87:3c:bc:39:b5:7d:cc:87:d6:fa:a9:29:4e:5c:86:e3:22:
         61:a3:53:40:3a:16:a6:41:33:0b:db:87:d7:0f:6a:a7:83:1f:
         f4:74:e5:bc:65:af:b6:e3:a9:3f:24:d1:be:58:8e:61:91:5b:
         95:7e:b9:92:9f:0d:cf:2a:3b:ab:9c:37:69:c8:1e:a7:1e:c7:
         da:79:6c:8f:09:f7:38:b0:16:25:47:11:cc:b4:6d:55:84:20:
         5c:0b:f1:38:08:e1:1b:1f:0d:2d:9f:34:76:33:f7:d0:42:3e:
         ea:f8:9f:11:a9:f1:a6:45:04:a1:fb:12:23:0d:aa:99:d8:7c:
         73:19:c7:a8:c0:48:d6:03:9d:69:37:0e:8a:8b:1c:7b:6a:d7:
         2f:c8:9e:69:cf:b3:29:7a:27:6d:bd:67:e0:d8:9c:1c:3b:27:
         54:af:d5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:20:51 2026 by rpki-client