Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a333430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          U7kIScUuEuRB95gWvM06/6Ms+oW3TIycj2/v5ONEDmg=
Subject key identifier:   C2:B4:72:F2:41:4C:72:E6:53:C3:6E:93:C6:7E:1A:52:33:94:7A:E2
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       5DBC75B82D39F3E4CEE216897FF31FADC92776DD
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:42:54 +0000
ROA not before:           Tue 06 Oct 2026 11:37:54 +0000
ROA not after:            Tue 05 Oct 2027 11:42:54 +0000
asID:                     269463
IP address blocks:        2804:6504:3400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bc:75:b8:2d:39:f3:e4:ce:e2:16:89:7f:f3:1f:ad:c9:27:76:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:37:54 2026 GMT
            Not After : Oct  5 11:42:54 2027 GMT
        Subject: CN=C2B472F2414C72E653C36E93C67E1A5233947AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:53:55:12:a6:e2:54:b6:69:15:c8:05:99:
                    65:c2:1f:8c:02:20:88:bd:3d:64:34:4d:ec:c5:74:
                    74:cf:4d:a2:8c:f7:f2:36:e6:9c:2c:e6:e1:a4:03:
                    77:e1:27:48:48:dc:28:0e:bc:b2:04:bb:f6:ae:23:
                    10:a2:a0:e2:0c:54:92:dc:41:af:05:97:ec:49:7b:
                    5f:f6:31:51:79:cc:5f:16:70:46:d5:09:40:64:23:
                    a9:20:f7:4b:52:e9:c0:1c:0b:a4:b8:0d:3e:be:39:
                    b1:77:a8:2d:ee:3a:85:f4:03:0e:69:e3:fc:de:d3:
                    8a:24:a2:af:92:23:d8:d4:1e:92:84:2c:5e:b5:9e:
                    53:de:df:9d:ff:99:28:20:9c:61:71:34:1e:a4:75:
                    19:39:ce:77:69:6b:89:71:f0:6c:b5:39:3d:51:52:
                    7b:a9:8c:8d:a4:bc:be:17:ef:84:88:4c:a4:f3:be:
                    3b:c4:ae:4d:8a:a6:2e:89:93:e6:2a:fc:72:6e:28:
                    5b:24:c0:53:1e:59:14:b5:8b:77:6f:4e:33:02:2b:
                    6d:f2:d6:1a:ae:b6:08:26:e4:34:07:e6:60:b6:62:
                    f7:8c:9b:64:b5:b8:ae:ae:1d:18:4f:61:b0:f3:87:
                    14:22:4c:86:9b:99:2d:be:2b:32:cd:55:9e:fc:8b:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B4:72:F2:41:4C:72:E6:53:C3:6E:93:C6:7E:1A:52:33:94:7A:E2
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:3400::/38

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:64:4b:39:88:39:68:d9:97:c6:27:fb:8b:86:52:92:c5:
         48:aa:1f:ae:cb:30:4b:3c:ef:69:9b:55:c0:1d:28:88:15:7c:
         1c:b8:7e:b8:c2:01:58:48:64:09:f9:dd:8d:70:f0:fb:87:2e:
         b5:8f:88:b7:ba:43:03:16:5c:4e:69:da:7b:58:bc:1d:70:64:
         8e:84:a2:d8:8e:5c:54:37:97:b4:81:be:2d:62:fc:4b:c0:a3:
         26:af:85:65:df:a6:9c:ab:c8:aa:b1:12:a5:71:c7:66:fe:b9:
         ea:dc:b2:6f:6c:56:4b:d2:bc:6f:59:ca:18:5e:4f:ec:93:d6:
         80:eb:81:11:9f:b6:92:f3:21:91:d1:3c:4b:84:15:29:69:4e:
         90:05:5f:c3:e6:96:f8:cb:9b:bc:0d:9c:f4:38:08:28:73:fa:
         33:fe:ee:df:ef:67:89:c6:b8:9e:59:dd:45:66:4c:6d:8b:00:
         59:4b:8a:86:3b:62:f9:09:8f:5b:7c:e7:8d:62:60:20:26:5d:
         9c:e5:05:d6:b4:32:3c:39:74:9d:09:52:ad:61:21:48:69:7d:
         25:87:3f:c4:88:92:52:fb:b5:d8:99:3f:96:38:12:7c:76:97:
         b4:80:c3:25:10:1d:e6:20:89:b8:c0:da:86:60:71:14:ca:98:
         18:26:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 13:09:34 2026 by rpki-client