Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          yfHV7dTB7T+SSUB/fv1qtWA7QVnMzGCjxTmow+f0CR0=
Subject key identifier:   43:4C:CF:B9:62:5F:95:08:FD:4A:CD:9E:15:F2:DB:51:84:FB:61:C6
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       38344A3964FADF37A22603F33A386E505685DED2
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:43:04 +0000
ROA not before:           Tue 06 Oct 2026 11:38:04 +0000
ROA not after:            Tue 05 Oct 2027 11:43:04 +0000
asID:                     269463
IP address blocks:        2804:6504:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:4a:39:64:fa:df:37:a2:26:03:f3:3a:38:6e:50:56:85:de:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:38:04 2026 GMT
            Not After : Oct  5 11:43:04 2027 GMT
        Subject: CN=434CCFB9625F9508FD4ACD9E15F2DB5184FB61C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:72:f6:61:85:91:98:11:3e:4f:ce:60:a2:
                    d2:93:bc:ce:92:d7:8c:45:4f:09:eb:b9:45:bb:7c:
                    ea:88:01:fe:9a:b8:62:cd:30:4e:e4:fa:ff:6e:bc:
                    eb:98:06:03:37:72:c6:70:82:dc:ab:cb:4e:8c:e1:
                    ee:2f:ef:6f:f7:a9:dc:df:3e:4a:dc:18:e4:68:05:
                    77:e7:3d:2d:79:59:66:5d:a0:c0:20:b2:c2:ca:74:
                    68:78:19:b6:54:7a:0d:d3:b8:2d:27:a4:16:f7:e1:
                    6c:fd:34:2e:a7:6b:b9:2d:cd:bf:0a:1f:84:47:f0:
                    66:60:c8:83:51:0c:e5:eb:28:a1:ce:e6:9d:e3:0d:
                    c3:53:ef:8d:7b:ad:cb:41:aa:19:d9:09:f3:26:78:
                    69:d2:2d:3b:31:e1:78:83:05:90:ae:d9:16:93:73:
                    f2:7e:66:14:be:5c:f0:b5:e8:2b:92:b7:80:05:b6:
                    8c:f9:c5:b3:f6:8a:36:b3:8e:75:69:27:27:93:3a:
                    5b:88:63:c2:1b:74:04:3e:1f:8c:7a:03:a9:b9:b6:
                    5a:12:b2:b9:02:eb:5d:ce:c8:a7:8e:5c:f3:71:c7:
                    1c:4b:86:c9:7e:7f:c6:86:e9:31:c8:c8:8a:93:3d:
                    51:69:59:f9:2c:06:e8:dc:a8:b6:4f:c7:b7:8f:4c:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4C:CF:B9:62:5F:95:08:FD:4A:CD:9E:15:F2:DB:51:84:FB:61:C6
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:4800::/38

    Signature Algorithm: sha256WithRSAEncryption
         14:da:88:fc:87:7d:37:90:4a:d7:f8:1a:47:22:f5:b4:7b:8a:
         f6:f0:79:c1:7d:71:b8:5e:dd:a3:77:1c:c7:13:ca:dd:68:b1:
         1c:16:64:23:a9:db:61:0a:38:ad:d8:46:01:f6:d7:3c:05:9c:
         17:f4:12:13:9f:8b:f4:ec:71:ec:03:38:2e:86:6a:92:2a:de:
         26:d8:ca:d6:95:d1:b5:99:2a:7b:7f:83:dc:ea:ab:c5:8b:30:
         5a:fc:6a:86:da:5f:8b:61:96:47:de:ec:f3:2d:77:a5:e8:b9:
         d5:15:13:e3:ea:bf:f8:df:40:63:97:53:bf:88:cf:cd:f3:6d:
         79:90:b4:bd:9b:e3:22:49:53:59:00:fd:6a:17:ef:ce:a2:72:
         5a:d4:5a:cd:d1:87:e8:02:aa:33:b9:7c:29:a8:8b:26:db:90:
         6d:c2:a6:dd:20:0b:5b:6f:11:c6:d7:fd:c7:0f:79:ad:9f:bb:
         32:eb:63:2b:69:a4:44:89:32:35:d9:9c:3c:a5:e8:76:c9:43:
         35:2f:1c:a8:fa:f3:3a:60:d1:2f:4e:fd:50:c0:bc:1b:03:fd:
         e6:78:d7:45:f6:07:61:2f:14:2a:e3:38:fe:87:75:b4:50:6c:
         ec:00:2c:57:0f:cf:23:b7:3b:07:3e:15:f9:6a:a1:bc:9a:70:
         33:3a:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:30:16 2026 by rpki-client