Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          0iFAT5RHFnsNe/jfzPyBEv1OFgqR7+L+rMd8HPlNeB0=
Subject key identifier:   70:C4:BB:49:C8:61:3B:3F:A9:4A:D2:E7:D9:2A:96:89:18:CB:24:5B
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       10F354F3441280FBE1A2662CEA87D77CFBE31E20
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:43:06 +0000
ROA not before:           Tue 06 Oct 2026 11:38:06 +0000
ROA not after:            Tue 05 Oct 2027 11:43:06 +0000
asID:                     269463
IP address blocks:        2804:6504:4c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:54:f3:44:12:80:fb:e1:a2:66:2c:ea:87:d7:7c:fb:e3:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:38:06 2026 GMT
            Not After : Oct  5 11:43:06 2027 GMT
        Subject: CN=70C4BB49C8613B3FA94AD2E7D92A968918CB245B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:31:06:94:4c:97:f5:1c:2b:cb:40:d3:8b:
                    10:17:d9:a4:0f:59:fa:54:24:13:5c:62:01:f3:47:
                    54:36:c9:e3:e6:dc:31:89:7f:54:77:09:1b:22:94:
                    bb:4a:c0:4e:f4:70:cb:fc:d6:25:66:e6:5e:8d:05:
                    f4:87:5b:ab:3e:12:90:c2:6e:b4:0a:50:11:2f:23:
                    86:39:b1:9f:ff:90:8a:e3:66:a1:68:f0:6e:14:6b:
                    8f:5f:e5:89:3b:1f:cd:99:22:77:4e:76:4f:27:10:
                    4f:96:ff:51:fe:9d:60:23:2a:bb:ac:e6:10:a4:5a:
                    79:1c:b2:de:c7:83:2c:47:c0:c6:58:c0:8e:9e:3d:
                    0d:44:dd:af:57:59:b3:53:74:27:81:2d:8e:d8:af:
                    32:d1:45:12:4f:ba:d9:6c:9f:0c:78:3e:1d:4a:cd:
                    3d:a5:34:08:e1:74:37:b8:58:be:2b:a2:8c:bc:53:
                    2a:f6:3c:79:5b:ef:6a:c9:d9:9f:ab:91:7c:12:d1:
                    29:00:2f:82:56:14:03:93:96:7b:58:f7:e1:9f:f8:
                    7e:a8:3e:70:0d:df:85:8f:f3:5f:d2:04:21:56:4d:
                    04:58:93:60:2e:55:b4:53:7f:8f:34:3d:57:53:6f:
                    e0:cd:35:93:c5:6d:d9:51:18:0d:c0:1b:f6:7a:3c:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C4:BB:49:C8:61:3B:3F:A9:4A:D2:E7:D9:2A:96:89:18:CB:24:5B
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a346330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:4c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:3f:fc:5a:ab:0f:d6:8e:d7:f5:4f:33:1a:de:d2:ce:d8:
         77:6b:96:02:a6:4c:b5:a5:c6:dd:79:81:c3:b0:e2:c2:4e:6f:
         54:9e:3c:a6:1d:3c:fa:91:67:95:d5:f9:55:7d:34:c4:bf:9e:
         3e:22:4c:19:55:70:3f:0c:36:35:a1:e3:89:ae:5e:e0:ae:27:
         ae:d9:4a:f8:3c:86:d6:ec:4d:7e:ee:3a:22:28:4e:e2:93:a3:
         ff:10:9f:4e:87:bf:1b:a1:c9:02:04:a7:b6:3c:bd:c4:2f:b4:
         51:01:f6:dd:82:2d:cc:b9:46:a8:3e:1e:68:61:db:de:10:08:
         6e:be:f9:4d:ad:0f:6e:02:9a:20:bb:5f:23:94:9c:cf:b9:49:
         28:f1:6b:29:12:31:5f:81:e3:68:1f:d8:2d:26:78:94:5c:04:
         57:a0:4a:ff:be:a5:b8:41:4a:f3:05:23:c6:eb:3e:a3:40:29:
         71:c6:bb:5a:72:8c:a2:16:3d:ca:1f:74:0a:0d:7f:c5:c7:aa:
         7a:de:30:7f:b3:b4:06:b7:e2:71:32:88:63:91:4b:c6:df:5c:
         79:19:12:ce:cc:91:be:b2:49:0c:4d:22:96:6e:45:40:28:02:
         b0:9c:53:b5:93:a8:61:0a:a8:47:88:1d:71:4e:45:9f:f7:aa:
         fa:23:6d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:06:58 2026 by rpki-client