Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          ilMXIaNfagBbRLQJ4U7WZwCsk0EIxMPlzh5NEBGkGJA=
Subject key identifier:   30:C1:0F:65:49:EC:65:15:1A:21:AD:26:F3:A3:64:08:9D:BE:FE:FD
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       3433640EACF6C9916A16C34FFCA475B803CECB92
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:43:08 +0000
ROA not before:           Tue 06 Oct 2026 11:38:08 +0000
ROA not after:            Tue 05 Oct 2027 11:43:08 +0000
asID:                     269463
IP address blocks:        2804:6504:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 07:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:64:0e:ac:f6:c9:91:6a:16:c3:4f:fc:a4:75:b8:03:ce:cb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:38:08 2026 GMT
            Not After : Oct  5 11:43:08 2027 GMT
        Subject: CN=30C10F6549EC65151A21AD26F3A364089DBEFEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:2f:b3:9e:a0:a6:d2:36:98:09:48:77:ab:
                    1d:3c:40:24:48:18:b6:0a:ad:9b:0e:40:40:32:58:
                    c1:7e:c7:42:97:2e:96:43:1a:9c:fe:23:c6:17:4a:
                    25:7c:9b:7a:53:01:2c:ed:0f:42:f6:f8:2d:b3:04:
                    a6:df:0a:e1:74:9f:39:67:eb:52:5b:19:54:6e:5f:
                    e7:4f:70:8f:34:ff:2d:d9:88:f6:ea:d9:ff:b2:eb:
                    f9:2c:74:6b:cb:74:12:f0:aa:7b:8a:7e:33:69:ae:
                    00:83:d9:1e:50:a0:d6:1b:00:bc:fb:0f:40:83:a5:
                    30:72:73:e0:e9:e3:a0:be:f6:97:e5:cd:cf:6c:c4:
                    9d:6a:c0:7f:c9:7d:1e:f1:60:e0:d1:22:19:a7:f8:
                    48:92:9e:e1:e0:ea:39:4f:6d:7c:d2:10:f2:a8:2e:
                    1b:0f:f8:ae:e3:7a:45:5a:c1:e1:a9:42:a8:da:33:
                    37:a5:af:c6:4a:59:da:31:76:9a:0b:ef:23:94:17:
                    ae:c1:e0:c9:a7:9c:52:a4:05:2c:1a:04:0b:b8:6c:
                    79:ef:03:28:98:57:a4:e2:c4:e2:3c:1d:51:14:f0:
                    4e:4c:ac:dd:aa:d3:fd:e4:34:01:3b:d1:fc:3f:5f:
                    f3:66:d0:74:6e:42:0b:6b:68:cd:99:da:51:4f:fd:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C1:0F:65:49:EC:65:15:1A:21:AD:26:F3:A3:64:08:9D:BE:FE:FD
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:5000::/38

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:f3:db:ca:0e:f9:c0:87:b7:4a:61:2b:2f:70:cf:12:f2:
         2a:a2:51:58:c6:ba:a8:15:18:43:7d:1a:4a:aa:f1:1b:9d:4a:
         6d:48:ce:8a:a9:db:2c:5e:aa:3f:18:50:cb:46:ca:6a:1f:92:
         61:7c:6f:59:bb:c3:de:1a:b3:cd:9e:03:b6:00:5b:96:45:5e:
         5b:89:4e:15:65:3b:3e:b7:ed:93:a1:39:c1:86:19:52:9d:68:
         c1:c2:b3:fa:38:c1:bc:4c:a0:27:91:70:03:8a:c2:d5:bd:35:
         1c:13:36:e2:c3:cc:38:9a:79:db:5e:0b:2e:ed:dd:21:45:01:
         00:c9:e0:55:4c:61:42:49:72:19:f3:81:37:26:84:0c:a3:ba:
         9c:6c:ab:56:0f:48:18:b5:4d:42:cb:d0:ac:c6:e2:69:36:7c:
         76:63:05:f1:69:b4:ed:bc:b9:d7:2d:41:ab:94:57:c1:21:7a:
         f3:ab:7c:ef:d1:f2:21:1a:05:47:56:45:6c:fd:0b:a5:bc:21:
         3b:33:8b:0a:00:c1:c5:d9:98:ac:3f:bb:93:9a:21:f6:fe:14:
         61:2f:84:37:d9:9a:31:06:d5:b7:a2:be:e6:06:a9:c1:12:a8:
         76:30:73:2c:31:21:1b:ba:1d:34:db:b2:85:ac:5b:37:aa:84:
         2d:6c:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:57:27 2026 by rpki-client