Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          d+SqvQMFgKbXlNF9b3iNo986fBnzTX8qZcpfe+IM77k=
Subject key identifier:   95:B4:25:9B:0D:EC:74:4D:72:83:96:98:0A:90:02:C3:3C:69:AF:64
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       740C08B5740CB2B2ED82AFC2E0366BDD627E605B
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:43:17 +0000
ROA not before:           Tue 06 Oct 2026 11:38:17 +0000
ROA not after:            Tue 05 Oct 2027 11:43:17 +0000
asID:                     269463
IP address blocks:        2804:6504:5800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0c:08:b5:74:0c:b2:b2:ed:82:af:c2:e0:36:6b:dd:62:7e:60:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:38:17 2026 GMT
            Not After : Oct  5 11:43:17 2027 GMT
        Subject: CN=95B4259B0DEC744D728396980A9002C33C69AF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:f4:a7:fe:99:53:4f:b1:6a:55:27:e1:a3:
                    f7:69:2b:b1:1a:a7:fb:78:c4:93:39:d2:de:f9:96:
                    1e:ac:be:14:36:70:9e:aa:96:61:d3:cd:51:bc:67:
                    56:25:f7:aa:ce:77:d7:0e:c5:57:7b:01:35:3a:31:
                    40:32:85:c4:a0:e0:c4:03:87:8e:1b:be:27:68:7d:
                    bb:68:8d:09:63:c7:01:a3:3d:2a:d9:4c:95:fb:af:
                    a6:f4:3c:f4:a5:18:0b:a9:ef:18:4e:9b:af:f0:17:
                    25:54:b0:e7:5f:7e:38:56:74:b3:a2:3b:35:83:0f:
                    0d:d8:d6:bb:a7:98:cb:ee:38:e3:cb:82:20:99:cf:
                    cc:36:87:6e:a3:12:0a:89:9b:23:62:b7:78:ac:96:
                    a5:de:a3:44:6b:49:4a:66:9e:24:97:28:2d:75:0a:
                    4c:c3:84:11:be:98:a5:48:a7:09:69:fc:f7:d4:35:
                    23:2d:d8:c7:af:a3:84:a7:da:86:1e:21:d6:27:39:
                    a4:7a:ae:95:fa:b2:da:ee:8b:83:a4:b5:ad:c7:13:
                    f9:72:56:04:bd:d9:90:86:fa:dc:12:6f:04:e9:2c:
                    e0:c9:e3:a1:10:cb:7b:e3:e9:7e:f1:16:13:9d:df:
                    cc:51:f8:d8:ec:45:77:bc:e7:c0:8f:5e:4e:ed:eb:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B4:25:9B:0D:EC:74:4D:72:83:96:98:0A:90:02:C3:3C:69:AF:64
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a353830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:5800::/38

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:64:86:af:e5:2b:0d:a2:b8:37:55:36:43:ae:c7:9b:b9:
         e3:5c:db:06:20:4d:14:b7:d7:4b:e0:ce:49:41:77:fa:cd:bd:
         ab:01:3a:4c:42:ea:f8:4b:f5:6d:9b:2d:ff:e8:76:a8:1b:99:
         c5:1b:df:ca:da:e2:d4:28:a6:7b:a8:4d:2b:fb:a9:b8:3d:42:
         f5:b9:66:3d:69:27:95:18:6f:04:26:f6:23:49:32:f0:20:ff:
         dd:fd:f6:83:cb:e8:19:7e:de:1e:97:df:54:48:6e:5c:21:77:
         7c:43:6e:f9:5d:21:be:5b:17:87:48:ca:61:dc:ab:28:49:73:
         c2:42:42:73:33:c6:c7:2e:85:23:a9:54:fc:09:9d:56:e7:1c:
         22:41:59:ef:0e:db:9c:1c:cb:8d:dd:c8:35:4e:ec:52:f6:8b:
         d0:ae:79:b9:9c:fc:54:7a:00:be:c3:cc:76:ce:8e:ef:35:85:
         34:01:2e:e9:ef:bd:30:fc:bc:24:c8:03:f1:a4:ed:02:3d:3f:
         73:f4:da:43:61:73:36:28:ba:5d:94:94:b2:9f:51:ad:7a:da:
         3d:a9:40:78:48:ce:f2:48:2c:b6:eb:4d:87:3c:10:d8:94:76:
         0d:30:dc:8b:e4:50:eb:40:aa:ea:bf:17:de:03:e3:93:1e:e8:
         8c:28:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:30:24 2026 by rpki-client