Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a363030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          MBe14TUQlVlm26lZulH3u34qLI5xTYul3pf+cfvBTWQ=
Subject key identifier:   52:B7:0F:59:A6:9D:2E:05:CD:5E:55:AA:DB:B3:57:21:9F:5E:E3:0C
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       5CA2079F05AABFDFD1DBED68B790604E4601C3EC
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:43:27 +0000
ROA not before:           Tue 06 Oct 2026 11:38:27 +0000
ROA not after:            Tue 05 Oct 2027 11:43:27 +0000
asID:                     269463
IP address blocks:        2804:6504:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a2:07:9f:05:aa:bf:df:d1:db:ed:68:b7:90:60:4e:46:01:c3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:38:27 2026 GMT
            Not After : Oct  5 11:43:27 2027 GMT
        Subject: CN=52B70F59A69D2E05CD5E55AADBB357219F5EE30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:1a:75:94:12:45:9e:67:6f:dd:ab:65:82:
                    71:86:9e:4f:f2:9b:ff:7a:1d:5f:5b:02:1a:26:19:
                    97:72:27:f1:32:d9:36:56:23:f5:4a:6d:66:26:d5:
                    83:f7:1e:6e:5d:70:d5:a1:09:89:fd:69:8e:d1:d7:
                    f2:10:dc:33:c3:f1:27:70:84:ea:6f:a8:50:32:5f:
                    b5:32:be:f0:de:49:30:79:4a:01:87:22:81:d8:72:
                    38:9b:57:a6:b2:36:2b:a1:13:4f:65:1e:b0:3d:bb:
                    0f:d6:84:08:a4:7a:40:eb:dd:2a:9b:0b:ca:c4:98:
                    71:90:76:2d:49:15:58:06:24:1b:ca:b0:88:1d:03:
                    80:3e:6d:dd:1a:24:a4:d1:b1:5f:dc:8c:94:42:3d:
                    8f:7b:e7:3a:db:81:34:2f:30:6a:dc:b2:56:9e:3f:
                    ec:73:5d:1a:a7:03:a4:cd:98:6c:57:7f:a2:82:c5:
                    14:ce:c6:70:73:7f:41:e1:47:9f:3e:df:41:c5:72:
                    09:f6:e3:fb:fd:5e:59:f0:ee:37:13:f3:27:3b:8b:
                    1f:b9:b5:4d:4a:23:64:12:dc:da:5d:1b:cb:d6:8b:
                    23:7e:8a:71:3e:87:55:b6:38:3e:7e:28:c1:3b:1b:
                    b4:e3:3e:f5:78:c4:9c:29:f8:a6:32:bd:42:96:f1:
                    19:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B7:0F:59:A6:9D:2E:05:CD:5E:55:AA:DB:B3:57:21:9F:5E:E3:0C
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:6000::/38

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:0d:66:99:9e:36:4f:fd:c4:fe:34:23:d8:bd:a9:1b:c2:
         98:6f:2f:00:a6:8d:61:0c:ed:c4:65:9f:26:c6:97:7e:fc:74:
         8d:60:77:59:f7:3c:b3:ca:ff:a9:8a:44:46:39:7b:31:5d:df:
         f1:88:ea:b2:aa:ed:49:fd:5f:3f:96:27:e5:cf:33:21:b0:47:
         a4:d2:11:d6:3a:dd:4f:d9:c8:ba:28:e8:96:30:37:c8:6b:51:
         2a:57:90:fc:0c:75:fa:06:45:34:7c:be:1a:81:1a:94:07:e8:
         47:f7:be:d3:84:62:dd:51:29:d5:2e:e0:3c:d4:6f:92:63:37:
         1d:78:6c:c8:68:6d:1a:be:b7:35:1b:8a:ec:d1:65:2a:be:0b:
         c0:46:bc:e0:2b:c1:ae:a9:27:ce:49:ca:d5:34:35:00:40:4d:
         f4:22:d3:12:a1:e1:e9:5f:1b:39:a6:ec:26:50:78:79:74:d3:
         87:a6:7a:eb:ca:95:98:f8:6b:16:01:0f:58:a4:01:9a:41:4d:
         09:44:a1:ec:a9:0c:f4:43:70:62:1a:1f:7e:7c:e7:2b:1d:b4:
         12:3d:c2:5a:f9:ff:b7:10:fb:e8:50:fe:cc:02:df:83:2c:60:
         83:b9:a8:79:3c:74:f0:01:9e:98:7f:51:d1:1f:06:e2:20:7d:
         3d:b8:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:27:32 2026 by rpki-client