Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          qTvQ6jnOAEFYvPCKyC7Q9E7V+Jex8s/KREHF1/mRK4A=
Subject key identifier:   27:75:D0:09:EA:E1:4C:99:BD:3B:A9:D3:24:D3:EF:A1:9D:D6:64:19
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       17DFCFE1B25C6D81E8DB544FB8BCC5E9BA111F38
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:43:47 +0000
ROA not before:           Tue 06 Oct 2026 11:38:47 +0000
ROA not after:            Tue 05 Oct 2027 11:43:47 +0000
asID:                     269463
IP address blocks:        2804:6504:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:df:cf:e1:b2:5c:6d:81:e8:db:54:4f:b8:bc:c5:e9:ba:11:1f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:38:47 2026 GMT
            Not After : Oct  5 11:43:47 2027 GMT
        Subject: CN=2775D009EAE14C99BD3BA9D324D3EFA19DD66419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:9e:05:23:66:3b:f9:6d:f2:31:48:9b:7d:
                    5e:84:e1:eb:ed:b6:83:18:a8:e9:ee:a3:12:ff:4c:
                    59:7e:05:30:7e:05:ef:9e:5d:4e:b8:08:54:ac:83:
                    31:6e:ca:df:af:e3:d5:f8:df:f9:07:82:69:c4:a3:
                    a0:2d:9d:f2:2f:41:fe:0a:18:ca:b2:83:ee:94:19:
                    c2:be:f3:2f:cd:16:a7:77:6d:7c:18:0f:7b:e3:85:
                    6a:d1:77:0f:28:96:4b:81:ce:25:f2:b4:f4:04:57:
                    d9:21:b7:d9:5e:fd:02:cf:84:da:3d:56:78:53:2d:
                    35:bd:d2:1b:d3:12:73:97:ca:98:31:d7:9b:8a:05:
                    f9:ff:fe:82:af:98:d7:15:26:77:d2:58:13:7f:ba:
                    c3:cf:de:3a:4f:16:1f:a5:32:e2:51:94:03:af:01:
                    93:84:e6:61:1f:4a:57:af:f5:5d:41:9f:74:7d:86:
                    c6:8f:98:ce:1d:f9:1f:6a:2d:95:29:bc:57:51:06:
                    2b:62:ed:92:ac:a8:9d:bc:48:24:6b:20:2d:68:11:
                    ac:d3:23:a3:c0:d5:31:57:f6:4e:3e:a5:d6:d9:a0:
                    24:65:d7:f3:01:c1:e2:dd:e3:10:56:29:55:8e:16:
                    ab:e1:49:8b:51:63:ea:24:52:f0:dc:db:d0:ae:36:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:D0:09:EA:E1:4C:99:BD:3B:A9:D3:24:D3:EF:A1:9D:D6:64:19
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a363830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:6800::/38

    Signature Algorithm: sha256WithRSAEncryption
         57:4d:19:ed:ec:cd:27:55:dd:9d:d1:15:ce:42:b8:28:6c:88:
         60:cf:58:83:f1:26:43:4c:8c:89:d8:17:0b:1b:73:fa:46:86:
         f5:22:0a:e3:95:6c:6c:7b:54:99:3a:70:1b:28:50:36:df:36:
         35:31:35:d0:98:62:7c:48:c8:39:1d:63:17:09:10:bd:c8:c9:
         df:45:a9:99:7e:10:ec:1e:a2:6c:15:8e:2b:60:26:13:08:04:
         fa:66:c5:3a:1b:28:41:9c:19:24:dc:b0:b7:0e:13:90:6b:1b:
         47:b1:09:2d:e0:da:70:30:5b:4e:c4:e5:59:5c:57:e6:96:2c:
         8c:08:cf:d7:78:5e:44:e3:ef:42:9d:ac:a3:26:b0:b8:e7:bb:
         cd:5c:66:d9:97:16:de:6d:0f:a2:cd:e4:65:3c:8a:e3:d1:01:
         f2:3b:db:79:a3:0d:9b:37:60:a1:67:65:9b:7d:89:58:2b:05:
         c2:f0:ff:b8:fc:6e:3d:dd:f4:49:6c:6c:14:3a:24:68:39:f5:
         f8:3a:9a:fc:f7:70:21:5e:5a:ea:03:e8:aa:76:8f:ea:4a:13:
         88:04:37:d4:0b:2d:1e:82:42:32:1c:ac:13:23:dc:6f:a6:66:
         a2:e7:3b:5a:fc:0a:ac:e2:41:30:8b:5b:ab:2b:ee:99:ec:e1:
         b1:64:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:06:53 2026 by rpki-client