Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          HCvHf+RjajH0Hgu/hOWBTvZlxn9MD3+CKe8uVVDmtS4=
Subject key identifier:   08:42:21:D5:D4:E4:16:F5:5D:97:35:8C:AE:70:94:4F:8C:83:52:62
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       61CBDA0557C51E8004FA7459D8A7CACAEE71F834
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:43:58 +0000
ROA not before:           Tue 06 Oct 2026 11:38:58 +0000
ROA not after:            Tue 05 Oct 2027 11:43:58 +0000
asID:                     269463
IP address blocks:        2804:6504:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 11:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:da:05:57:c5:1e:80:04:fa:74:59:d8:a7:ca:ca:ee:71:f8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:38:58 2026 GMT
            Not After : Oct  5 11:43:58 2027 GMT
        Subject: CN=084221D5D4E416F55D97358CAE70944F8C835262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:06:2c:41:0c:96:89:8c:d8:af:b1:2b:fd:
                    f5:10:3f:e9:3d:d9:75:5a:83:56:5a:cc:28:61:10:
                    93:ee:1d:db:96:2f:6a:79:29:aa:6d:14:a2:dc:a1:
                    e4:48:f1:9f:39:05:51:29:22:44:7a:69:51:11:7a:
                    d8:3f:48:48:25:ac:ad:9c:09:38:5b:ee:29:90:d4:
                    79:c6:5f:c6:fc:96:cf:aa:4d:b6:f7:7f:b1:a5:63:
                    76:72:d7:99:0f:46:75:87:27:e1:ec:09:db:75:4e:
                    18:89:b2:76:e2:c6:3d:61:7b:5f:0d:e1:7a:18:2c:
                    d1:6e:36:b3:17:22:2d:6d:19:47:fa:e5:a1:f4:e9:
                    79:69:1b:82:86:18:50:49:f6:6a:57:f9:12:97:f0:
                    fb:c6:9f:a2:22:34:83:2c:a6:be:08:3a:11:76:4b:
                    25:ab:90:bd:62:9e:43:61:3c:14:ee:b5:25:94:af:
                    31:ab:51:f8:91:46:56:16:74:14:a0:e4:0e:3d:05:
                    21:a0:5f:44:4e:1d:da:96:04:51:c6:58:5d:2c:6e:
                    40:22:ac:51:7d:ff:4d:3b:f2:7c:b1:2f:b6:be:57:
                    e5:b5:92:9d:33:ae:05:49:c2:58:fb:fd:44:7e:26:
                    5b:d1:1a:92:21:23:ff:cf:0e:35:c8:88:37:3e:98:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:42:21:D5:D4:E4:16:F5:5D:97:35:8C:AE:70:94:4F:8C:83:52:62
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:7000::/38

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:a1:8f:a8:dc:1f:66:bf:4c:47:08:55:19:a6:28:59:96:
         f8:42:18:9d:1f:e2:05:18:e3:16:fc:fa:c2:73:a6:fd:a2:e9:
         71:ff:01:8d:b2:70:2a:a0:7a:7b:57:5e:5a:16:4c:42:05:24:
         1c:67:11:1d:eb:6d:2d:1d:13:20:c7:1b:91:eb:b6:09:bc:c3:
         84:e2:d7:c8:20:b9:1b:1a:93:ea:28:75:82:91:19:6b:6f:11:
         09:68:01:44:c3:6b:e9:8b:e3:b3:5c:ff:5d:63:fd:db:a8:f3:
         eb:4e:fb:fd:1f:f9:80:82:0d:dc:a1:ce:e0:55:2e:44:17:96:
         53:d8:bd:53:24:ae:85:06:bd:e5:d6:6a:dd:51:73:2a:f6:39:
         9d:41:0d:f2:82:3c:4b:6c:33:57:79:a0:97:2a:e1:17:04:97:
         8a:75:c1:75:4f:52:b2:94:1e:8d:a7:50:69:04:4d:3f:b6:59:
         36:e7:75:58:df:8b:0a:4f:a2:89:84:51:ca:69:0e:25:6e:31:
         97:2e:0d:fe:f2:ab:4f:e6:57:1a:07:99:98:b9:39:f3:f8:ca:
         52:5b:42:5e:63:11:12:97:a6:23:39:02:7f:84:ad:a7:d0:9b:
         16:9e:eb:bd:39:41:47:a3:ba:95:d1:1a:18:a6:3d:66:23:22:
         c8:1c:a7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:00:41 2026 by rpki-client