Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          iqeHXUNgNdAGoo9ivkPbFOVt90ZhgidIG4qluDmxfOs=
Subject key identifier:   CF:7B:4C:AC:0C:FF:EE:59:8B:F9:A6:AE:50:09:24:2D:5D:9A:15:38
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       52CC9B3293B853F71E71F886B0F7F7403CF03CD7
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:44:04 +0000
ROA not before:           Tue 06 Oct 2026 11:39:04 +0000
ROA not after:            Tue 05 Oct 2027 11:44:04 +0000
asID:                     269463
IP address blocks:        2804:6504:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 03:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cc:9b:32:93:b8:53:f7:1e:71:f8:86:b0:f7:f7:40:3c:f0:3c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:39:04 2026 GMT
            Not After : Oct  5 11:44:04 2027 GMT
        Subject: CN=CF7B4CAC0CFFEE598BF9A6AE5009242D5D9A1538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:9c:ff:62:80:75:46:9a:88:1b:df:03:9b:
                    ff:1a:96:65:6d:cc:d2:f6:a0:90:be:c7:6e:19:c5:
                    11:23:c7:4a:8c:b1:a1:7e:77:58:29:b3:0c:64:07:
                    52:98:3e:e3:89:b0:77:38:b4:28:24:20:e4:d0:31:
                    4b:a8:e5:f5:b4:d9:4b:80:e5:02:29:0c:96:a9:c9:
                    ed:af:82:1d:34:a4:93:fc:b3:6a:7a:55:4e:02:92:
                    8f:d0:09:80:56:67:8b:1f:c1:ae:06:8b:88:c4:00:
                    8f:94:6d:81:98:af:51:a6:38:d3:b3:a8:16:9b:48:
                    c6:75:df:6a:cc:6b:bf:3f:31:a8:29:ce:a0:19:10:
                    82:50:43:af:c4:9c:19:bd:30:ea:98:f2:0a:68:3f:
                    74:18:72:f6:08:1e:69:5d:d1:94:33:9c:69:fe:fa:
                    80:72:f6:98:e1:04:b8:3e:b1:c7:08:b5:3d:21:1f:
                    70:c8:f8:80:b9:d7:59:cc:0b:25:d1:ea:d3:e7:93:
                    f9:ee:0a:cd:54:ae:c3:61:2b:ff:8b:e0:d8:a4:de:
                    e2:f7:ad:8f:16:9f:a5:a1:fa:8d:55:79:04:84:dd:
                    0c:80:28:13:fe:33:0d:ff:b9:26:f2:1d:39:cf:7e:
                    84:a6:fb:62:d5:39:63:2c:1c:46:dd:54:1d:20:25:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7B:4C:AC:0C:FF:EE:59:8B:F9:A6:AE:50:09:24:2D:5D:9A:15:38
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:7400::/38

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:32:fd:d5:d0:d5:7b:65:29:f2:87:7f:00:b3:d2:88:2c:
         0d:da:48:aa:34:d5:32:dd:3d:4b:c3:97:5e:1a:0b:5d:4e:8f:
         5d:93:24:41:ab:21:ce:25:89:85:12:85:38:94:6b:0f:3e:d6:
         71:4c:4f:7c:1d:d5:27:97:e5:5f:29:48:6f:da:0e:18:5e:71:
         5e:e2:83:97:84:53:7b:cb:2f:42:25:a5:7d:fe:f7:14:0a:69:
         12:80:78:dd:cb:17:f2:58:8e:1f:98:04:b5:7a:0f:99:d1:6c:
         15:5b:b3:ca:b5:d1:49:dc:f5:75:3c:70:38:68:fc:49:7a:ef:
         d1:e1:ed:a7:2d:5d:56:ec:35:a5:e4:7d:f1:05:0d:07:f7:70:
         88:7b:ed:c3:8f:16:02:56:53:e8:60:27:b5:bf:3e:6b:f9:2d:
         3f:6f:4e:2b:b4:19:16:68:c5:6b:3c:1d:83:f9:28:05:bd:06:
         ad:0d:3a:bd:e5:19:ba:d9:99:c0:57:95:88:9f:d9:b6:81:e8:
         ee:82:e8:f0:08:9b:57:77:36:df:f6:16:84:bd:8d:c5:75:11:
         95:65:a8:52:63:e8:0c:c5:3b:3b:a9:f8:4c:47:7e:9e:23:02:
         01:15:f5:62:e2:56:bf:b8:07:ae:2b:b8:b8:a9:1c:28:05:f7:
         59:84:b3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:01:51 2026 by rpki-client