Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          eGTpQ4qxB2PmX4yAhQ3L8JUkFS7zojwDZlM8J6xb040=
Subject key identifier:   28:A6:B0:C0:D0:8D:CA:85:DC:8D:15:24:53:9F:F1:7C:96:A8:7D:AF
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       4B3F05850C7AC15ED825E60ADD6F3E360948CB99
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:44:09 +0000
ROA not before:           Tue 06 Oct 2026 11:39:09 +0000
ROA not after:            Tue 05 Oct 2027 11:44:09 +0000
asID:                     269463
IP address blocks:        2804:6504:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 03:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3f:05:85:0c:7a:c1:5e:d8:25:e6:0a:dd:6f:3e:36:09:48:cb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:39:09 2026 GMT
            Not After : Oct  5 11:44:09 2027 GMT
        Subject: CN=28A6B0C0D08DCA85DC8D1524539FF17C96A87DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:09:00:b7:d4:be:65:7d:3c:8f:88:67:65:
                    0d:6e:f6:26:c6:5b:a6:a5:31:9b:81:42:27:1e:e8:
                    fc:25:9c:74:ef:25:36:20:0e:b4:55:1a:80:4a:1f:
                    56:f4:c0:f4:76:d4:2e:50:51:80:f3:66:0c:77:cb:
                    d8:41:81:9d:1e:98:3c:0f:4e:65:c1:9f:c9:07:7f:
                    34:29:c3:9f:cc:45:0f:21:f3:11:65:59:06:f4:3a:
                    2e:f6:53:a8:e3:8a:d6:5e:c8:47:ba:4d:fc:cf:9f:
                    1d:0b:21:95:0c:37:f2:85:3d:d5:67:d7:12:16:da:
                    08:91:26:c3:5d:57:1d:9c:d6:63:96:d5:e3:3c:50:
                    8d:49:d3:bf:7a:c9:13:48:f6:40:7e:71:39:65:9c:
                    90:19:6b:c1:12:27:80:d3:fa:c4:e4:31:fc:7a:08:
                    64:d3:54:d9:4e:9d:ac:a0:4f:6a:3f:c7:4e:6e:02:
                    b5:31:2d:2d:89:a5:71:5e:71:9a:95:12:9e:72:c1:
                    d6:02:0d:5e:6f:4e:d4:c5:58:9f:5f:1f:51:22:bb:
                    d2:8a:d6:02:c6:3f:61:2b:61:f8:5a:f2:4c:22:a3:
                    9e:48:d8:ef:c1:a9:e1:35:87:65:84:54:23:6c:08:
                    b4:00:93:d9:2d:cd:7e:b3:73:e9:f0:f1:10:08:f6:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:B0:C0:D0:8D:CA:85:DC:8D:15:24:53:9F:F1:7C:96:A8:7D:AF
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:7800::/38

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:f5:5b:5a:8e:04:1f:3c:3c:bb:b2:38:c9:2e:a4:6a:77:
         d6:fe:1f:07:56:88:b5:25:29:5d:ec:31:1d:0f:a5:8c:ff:ed:
         a8:58:5a:37:6e:33:c9:ef:12:1c:c9:dc:cd:fd:cc:79:76:48:
         1b:30:99:bf:65:4a:5c:96:40:49:50:2c:05:15:71:25:14:75:
         76:98:65:ea:77:83:25:a0:2c:d6:34:74:af:36:bd:85:10:7d:
         7d:c2:ab:55:0a:54:ea:92:e2:f4:0f:3f:91:68:6c:45:09:ed:
         7d:0d:c2:db:cd:58:ab:8e:2c:06:bf:f5:a2:3c:85:fd:1e:22:
         3c:12:b0:f0:19:1d:a3:34:53:b5:43:6a:fb:87:10:2d:00:14:
         18:28:03:e8:ad:24:9f:23:37:fb:05:27:53:8e:dc:30:b8:4e:
         22:5e:c9:21:41:44:07:70:a0:15:80:a4:72:3a:d4:0a:01:f2:
         6e:5f:f5:d7:77:0b:14:31:85:67:2a:76:8a:81:0e:73:56:c4:
         0b:b6:f7:fa:d7:cb:4a:29:62:32:e5:00:d1:80:a7:7f:8c:90:
         2c:b1:c9:88:b6:de:70:59:79:3f:71:6a:55:7e:1f:52:ff:e3:
         2b:47:44:0f:f1:85:72:d0:42:0b:6c:60:26:9c:5c:c0:af:58:
         a1:24:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:00:38 2026 by rpki-client