Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a376330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a376330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          uwHCjSMtDiZv/fGbrobTKSLGIRDfnFOjC/lXKL8doxE=
Subject key identifier:   2B:1D:0A:3B:48:8C:3D:7C:5E:4F:20:E4:B2:A2:38:40:6E:25:D8:11
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       47E1D8B95BC79759B63969C4472191B28C2B3B0D
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a376330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:44:14 +0000
ROA not before:           Tue 06 Oct 2026 11:39:14 +0000
ROA not after:            Tue 05 Oct 2027 11:44:14 +0000
asID:                     269463
IP address blocks:        2804:6504:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 02:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e1:d8:b9:5b:c7:97:59:b6:39:69:c4:47:21:91:b2:8c:2b:3b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:39:14 2026 GMT
            Not After : Oct  5 11:44:14 2027 GMT
        Subject: CN=2B1D0A3B488C3D7C5E4F20E4B2A238406E25D811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:e6:cf:7c:ad:5c:a1:ce:23:bb:1c:e6:a8:
                    1c:0d:48:a7:50:98:58:07:7f:d4:e1:82:24:11:68:
                    be:87:a3:b1:f5:6a:01:2d:f2:29:52:04:1f:cb:e1:
                    d8:33:1f:88:c2:d5:ba:2d:4e:ea:73:99:11:ae:24:
                    a4:7c:69:d0:61:dc:3c:16:1c:87:cf:ae:b2:65:54:
                    b4:2a:ad:1c:c9:52:c6:d8:5d:95:a2:53:4c:48:c6:
                    40:27:33:3e:d8:87:41:3b:aa:f5:f9:76:55:df:1a:
                    71:28:49:eb:e3:bc:5b:0f:58:c8:be:ba:59:24:1f:
                    2c:f8:10:ac:27:c0:7b:20:8e:81:4b:7f:c6:52:13:
                    7d:38:7a:67:0e:b0:25:52:67:ff:03:04:d9:ee:86:
                    61:0e:6e:db:a8:24:20:60:b7:5d:d3:f6:b9:3a:09:
                    56:0f:74:0d:75:61:d8:20:6f:6c:44:69:b2:cb:f6:
                    83:da:bb:39:bd:62:24:f1:e2:33:77:37:49:ed:ba:
                    7b:6b:20:21:c8:6d:1b:34:20:81:de:fc:de:6d:4c:
                    c3:3f:a7:e6:b3:5d:a5:13:34:2e:45:92:c2:70:39:
                    22:45:77:5f:a4:7b:0a:e3:5c:93:80:dc:cf:00:e0:
                    5d:5d:e4:7f:5b:80:83:71:37:7a:94:36:76:0d:53:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1D:0A:3B:48:8C:3D:7C:5E:4F:20:E4:B2:A2:38:40:6E:25:D8:11
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a376330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:7c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         ac:a5:15:83:a7:4f:9c:1f:dc:30:58:09:cd:f9:f2:96:9d:89:
         3c:18:f1:75:5d:6b:c9:2e:06:47:d9:e6:8c:6a:b5:b5:71:60:
         d4:83:7b:f8:6a:d3:88:f0:af:81:d6:40:0c:da:35:7f:6a:a1:
         52:d6:a3:20:dc:d7:c2:9d:39:ec:d4:8f:bd:75:84:34:d7:ac:
         f3:52:96:c8:62:7d:c4:e8:e8:36:8a:2c:de:64:69:d7:03:45:
         bf:ac:9c:31:b8:b6:ad:bd:d7:1e:65:04:c6:be:61:cb:04:0c:
         d9:41:29:da:a5:d6:40:a1:2a:9a:fc:dc:9b:5b:8e:ef:10:56:
         48:46:8f:48:aa:19:37:5b:c6:a8:10:e9:93:a5:39:d5:62:b3:
         27:d5:17:df:3b:6f:f7:af:1d:9a:f8:b3:36:cd:86:a3:28:6f:
         3c:f1:eb:ca:3e:e2:6c:bc:26:87:68:00:29:60:b5:2f:1a:f0:
         dc:50:1a:6a:57:60:3c:43:bd:e5:0d:68:91:56:f8:87:dc:be:
         fb:dc:15:bd:7f:4b:b0:4a:b7:6b:55:4f:99:91:d1:d9:ef:be:
         f7:c1:25:43:9f:8b:c2:54:4d:8c:b3:f9:c7:6e:74:da:43:84:
         f5:13:ed:0c:08:1b:ff:32:b5:cf:f6:e2:7e:2c:da:cd:c2:76:
         72:67:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:21:40 2026 by rpki-client