Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a383430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          pH7PgNlgC8/MVo11YLXZ3IQEIODk6E7HO4yZjr2Nruc=
Subject key identifier:   9A:CF:6A:D6:8D:FE:8E:C5:F1:F5:2D:69:27:A3:73:7E:92:BC:B3:B1
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       44DE18DB4B64DA4C10162C7773E4E29DAD6127E6
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:44:23 +0000
ROA not before:           Tue 06 Oct 2026 11:39:23 +0000
ROA not after:            Tue 05 Oct 2027 11:44:23 +0000
asID:                     269463
IP address blocks:        2804:6504:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 16:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:18:db:4b:64:da:4c:10:16:2c:77:73:e4:e2:9d:ad:61:27:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:39:23 2026 GMT
            Not After : Oct  5 11:44:23 2027 GMT
        Subject: CN=9ACF6AD68DFE8EC5F1F52D6927A3737E92BCB3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:3d:31:b9:b8:a3:b6:b9:58:89:7d:5a:43:
                    48:83:9e:64:8e:28:61:9a:2b:71:38:8b:1e:6d:07:
                    57:45:ee:a6:d2:55:95:6e:76:52:ae:b2:fb:89:ce:
                    e4:3c:74:b7:be:cc:2a:cf:9d:6e:5e:34:42:f6:3f:
                    e8:37:7a:16:cd:71:b5:05:5d:79:6f:c5:b4:9d:75:
                    82:9b:6e:b1:ba:49:d5:2c:43:9f:2d:04:9d:d2:c5:
                    72:4f:5a:2f:26:81:00:a9:a4:db:c2:64:2e:92:a2:
                    55:29:bb:59:12:78:dd:6a:65:35:7d:e1:20:6f:e5:
                    55:37:f0:02:1b:77:6d:c9:4f:35:29:08:f5:e9:42:
                    6c:06:82:95:a4:68:1a:df:4d:96:5c:88:1a:b3:0a:
                    d8:d5:07:9b:e5:de:fa:b4:15:23:e6:16:36:3c:6d:
                    95:5e:73:ed:f8:05:51:01:d1:ed:a3:87:4f:b1:b9:
                    b2:cc:21:38:36:de:2a:cd:3c:c5:cf:b8:77:55:b2:
                    4a:04:62:25:3b:cb:60:61:ff:4a:d6:b5:4e:02:a4:
                    08:00:7c:43:1b:a8:43:8a:6c:bc:9c:d3:5c:17:78:
                    9c:57:a7:fa:7b:54:81:41:14:e2:bc:69:e6:c6:dc:
                    3a:f3:da:9b:8b:1d:17:3b:4d:d9:9c:88:b5:c4:67:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:6A:D6:8D:FE:8E:C5:F1:F5:2D:69:27:A3:73:7E:92:BC:B3:B1
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a383430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         07:5d:a0:26:5d:58:b2:fc:fb:c2:22:ba:1b:e3:f2:f8:96:86:
         3f:88:56:06:46:b5:ab:30:0a:99:81:00:66:d0:55:3f:22:52:
         e1:3c:bf:98:35:c6:c5:18:c7:9f:e6:2d:27:8b:0d:91:93:9b:
         2f:c2:fa:71:01:f8:bf:4d:a7:85:75:62:10:27:31:c1:e2:f6:
         15:be:bf:c5:d6:38:3a:d5:46:62:2c:a1:d4:e8:e5:1c:a8:f0:
         47:32:f4:f9:e2:de:01:fb:ed:70:c6:15:9a:85:80:69:75:2d:
         f6:3e:f8:a9:e2:f5:34:80:b0:dc:4c:cc:ed:11:33:f1:ee:83:
         c7:ec:a0:40:43:b2:14:08:f3:eb:c6:fa:1a:f6:8e:f5:bf:2c:
         41:de:fe:9f:ba:ce:61:eb:e7:8a:8c:1a:25:67:3e:b8:46:b5:
         89:3f:50:3a:fd:8b:8c:e4:81:d8:0d:01:01:e5:2d:eb:c8:e4:
         c5:d2:16:91:5e:38:40:3a:19:01:ae:f6:fb:3d:7d:80:c3:85:
         84:c7:80:71:02:25:12:90:46:98:91:4e:ca:99:12:d5:23:9b:
         05:cc:6f:f6:97:3b:3e:9d:f7:ce:12:7a:85:cd:db:ce:87:9f:
         0d:0e:fc:4c:50:ee:20:e8:b1:19:9d:cf:74:0c:b2:46:c2:c9:
         6a:34:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:05:43 2026 by rpki-client