Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          a0mukmmmSkT/cZpoyHSliZJU6UcLR9OMO30+2C/FRHQ=
Subject key identifier:   42:9D:3D:1B:4E:D5:4B:6A:C3:B7:B0:36:2E:22:E7:40:55:05:AB:0D
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       472022983C79A0E0D5AF3B04942AC9A19C75685A
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:44:48 +0000
ROA not before:           Tue 06 Oct 2026 11:39:48 +0000
ROA not after:            Tue 05 Oct 2027 11:44:48 +0000
asID:                     269463
IP address blocks:        2804:6504:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:20:22:98:3c:79:a0:e0:d5:af:3b:04:94:2a:c9:a1:9c:75:68:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:39:48 2026 GMT
            Not After : Oct  5 11:44:48 2027 GMT
        Subject: CN=429D3D1B4ED54B6AC3B7B0362E22E7405505AB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:2b:a3:b4:c1:81:fb:d1:60:3f:73:b9:5c:
                    7d:1a:da:5a:bb:09:cf:f5:77:0d:74:85:c2:17:6b:
                    dc:5c:c7:bc:df:ae:8b:97:f7:1a:cb:7f:9b:9b:30:
                    3a:5f:01:aa:19:e4:89:8e:76:b4:22:12:a7:67:74:
                    76:e8:ba:34:68:e7:c0:31:53:98:85:2e:81:1b:e1:
                    7a:8c:ca:89:f3:9a:85:63:58:3c:71:79:22:a4:09:
                    93:96:48:2c:ef:ed:9d:e0:f6:b6:2c:52:ab:74:ea:
                    26:1b:85:5c:f4:f1:a6:84:c2:c8:e4:1d:5c:1c:5c:
                    82:9d:82:16:ee:3a:bc:f5:a6:44:f5:88:b1:42:f0:
                    17:76:ec:53:7c:9d:c7:33:11:0b:2f:56:a6:c2:d5:
                    be:f6:71:90:aa:e9:4e:8e:0c:92:bc:e7:01:1d:dc:
                    07:b8:33:58:3d:90:b6:7d:96:97:fb:34:fd:28:01:
                    9c:09:f9:84:0b:61:af:25:ae:4a:a6:24:65:75:0f:
                    74:a3:d0:12:24:96:16:b4:18:72:38:38:95:d0:0d:
                    f6:b2:b2:fe:1e:4a:8a:a6:3c:81:26:f4:22:b6:24:
                    28:52:30:98:b9:c9:db:ee:4e:6e:78:dc:3c:4c:fd:
                    70:1a:47:f0:c0:d5:63:ee:ba:c1:26:49:8c:0e:80:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:3D:1B:4E:D5:4B:6A:C3:B7:B0:36:2E:22:E7:40:55:05:AB:0D
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:9c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:b3:56:b9:44:5c:9c:dc:8d:84:77:81:7e:ad:d0:7a:23:
         84:82:90:84:5d:b0:15:aa:a0:cb:dc:e4:f1:35:66:cd:e7:ae:
         80:22:d4:37:58:b1:9e:e8:72:39:08:c9:56:61:21:2c:7c:f5:
         99:32:be:98:a6:a8:98:7e:61:b3:66:07:24:f4:c8:bd:06:7e:
         da:12:7f:21:e8:33:f4:0c:65:23:dc:0f:9b:ba:82:4f:b3:6d:
         31:39:12:5b:42:3d:83:30:af:3f:3d:cf:c8:4a:93:4a:a4:95:
         1c:e2:b1:84:ed:61:9e:bd:b3:a2:fb:e9:eb:3b:09:a0:4e:08:
         5c:17:73:31:af:6c:6e:6d:ad:99:20:3b:d5:82:16:f1:d2:d1:
         6e:2d:eb:a6:10:d7:80:94:3f:78:f4:c2:39:b0:1d:b4:00:2d:
         25:c7:c7:2f:ab:23:65:19:e2:84:f2:e7:73:73:e0:5e:d8:08:
         59:a2:7c:76:05:93:a5:e1:09:b1:cf:d3:08:d9:cf:61:03:ba:
         c3:93:f8:60:3b:e7:08:37:00:1a:40:e9:c4:cc:55:d2:34:9e:
         e3:38:a3:5e:4e:de:43:83:77:e1:e8:e0:07:fa:27:d3:17:4b:
         4f:ec:d6:f0:92:f2:fc:fe:fd:ff:47:20:e4:42:22:30:e1:8b:
         eb:24:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 07:52:24 2026 by rpki-client