Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3332203d3e20323639343633.roa
File:                     323830343a363530343a3a2f33322d3332203d3e20323639343633.roa (raw, json)
Hash identifier:          VXT2VoW4Y35RKqw4YEVor+9Jtl1oULlmrKbcfNu5r9k=
Subject key identifier:   64:16:EA:F4:02:08:78:C1:21:E4:04:4E:CF:E2:ED:B2:FB:86:54:E6
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       7034707849B21B580F4747C561832225F9D9EF01
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3332203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:42:23 +0000
ROA not before:           Tue 06 Oct 2026 11:37:23 +0000
ROA not after:            Tue 05 Oct 2027 11:42:23 +0000
asID:                     269463
IP address blocks:        2804:6504::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 02:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:34:70:78:49:b2:1b:58:0f:47:47:c5:61:83:22:25:f9:d9:ef:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:37:23 2026 GMT
            Not After : Oct  5 11:42:23 2027 GMT
        Subject: CN=6416EAF4020878C121E4044ECFE2EDB2FB8654E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:5a:21:4f:a2:0b:76:c6:9f:0f:e7:7a:9a:
                    9a:f6:03:91:96:c3:ab:ba:c3:3e:ba:de:1c:7e:08:
                    64:57:47:b8:9d:fa:91:94:9b:17:f4:4d:e8:5c:4b:
                    22:13:1c:5c:4e:16:93:77:e5:ab:50:39:b0:7c:39:
                    e6:2a:70:8c:71:53:35:7b:ef:45:b7:77:4a:8b:3c:
                    8d:75:d9:64:61:35:9c:53:2a:76:d0:5b:0a:3a:c3:
                    80:7c:a3:3b:86:c1:9e:b9:06:a6:74:71:9b:80:49:
                    a1:da:17:41:9a:33:e4:31:9d:d4:ed:0f:26:51:f1:
                    e5:d6:7a:3d:5b:31:7b:36:7f:c7:7c:80:81:6b:4d:
                    5d:8e:64:ad:d4:5e:9b:1e:78:ae:00:4c:72:00:eb:
                    18:bf:8f:eb:06:17:16:f9:5c:b7:87:77:a7:3a:78:
                    d1:e7:75:ef:59:05:11:40:2d:55:ec:ba:86:ba:44:
                    06:20:7f:68:48:6a:49:e1:c5:0f:16:8f:1a:24:41:
                    65:0c:e9:45:81:79:ac:40:33:79:2b:6d:5d:f2:65:
                    7f:c3:84:d2:a6:71:c5:fe:68:b5:57:c2:6e:94:cc:
                    a7:4c:1c:9f:40:e9:49:81:e2:8c:09:21:9b:f6:75:
                    55:71:8f:a3:3f:57:bd:ea:2f:85:1d:8b:27:dd:18:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:16:EA:F4:02:08:78:C1:21:E4:04:4E:CF:E2:ED:B2:FB:86:54:E6
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33322d3332203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:dd:16:aa:98:75:de:2b:5c:d6:cb:3a:a5:0e:41:33:e2:b7:
         e5:6d:35:85:18:6a:87:9f:bf:e6:78:dc:53:66:db:ed:34:54:
         48:94:02:83:84:3a:44:6f:31:07:25:52:d0:41:3b:83:9e:bb:
         19:42:ef:06:9a:90:65:51:8e:56:3c:0e:65:93:fe:86:77:f8:
         46:28:a8:54:0b:36:91:1e:e6:f3:a3:b1:b5:be:69:78:d5:56:
         9d:21:39:f7:54:aa:17:ca:f0:f4:03:6c:9f:2c:67:37:13:c7:
         0c:fb:13:1a:c4:34:86:ec:d5:1f:5b:78:db:fb:df:68:13:73:
         97:28:68:81:50:af:cb:6e:83:a9:fe:1c:6d:b9:34:94:98:aa:
         d8:ab:f0:2b:90:6f:60:e8:b8:8b:0e:43:86:11:96:4d:60:04:
         75:28:52:59:bb:39:88:9a:2d:5f:66:f0:9a:e7:94:cd:03:46:
         d3:48:ca:dd:b1:a2:44:45:3f:b4:b7:fa:9b:3d:cc:04:95:a7:
         84:31:7b:35:25:04:90:17:65:06:16:cd:e0:4b:9b:d2:e4:a8:
         14:5a:1e:39:b6:d6:37:0b:5d:c3:40:9f:bf:f6:af:12:00:ad:
         e5:d3:8c:ca:b6:08:62:56:37:88:b0:bc:29:b7:1d:f7:cb:83:
         f1:7c:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:21:21 2026 by rpki-client