Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          vEZJxNBF3xts+f5wSZoNgWSGGJ3mf6DZCyC2uCD37+s=
Subject key identifier:   68:38:C6:FF:E3:83:58:88:F8:67:16:0A:60:B7:40:C4:1E:DC:0D:E0
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       54E79F6F0E40FC7A8E677DDC8063CAF580D8BB82
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:44:56 +0000
ROA not before:           Tue 06 Oct 2026 11:39:56 +0000
ROA not after:            Tue 05 Oct 2027 11:44:56 +0000
asID:                     269463
IP address blocks:        2804:6504:a400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 21:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e7:9f:6f:0e:40:fc:7a:8e:67:7d:dc:80:63:ca:f5:80:d8:bb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:39:56 2026 GMT
            Not After : Oct  5 11:44:56 2027 GMT
        Subject: CN=6838C6FFE3835888F867160A60B740C41EDC0DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:ae:92:11:c2:fb:6b:bc:a2:fc:dd:e8:fb:
                    2b:fe:c9:f9:68:44:e8:5a:85:0e:9e:5a:52:4f:0c:
                    89:c9:20:e9:1d:a4:90:56:ff:a8:44:bf:bf:4c:26:
                    86:55:7a:1d:b0:31:e6:88:2f:7e:d5:41:53:92:25:
                    6f:ff:2f:58:70:e6:86:26:f3:2f:77:1b:ca:f7:58:
                    e7:4e:bc:16:fd:0a:41:1b:b6:71:0b:94:99:20:f0:
                    63:e7:68:84:52:1c:eb:23:ac:28:f5:41:e4:c4:39:
                    81:56:6e:fb:59:89:8a:83:5b:9d:bf:4d:df:28:04:
                    f8:10:78:5a:e6:0c:1e:1a:1a:3c:8d:47:ec:0d:53:
                    ee:47:bc:7b:cf:82:af:30:e3:57:5f:5a:01:a0:c5:
                    70:b1:00:ad:2c:5a:93:07:64:66:4e:f5:27:70:dd:
                    50:dc:9e:8b:c1:bb:6d:94:18:1e:25:cf:67:1c:7c:
                    7b:62:93:4e:eb:13:f8:7d:66:4e:91:b2:96:dd:3f:
                    fd:b7:9b:68:5c:30:2d:4d:e0:bb:57:ba:3e:6d:96:
                    4a:5c:c4:b5:8c:d5:46:d4:89:3b:ab:6b:5d:27:a3:
                    d7:ef:56:ab:a4:44:b4:af:c8:1a:24:8a:36:04:1f:
                    e5:7a:d7:8f:a5:75:0f:2e:b3:ac:93:18:b6:f4:bc:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:38:C6:FF:E3:83:58:88:F8:67:16:0A:60:B7:40:C4:1E:DC:0D:E0
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         21:60:79:26:27:60:27:33:02:d5:88:47:a5:b1:51:76:77:eb:
         f0:81:03:28:c9:87:36:7e:75:31:f2:f3:40:93:19:ce:8f:57:
         bc:87:00:4b:cc:ea:3b:c3:95:7d:8b:3a:25:a9:db:ed:0f:b3:
         bd:05:75:95:6c:c2:5d:54:20:d8:d2:aa:3d:7a:f3:6a:2e:f6:
         f5:ee:29:70:aa:a1:5c:18:39:ac:7c:af:b7:97:6f:04:ca:fb:
         bc:56:0e:3d:25:e8:64:f8:a3:94:b6:9f:02:7e:1e:65:31:9b:
         f5:22:77:18:ac:24:20:aa:68:eb:15:01:15:54:4a:c1:e0:99:
         48:3e:0a:d8:f3:d6:5e:32:64:af:08:44:e7:56:37:08:b0:69:
         b1:d6:5b:18:86:a1:21:4d:2c:84:c4:9e:22:e5:69:d3:a5:d5:
         76:93:0c:82:74:1d:c4:a7:1c:97:d6:1d:ce:5e:69:f4:4f:6c:
         2b:82:d3:11:cd:b1:13:0d:ca:0e:43:59:b2:9c:ef:71:2a:c0:
         23:a8:72:ce:d0:13:68:0c:70:bc:4f:a5:0a:24:be:6e:6f:f9:
         43:0f:65:a6:f0:28:7c:07:e0:15:bc:93:b1:ef:7f:5f:c0:df:
         06:ee:9b:da:b3:eb:35:3d:4b:4c:40:b1:8d:8c:67:6d:60:c3:
         fb:8a:a5:3b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVOefbw5A/HqOZ33cgGPK9YDYu4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI5N0IzOUUxMzRBNzFGOEUwMTk1M0U3OUUzQzJEMjhF
MjQyNDM5NzAeFw0yNjEwMDYxMTM5NTZaFw0yNzEwMDUxMTQ0NTZaMDMxMTAvBgNV
BAMTKDY4MzhDNkZGRTM4MzU4ODhGODY3MTYwQTYwQjc0MEM0MUVEQzBERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzm66SEcL7a7yi/N3o+yv+yflo
ROhahQ6eWlJPDInJIOkdpJBW/6hEv79MJoZVeh2wMeaIL37VQVOSJW//L1hw5oYm
8y93G8r3WOdOvBb9CkEbtnELlJkg8GPnaIRSHOsjrCj1QeTEOYFWbvtZiYqDW52/
Td8oBPgQeFrmDB4aGjyNR+wNU+5HvHvPgq8w41dfWgGgxXCxAK0sWpMHZGZO9Sdw
3VDcnovBu22UGB4lz2ccfHtik07rE/h9Zk6RspbdP/23m2hcMC1N4LtXuj5tlkpc
xLWM1UbUiTura10no9fvVqukRLSvyBokijYEH+V614+ldQ8us6yTGLb0vMnFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUaDjG/+ODWIj4ZxYKYLdAxB7cDeAwHwYDVR0j
BBgwFoAUcpeznhNKcfjgGVPnnjwtKOJCQ5cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC83Mjk3QjM5RTEzNEE3MUY4RTAxOTUzRTc5RTNDMkQyOEUyNDI0Mzk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyOTdCMzlFMTM0QTcxRjhF
MDE5NTNFNzlFM0MyRDI4RTI0MjQzOTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpQ3diQVMxTG5nNUxvVGNxeURySmNxQm52N2VXZnF1TGpEajdYMU5oTTJNLzAv
MzIzODMwMzQzYTM2MzUzMDM0M2E2MTM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzOTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEZQSkMA0GCSqGSIb3DQEBCwUA
A4IBAQAhYHkmJ2AnMwLViEelsVF2d+vwgQMoyYc2fnUx8vNAkxnOj1e8hwBLzOo7
w5V9izolqdvtD7O9BXWVbMJdVCDY0qo9evNqLvb17ilwqqFcGDmsfK+3l28Eyvu8
Vg49Jehk+KOUtp8Cfh5lMZv1IncYrCQgqmjrFQEVVErB4JlIPgrY89ZeMmSvCETn
VjcIsGmx1lsYhqEhTSyExJ4i5WnTpdV2kwyCdB3EpxyX1h3OXmn0T2wrgtMRzbET
DcoOQ1mynO9xKsAjqHLO0BNoDHC8T6UKJL5ub/lDD2Wm8Ch8B+AVvJOx739fwN8G
7pvas+s1PUtMQLGNjGdtYMP7iqU7
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:07:20 2026 by rpki-client