Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          kry5LLvmUdoSq4gRNJrekfPzX46AoqhknIr/zP/IHkQ=
Subject key identifier:   B2:14:20:79:73:BC:78:E2:5A:11:0C:36:7A:93:C8:C9:5A:FA:79:C4
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       5D34C7711C5DC218A083AAF5651F7850F023CC75
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:45:00 +0000
ROA not before:           Tue 06 Oct 2026 11:40:00 +0000
ROA not after:            Tue 05 Oct 2027 11:45:00 +0000
asID:                     269463
IP address blocks:        2804:6504:a800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 21:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:34:c7:71:1c:5d:c2:18:a0:83:aa:f5:65:1f:78:50:f0:23:cc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:40:00 2026 GMT
            Not After : Oct  5 11:45:00 2027 GMT
        Subject: CN=B214207973BC78E25A110C367A93C8C95AFA79C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:65:63:7d:9a:12:5b:d9:8e:33:c4:c5:ba:
                    f4:25:46:11:ea:fa:75:6a:6b:dc:b2:01:c6:c8:a4:
                    77:26:35:e6:db:56:3f:8b:0d:8c:13:ee:92:f6:f1:
                    2e:17:95:34:5b:76:af:70:e8:fc:0b:a9:01:06:04:
                    63:ea:b0:15:76:f5:6a:65:c6:d2:7a:99:1a:4c:3e:
                    3a:54:62:fe:24:6b:5b:1f:e2:cd:96:af:7e:71:98:
                    cd:6c:04:1c:5f:2a:a5:ed:8f:c9:4a:90:99:14:67:
                    e4:96:8b:aa:6b:9c:4a:dd:aa:cb:fd:70:b3:22:3b:
                    a3:92:1d:0d:ff:5b:c1:f3:1e:07:16:f1:25:b6:ac:
                    5a:88:7d:11:4c:72:6e:e0:bf:51:f2:f1:18:f6:4f:
                    6b:9d:a4:42:ad:70:f4:67:00:d5:85:9b:be:6d:09:
                    48:3f:4c:53:ec:5b:4a:07:11:a5:c6:65:c2:57:2c:
                    76:f6:7a:2e:e4:d8:70:58:96:21:3a:ec:96:85:31:
                    dc:95:25:cb:3f:70:09:b6:4b:ab:d0:7a:1a:b3:29:
                    e1:fc:b0:dc:ee:5a:bc:17:df:35:47:be:8c:a5:84:
                    80:82:7c:bf:5a:1d:e8:6d:a3:52:96:2a:a5:03:12:
                    6a:be:2f:97:3f:5a:39:7f:37:96:4c:15:b2:d7:96:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:20:79:73:BC:78:E2:5A:11:0C:36:7A:93:C8:C9:5A:FA:79:C4
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a613830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:a800::/38

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:be:f0:64:b3:c6:a3:32:1b:6d:d8:09:fa:cb:7e:22:5b:
         63:49:86:fe:a9:be:0c:de:5f:03:c7:b2:65:fe:2e:f3:ad:4a:
         89:e6:ff:85:db:d6:c0:38:76:40:3a:bc:bc:7e:ab:54:08:82:
         56:c5:0a:09:48:d6:62:59:9b:a9:c7:93:db:16:1b:b7:74:6d:
         8f:96:d0:a7:39:87:6d:f9:11:dd:5f:d8:0a:ed:ed:d4:37:a7:
         43:b9:e1:98:fa:db:47:26:81:17:3f:da:d3:11:7c:71:b6:d0:
         a1:74:4f:52:ad:7f:ac:e8:07:89:83:2c:af:43:07:cb:af:44:
         b8:7e:22:4d:50:99:16:54:59:1e:b8:36:13:ad:01:16:f8:37:
         7b:00:38:a9:29:df:91:ea:c1:32:62:9b:e0:f5:16:5e:17:36:
         3f:08:46:2e:26:81:4f:b5:72:39:c3:dc:55:2b:bc:39:5d:8d:
         0c:9e:1f:31:39:67:50:24:56:26:72:bc:3f:d5:74:3a:48:0e:
         04:ba:49:fb:3d:69:df:72:8b:c8:2c:14:3b:51:ec:71:45:44:
         30:98:67:5e:23:ab:71:5d:aa:f5:8f:1d:d4:4c:2e:06:51:52:
         64:63:f7:f7:16:62:38:bb:43:94:80:bf:50:7e:9b:d4:81:20:
         fb:7e:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:07:28 2026 by rpki-client