Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          WotuIjvSYBvg1ztU6OlVpaSnJ+gQ7Vy+YLuzc9HHh9M=
Subject key identifier:   FB:32:FD:4C:97:8B:AD:DF:2D:F8:23:AB:5E:52:A6:A7:6A:B5:3A:9D
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       0405FAE16EF48BD1B8F564F7CB309163D354A7
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:45:09 +0000
ROA not before:           Tue 06 Oct 2026 11:40:09 +0000
ROA not after:            Tue 05 Oct 2027 11:45:09 +0000
asID:                     269463
IP address blocks:        2804:6504:b400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:05:fa:e1:6e:f4:8b:d1:b8:f5:64:f7:cb:30:91:63:d3:54:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:40:09 2026 GMT
            Not After : Oct  5 11:45:09 2027 GMT
        Subject: CN=FB32FD4C978BADDF2DF823AB5E52A6A76AB53A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:9d:47:84:66:81:c5:a9:d0:71:9e:55:99:
                    1f:a6:b7:c6:0f:65:b3:26:eb:8b:d3:9a:82:ed:53:
                    6f:90:ec:bc:dc:22:ac:27:58:08:f3:0a:4f:bf:e0:
                    61:8c:cf:1c:be:2c:ca:ae:c8:5e:09:e1:47:2e:61:
                    9c:8e:b9:d4:d5:60:5d:86:87:8e:fe:17:1b:ee:5f:
                    3b:bc:01:71:dd:a1:34:31:68:22:5c:8c:03:27:12:
                    66:91:93:93:5d:6a:dd:dd:e7:ee:36:a9:18:8e:23:
                    1b:a0:9c:df:a2:00:5e:c9:1d:cc:19:21:83:1a:77:
                    6f:67:a6:fe:41:67:94:4c:77:05:6b:5f:e9:96:4d:
                    68:dd:5c:22:b6:5b:2a:b9:9b:69:1a:d2:bc:ed:de:
                    2d:e6:1b:eb:6a:e0:34:58:2c:16:d8:28:39:bf:b6:
                    28:e6:2a:ff:ca:81:c2:a7:47:da:0f:07:12:f6:8a:
                    83:37:83:55:ae:07:1a:19:06:d7:74:df:a0:f7:1f:
                    8d:0e:1f:e2:44:fe:f2:94:d6:33:18:77:f7:49:3d:
                    c9:24:ae:32:fc:7e:37:77:4c:6b:bd:a3:c3:f8:cf:
                    4e:b8:12:81:48:36:88:b9:c0:0a:18:99:7d:c0:82:
                    2d:21:22:4f:fd:06:ec:d9:60:b8:b7:ad:4b:47:69:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:FD:4C:97:8B:AD:DF:2D:F8:23:AB:5E:52:A6:A7:6A:B5:3A:9D
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a623430303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:b400::/38

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:eb:ab:d5:49:0a:12:b6:69:d4:42:d5:6a:2f:5b:af:d6:
         da:50:86:b7:5d:3c:46:0c:52:24:49:bc:0c:b7:23:ac:98:41:
         3a:15:f2:e8:59:1b:3d:5a:f8:73:df:42:a7:30:76:64:5d:21:
         25:d8:48:8e:24:59:18:1c:83:a7:fe:ba:55:49:d3:6c:7d:77:
         61:40:86:09:9e:1f:2e:bf:8a:de:c5:1e:d5:4b:06:f4:49:f1:
         92:b3:00:a3:a3:ec:c5:4b:75:ee:97:70:b1:91:09:e0:de:28:
         84:92:c1:15:f5:32:b3:1c:06:f4:49:68:2e:12:ae:d9:6f:11:
         2f:74:15:a9:6a:70:e1:ef:54:c0:5d:71:a4:55:6f:35:0e:eb:
         ac:55:a8:1a:1e:06:8b:13:b8:af:20:0c:f1:6c:a9:e7:a5:dc:
         d4:5a:73:9d:00:33:0f:ec:40:81:84:1c:50:da:7d:09:6c:43:
         b9:d0:5b:db:f8:5b:e6:3e:2c:98:c1:c9:0a:a4:7e:f9:43:40:
         d1:ef:23:49:33:7e:e6:5b:82:8a:f4:eb:ea:f1:fa:32:ae:14:
         ce:c3:1c:7a:a1:e1:45:21:33:ed:5e:42:fe:58:86:83:03:05:
         da:04:74:74:05:f1:de:dc:0d:87:33:f1:c6:6d:ec:f2:fc:ce:
         49:dd:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:39:49 2026 by rpki-client