Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          3nFLxhMZGNhDZwpTX4Cu7UJCNCSOdbYgQHT6+GVAgLs=
Subject key identifier:   3C:3D:04:5B:5F:62:9F:67:02:DE:04:82:E5:F3:C5:9E:18:36:12:0C
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       21E0C3256B2CB5408986E08C13E0B64ED42E15FE
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:45:15 +0000
ROA not before:           Tue 06 Oct 2026 11:40:15 +0000
ROA not after:            Tue 05 Oct 2027 11:45:15 +0000
asID:                     269463
IP address blocks:        2804:6504:bc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 21:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e0:c3:25:6b:2c:b5:40:89:86:e0:8c:13:e0:b6:4e:d4:2e:15:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:40:15 2026 GMT
            Not After : Oct  5 11:45:15 2027 GMT
        Subject: CN=3C3D045B5F629F6702DE0482E5F3C59E1836120C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:17:af:b9:74:d4:67:1f:64:9d:b6:c5:1e:
                    31:76:60:bb:9e:b8:43:93:4e:36:91:12:cc:d4:41:
                    19:67:61:dd:89:ba:0a:05:ab:3d:13:3b:bd:22:da:
                    8e:8f:4d:8a:3d:f4:db:bd:2e:c1:7f:e8:4c:f1:78:
                    4a:23:6e:fe:e3:23:5d:b7:0e:ee:9f:5c:2f:25:aa:
                    c6:60:bf:74:7b:13:72:af:b8:95:aa:4e:ba:6f:c7:
                    be:2e:83:a6:47:90:e6:65:bf:2c:4f:09:ed:0d:e4:
                    a0:16:4b:99:2c:be:b7:03:c1:a0:63:cb:70:79:93:
                    e1:e4:89:78:75:40:2e:37:8e:4c:23:bc:5a:a1:a8:
                    f7:97:b1:50:3c:10:62:1a:8b:d6:15:df:42:a1:7b:
                    bf:77:53:dc:51:32:9b:f6:1f:12:4b:23:7e:9f:c7:
                    43:5b:98:1b:c2:41:d8:aa:49:a7:6a:e2:0c:4d:eb:
                    38:60:45:68:db:7f:ec:6a:d4:f7:ac:8d:12:49:06:
                    14:b3:86:d2:42:d4:2e:b8:63:9c:0b:9c:db:27:17:
                    38:11:79:4b:8e:c1:4d:8b:26:19:c3:be:01:ce:02:
                    68:a6:53:71:73:b6:2a:07:29:fb:80:10:31:b5:d1:
                    23:59:ee:43:29:f8:3e:ef:44:28:e2:a1:d9:b6:69:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3D:04:5B:5F:62:9F:67:02:DE:04:82:E5:F3:C5:9E:18:36:12:0C
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a626330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:bc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         bb:d0:01:fe:b6:73:a3:27:ce:17:fc:91:21:f0:dc:72:7e:30:
         b6:18:52:b1:00:37:8a:47:99:3d:7f:c0:34:ce:34:db:67:d2:
         87:13:27:cf:47:50:1f:65:3e:5c:dd:cb:ae:1c:59:3b:02:da:
         48:20:0f:1e:d2:37:8c:24:48:2e:a7:d2:ec:2d:fb:77:d2:43:
         a9:16:3c:70:85:a6:4e:af:06:4a:3a:98:f3:31:61:37:a4:37:
         96:ef:16:9b:ab:a8:64:27:d2:bc:a0:2d:9a:84:1f:f1:7b:a2:
         f9:7a:2d:3b:cb:95:2d:dd:a2:b2:0c:51:c0:30:e1:c2:36:01:
         87:1e:78:14:45:2b:00:a8:4a:0b:a5:00:74:60:ce:0f:fa:94:
         9b:10:25:db:18:ba:ac:90:19:24:78:c2:a0:30:17:cb:c9:86:
         17:81:f8:0a:69:69:0d:5d:20:34:2e:20:c6:91:d3:55:3b:e6:
         87:5d:ce:35:83:ad:33:21:0a:d0:c8:bd:77:2e:d6:79:6a:bb:
         69:94:c6:35:fd:81:d2:a2:9c:1a:b5:c5:3d:4d:f7:3f:a9:29:
         f0:7d:10:59:af:ac:c8:00:0e:c5:4d:18:6c:12:9c:a8:83:a4:
         54:59:72:3a:fe:9e:83:a3:84:f3:84:ad:a7:82:19:66:00:5c:
         2a:28:3a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:07:31 2026 by rpki-client