Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          d/wsgCxS0xsx17QTM+XNuAwZ6TJG6cwT2W4rKl/egmw=
Subject key identifier:   A7:DD:8F:1D:A1:3A:00:31:1A:37:03:87:83:E7:23:48:2D:4A:3B:E5
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       09267116451E7C181D144AC91F87E1E04D8FBC47
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:45:24 +0000
ROA not before:           Tue 06 Oct 2026 11:40:24 +0000
ROA not after:            Tue 05 Oct 2027 11:45:24 +0000
asID:                     269463
IP address blocks:        2804:6504:c000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:26:71:16:45:1e:7c:18:1d:14:4a:c9:1f:87:e1:e0:4d:8f:bc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:40:24 2026 GMT
            Not After : Oct  5 11:45:24 2027 GMT
        Subject: CN=A7DD8F1DA13A00311A37038783E723482D4A3BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:9c:bf:9c:8d:21:7d:71:90:34:45:4e:c1:
                    af:e0:ae:12:a7:c0:bc:09:82:12:d5:40:a4:ba:61:
                    97:8b:d2:1a:5f:ab:d1:e0:44:84:16:c0:5e:fc:25:
                    8f:a6:d0:a7:02:0b:3d:c6:e6:9a:52:27:5a:74:26:
                    b3:53:87:10:01:c1:bc:39:e9:95:c7:ca:f4:68:08:
                    e9:9b:7f:aa:41:6c:ae:38:dc:55:87:70:c3:f4:4e:
                    e1:5c:52:1a:d0:fb:72:4c:b6:a8:52:ef:0b:46:1c:
                    f0:87:c6:5b:e7:02:7f:6a:8f:97:57:90:fe:eb:a2:
                    40:df:b3:98:b8:53:13:15:4f:fc:8c:15:45:2e:0b:
                    f7:1b:d7:60:74:e8:94:2f:96:a5:1b:38:4b:70:22:
                    8f:0f:34:f1:4e:44:78:f7:82:59:74:b5:c2:c6:69:
                    2d:5e:4c:e4:74:51:5f:18:19:94:ad:fb:3f:b0:4a:
                    4c:2b:61:5d:0c:82:cb:0f:08:4e:f3:c8:25:e3:df:
                    1a:43:a4:ab:27:7c:64:30:8e:4e:e6:c5:a1:d2:f7:
                    eb:a9:6b:63:e9:c2:dd:1f:d1:9c:af:78:ce:64:44:
                    60:e2:2f:06:bf:c4:eb:1a:7f:8b:f0:1f:00:8c:06:
                    c3:a0:8b:7b:67:f9:54:2e:1c:e4:8c:12:8d:7c:58:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:8F:1D:A1:3A:00:31:1A:37:03:87:83:E7:23:48:2D:4A:3B:E5
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:c000::/38

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:ab:73:3a:24:fd:95:9c:4c:84:ce:9e:30:76:db:33:a2:
         2f:1f:b9:01:cc:0d:44:59:32:e3:fa:d0:cf:4b:d7:d1:b6:df:
         4e:5c:ba:8e:41:b4:0f:c0:ca:7a:1f:98:2d:49:cf:f5:aa:4e:
         6b:c3:f5:91:36:52:78:6b:cc:ee:bc:b2:70:5f:ea:05:ec:1d:
         c8:20:ff:fd:9d:8c:fc:25:f7:7f:f5:ad:d1:56:cd:ce:ed:3d:
         0e:60:ac:5c:13:d4:54:63:df:c4:d8:6f:06:d1:bb:75:ca:87:
         a1:8b:3c:86:e5:d4:d0:70:60:a4:3e:e9:26:87:70:5a:ac:54:
         71:fa:4c:86:74:db:41:0b:18:dc:4e:53:69:06:70:ec:f4:64:
         65:48:dc:e8:06:aa:48:cf:9f:00:91:71:6c:f2:a6:ac:7d:d5:
         30:60:21:64:40:81:f2:ee:85:b1:7b:be:49:6d:a0:df:1c:9d:
         f4:5b:3d:fd:96:c3:47:e6:da:84:44:a1:b1:76:4f:ed:88:43:
         18:30:4a:bb:de:07:7f:ba:80:51:3e:46:51:09:13:9f:57:53:
         79:34:0e:a0:4f:6c:48:a6:42:a3:13:f2:76:d5:11:b2:08:9c:
         fa:eb:4b:78:78:d0:b6:71:87:16:01:ee:01:e5:26:d1:51:e8:
         94:cf:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:11:54 2026 by rpki-client