Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          IHCtdlCd9++PtDw8jL+eIu6J6ommLTds3/8B7d7fdhM=
Subject key identifier:   53:3C:CC:91:83:1D:39:C2:14:8A:CD:B6:B7:39:B8:66:30:82:0D:E3
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       3B8D70B00D095F53073057CB196A84347C153B7B
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:46:01 +0000
ROA not before:           Tue 06 Oct 2026 11:41:01 +0000
ROA not after:            Tue 05 Oct 2027 11:46:01 +0000
asID:                     269463
IP address blocks:        2804:6504:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8d:70:b0:0d:09:5f:53:07:30:57:cb:19:6a:84:34:7c:15:3b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:41:01 2026 GMT
            Not After : Oct  5 11:46:01 2027 GMT
        Subject: CN=533CCC91831D39C2148ACDB6B739B86630820DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:df:51:4e:34:f2:a4:3c:ce:df:88:5e:91:
                    8d:3c:6a:f7:85:ff:6a:18:73:88:87:69:90:89:4f:
                    aa:af:f7:7d:96:a6:8b:a7:48:d3:c2:f0:ec:89:bc:
                    48:f3:e1:9c:4b:5f:03:26:1a:cf:2a:96:03:b6:d1:
                    a1:70:47:77:54:5c:13:ab:27:c2:45:9f:6f:f5:c7:
                    fe:70:90:bb:73:e8:c5:b5:36:82:08:e9:9f:34:2f:
                    57:1a:af:33:38:9d:ae:32:06:f3:0a:32:9b:fb:12:
                    3c:1e:22:96:4d:c3:52:f3:0e:bb:91:5b:e8:33:94:
                    78:9b:89:dd:0a:51:9b:7b:f7:c1:ae:26:62:ad:85:
                    ad:29:21:49:28:92:38:11:1a:47:cb:54:70:9f:69:
                    64:35:a6:33:42:f9:1a:7a:2d:d9:bb:8f:26:89:6e:
                    c2:f2:0b:f6:99:82:e5:1b:ac:7b:66:2d:a5:36:2d:
                    a4:c9:93:e8:45:0c:a2:3d:03:8a:91:0a:d7:3d:62:
                    15:66:16:e4:35:90:f8:7f:fe:74:53:bd:e5:f1:9b:
                    1d:9f:bc:67:08:62:9b:f5:19:87:cd:3f:3b:c6:32:
                    bf:54:4c:f4:7d:e8:66:a8:3a:e6:64:f8:01:25:73:
                    88:b7:4d:6a:22:8e:19:09:85:d2:0b:db:51:39:eb:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:CC:91:83:1D:39:C2:14:8A:CD:B6:B7:39:B8:66:30:82:0D:E3
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a643830303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:d800::/38

    Signature Algorithm: sha256WithRSAEncryption
         a8:3c:c0:59:04:5d:a4:84:32:bd:2b:f0:3d:36:0c:b8:da:d9:
         4f:bd:f9:20:36:7c:06:46:a1:28:15:ae:3f:81:0b:d0:c4:be:
         cf:13:c8:f7:60:3d:0d:8f:ea:6e:12:95:1d:7b:40:d6:fb:6b:
         99:af:82:5e:8b:5b:e8:e9:0c:71:12:c3:6c:50:b1:2a:9f:0e:
         fb:b4:dc:ba:85:79:4b:31:07:54:03:37:e6:61:08:66:5b:1f:
         2f:46:cd:08:ca:1c:6b:22:7a:db:91:0c:2b:3f:18:ae:b3:59:
         c0:87:ba:33:e0:26:1f:0a:81:81:88:26:58:d2:e8:63:23:84:
         00:79:b3:b0:a5:59:24:61:04:6e:ad:61:c4:3c:70:c2:d8:c3:
         6c:85:88:a3:5e:d3:1c:50:71:26:ca:15:1f:27:3c:55:8e:a4:
         34:1d:c2:4a:ec:eb:82:a0:e2:a4:e2:ca:e7:72:2c:37:d6:48:
         6a:87:04:5f:1b:8d:aa:65:b0:91:fb:a4:03:a8:34:03:3d:15:
         b0:8a:4e:00:ca:81:25:f9:87:34:0d:c8:5b:14:00:bd:db:a3:
         af:0d:02:c8:cd:02:f6:58:70:45:c8:e9:39:22:ba:28:08:91:
         cb:82:c0:c4:16:68:93:d3:4a:26:14:da:5e:58:16:2e:24:d1:
         00:1c:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:11:51 2026 by rpki-client