Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          cpa3l6dwq/+ziDV8J09Fif+PbjM0Ws3DQmFQ75exc8A=
Subject key identifier:   A3:FA:E1:3B:30:92:CE:4A:B4:18:25:B1:E2:5C:1C:22:E2:B5:A6:19
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       43D1A8D81FCA5ACFB643C2BC3380CCA424E87D86
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:46:10 +0000
ROA not before:           Tue 06 Oct 2026 11:41:10 +0000
ROA not after:            Tue 05 Oct 2027 11:46:10 +0000
asID:                     269463
IP address blocks:        2804:6504:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d1:a8:d8:1f:ca:5a:cf:b6:43:c2:bc:33:80:cc:a4:24:e8:7d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:41:10 2026 GMT
            Not After : Oct  5 11:46:10 2027 GMT
        Subject: CN=A3FAE13B3092CE4AB41825B1E25C1C22E2B5A619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:9f:9d:23:67:83:68:b2:f3:12:c2:11:38:
                    fe:c0:51:60:73:03:b8:8b:32:1d:99:68:fe:1d:c7:
                    4d:ef:e1:70:a9:0b:e7:e1:4b:5d:83:73:42:86:f7:
                    d4:3c:d8:93:ec:57:cd:76:a9:f9:f6:a0:42:52:19:
                    6c:5a:d9:e7:33:4d:e2:ab:c2:83:a0:35:b3:e2:e5:
                    da:9c:d9:38:ec:dc:70:8b:a3:ec:4a:fb:c5:de:a1:
                    ba:f6:4d:1d:6c:26:be:89:f6:05:bc:2b:67:7a:a9:
                    74:b9:0a:31:ca:39:9d:4e:2d:7c:61:ac:62:fc:77:
                    aa:b2:c0:b0:cf:1c:42:df:d6:a1:fb:1b:c8:6c:66:
                    8c:fe:27:2b:47:41:57:6f:f9:cb:6e:91:7d:21:ab:
                    b6:a5:61:d2:61:3f:56:eb:a1:25:d2:5a:db:e6:67:
                    dd:bb:f1:70:7d:79:bc:f3:5e:97:a9:4b:a5:8c:77:
                    b4:6a:52:66:66:65:83:52:f8:b9:9b:b6:ed:89:c3:
                    5c:9a:6f:b5:86:9b:ce:63:bc:af:4d:ed:fc:cb:14:
                    d1:30:44:ed:33:7a:b4:13:71:f8:b6:00:2c:f5:03:
                    24:a6:7a:fc:fb:f4:af:03:c9:a4:15:15:54:b7:40:
                    68:d7:25:38:54:f9:57:26:6f:33:31:c8:49:2a:3c:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FA:E1:3B:30:92:CE:4A:B4:18:25:B1:E2:5C:1C:22:E2:B5:A6:19
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a653030303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:e000::/38

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:cb:2a:dc:84:1b:1f:c5:85:68:96:90:d5:83:81:eb:04:
         96:ef:0a:3e:17:01:5f:20:16:68:28:df:8f:c9:ad:3a:b5:bb:
         f4:4b:20:31:8c:8f:1f:02:71:b4:c1:28:d6:20:ae:d3:8e:54:
         0b:74:0c:07:90:93:97:9e:d3:ca:9d:11:e4:a5:31:7c:78:bc:
         45:a9:df:bd:70:a2:57:4e:65:e0:32:96:c4:15:b8:98:c3:ed:
         d2:ea:f5:44:4d:81:15:50:a5:c9:70:b6:ad:81:77:18:5c:fd:
         90:2f:01:9c:2e:93:41:fd:cc:eb:8e:e5:fe:a0:fe:3c:69:2e:
         2e:71:17:2d:63:54:d2:a6:0b:a9:93:15:36:a3:db:ef:6a:e7:
         4b:26:a6:28:47:0e:d3:00:8d:2b:6b:9d:b8:75:b9:41:bb:7d:
         7e:49:55:f8:fd:3b:3f:0b:5b:6e:6e:da:5f:d9:a2:c5:2b:db:
         c3:4d:84:b1:08:fe:30:25:10:cd:9a:6b:87:31:db:4d:c8:b2:
         53:e3:1e:06:5e:c9:24:13:a8:14:1b:af:d1:fe:91:11:1f:ca:
         9d:e2:30:ab:44:e6:9b:ed:51:3d:44:e4:15:6c:08:6e:cf:84:
         40:0b:39:09:ae:57:d8:94:c3:8b:a5:d8:2c:52:b3:17:c5:e2:
         2d:a0:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:27:33 2026 by rpki-client