Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a656330303a3a2f33382d3338203d3e20323639343633.roa
File:                     323830343a363530343a656330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          ngrGoUCgNxltAy1/iOYKkY6XKMpDucCFuVorf+pW41o=
Subject key identifier:   FF:8E:0D:65:72:CF:12:A2:1E:8D:88:56:BC:63:B3:10:43:DA:08:08
Certificate issuer:       /CN=7297B39E134A71F8E01953E79E3C2D28E2424397
Certificate serial:       1CB95646A8461133AB80829A59B581E9DFDB8BE6
Authority key identifier: 72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a656330303a3a2f33382d3338203d3e20323639343633.roa
Signing time:             Tue 06 Oct 2026 11:46:25 +0000
ROA not before:           Tue 06 Oct 2026 11:41:25 +0000
ROA not after:            Tue 05 Oct 2027 11:46:25 +0000
asID:                     269463
IP address blocks:        2804:6504:ec00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b9:56:46:a8:46:11:33:ab:80:82:9a:59:b5:81:e9:df:db:8b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7297B39E134A71F8E01953E79E3C2D28E2424397
        Validity
            Not Before: Oct  6 11:41:25 2026 GMT
            Not After : Oct  5 11:46:25 2027 GMT
        Subject: CN=FF8E0D6572CF12A21E8D8856BC63B31043DA0808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:f9:6b:cd:70:7d:a1:c3:ad:97:c7:21:b8:
                    90:1d:ac:ee:3b:bb:7e:91:c3:06:48:5c:16:62:2f:
                    85:e1:a3:f4:e1:47:0a:a8:ac:69:67:7b:a0:ad:a2:
                    08:2c:6f:17:ad:c9:61:c6:9a:1c:64:17:12:18:9d:
                    f1:60:71:25:0b:73:ed:e9:07:02:11:3e:8a:ed:b1:
                    63:05:c6:b0:ba:b7:ce:77:67:e1:3e:c8:48:77:59:
                    fb:5d:83:53:f6:ae:1f:6f:bf:7e:8f:47:ec:60:47:
                    56:11:e7:1f:ec:47:e2:e7:13:e1:3f:46:b7:92:48:
                    cd:ba:5c:1c:57:18:bc:4d:53:6f:cc:97:fc:b2:48:
                    06:09:83:c6:69:b3:4e:a1:4a:63:28:8a:25:40:b4:
                    73:62:f8:51:0c:8c:2d:72:d1:8c:c9:69:d7:29:85:
                    50:d2:81:95:60:39:ae:20:11:c4:5a:a1:2d:18:36:
                    44:07:c6:25:14:21:5f:e0:c3:59:b4:19:18:58:78:
                    22:2e:54:2c:21:ce:98:18:cf:e2:0f:78:e1:b5:2c:
                    e7:d5:91:22:a4:28:e2:ed:41:9c:8e:1d:96:b1:12:
                    dd:ca:b7:d3:74:21:f9:76:b7:7d:78:44:ad:97:49:
                    f0:29:a5:f9:10:61:fd:80:0d:4f:65:84:c7:bc:bb:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8E:0D:65:72:CF:12:A2:1E:8D:88:56:BC:63:B3:10:43:DA:08:08
            X509v3 Authority Key Identifier:
                keyid:72:97:B3:9E:13:4A:71:F8:E0:19:53:E7:9E:3C:2D:28:E2:42:43:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/7297B39E134A71F8E01953E79E3C2D28E2424397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7297B39E134A71F8E01953E79E3C2D28E2424397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a656330303a3a2f33382d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504:ec00::/38

    Signature Algorithm: sha256WithRSAEncryption
         47:45:c1:31:21:bb:71:a7:0c:c2:3e:64:11:0b:93:b0:04:5a:
         cd:04:4e:4c:dc:19:f1:e7:7d:ef:59:96:ee:24:94:56:bd:2b:
         5f:f4:9a:f9:b2:80:5a:56:1a:79:0a:57:e0:7b:b7:ae:8a:5e:
         23:d9:1d:1d:79:6a:e7:25:1d:14:09:62:07:32:9e:af:36:8a:
         1b:11:80:4e:5f:9b:83:b6:07:83:ea:3e:95:62:d2:6b:63:ed:
         ba:99:5f:21:d7:71:cb:6a:15:43:e2:8b:5e:99:5f:b6:7a:9c:
         bf:54:cd:f9:e5:f6:86:f7:95:a5:a6:eb:ed:37:d7:3a:ab:94:
         bb:2f:22:6d:1c:7d:01:b5:07:ea:ab:94:52:6c:a7:70:7e:c6:
         5c:8b:d9:89:c8:4e:b9:c4:f1:a5:59:f5:31:ce:e4:c3:aa:85:
         3b:8a:ca:23:ed:c8:29:cd:80:57:0a:3f:4c:1b:f4:23:9b:ac:
         00:45:c4:55:1b:f6:80:82:01:64:af:00:37:aa:d7:25:33:f4:
         3d:c8:05:56:c1:06:6b:a8:c5:a4:5e:ef:2d:36:11:6c:34:a6:
         f4:68:0e:1a:01:54:9a:f7:ff:af:bb:93:90:cf:33:ba:a0:05:
         87:f4:ff:20:8e:d9:5e:12:d4:ae:26:83:a6:78:fc:03:b9:c3:
         c4:1f:6b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:27:17 2026 by rpki-client