Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/323830343a346263303a3a2f33322d3332203d3e20323637333237.roa
File:                     323830343a346263303a3a2f33322d3332203d3e20323637333237.roa (raw, json)
Hash identifier:          f69CC6u64lijR5dskW9ijRzb6Apo4oWLjlAojW4sQiw=
Subject key identifier:   9F:A3:87:7B:34:37:39:5A:86:EA:83:F6:75:C9:F2:D9:6D:F6:10:9C
Certificate issuer:       /CN=78C7DF59C456359AE9A7E7507012D1F6F01DE7B8
Certificate serial:       5D2BF7FA8DEA61B5FFB9F0E300A267B08B272EDE
Authority key identifier: 78:C7:DF:59:C4:56:35:9A:E9:A7:E7:50:70:12:D1:F6:F0:1D:E7:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/323830343a346263303a3a2f33322d3332203d3e20323637333237.roa
Signing time:             Mon 24 Aug 2026 23:51:33 +0000
ROA not before:           Mon 24 Aug 2026 23:46:33 +0000
ROA not after:            Mon 23 Aug 2027 23:51:33 +0000
asID:                     267327
IP address blocks:        2804:4bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.crl
                          rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 03:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2b:f7:fa:8d:ea:61:b5:ff:b9:f0:e3:00:a2:67:b0:8b:27:2e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C7DF59C456359AE9A7E7507012D1F6F01DE7B8
        Validity
            Not Before: Aug 24 23:46:33 2026 GMT
            Not After : Aug 23 23:51:33 2027 GMT
        Subject: CN=9FA3877B3437395A86EA83F675C9F2D96DF6109C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:43:55:fa:cf:d8:1f:a5:ca:b4:ff:5a:27:
                    d9:97:b0:26:ce:fc:e0:be:a9:71:10:cc:43:a6:1a:
                    f9:c7:20:e1:5e:5d:50:ea:34:53:72:18:89:97:55:
                    55:66:93:25:46:16:23:88:64:c4:40:03:d0:6b:e1:
                    46:34:78:c7:08:83:f3:be:95:c9:b3:89:7b:ef:75:
                    fb:ef:0f:89:1b:59:73:e6:4a:68:61:3d:15:0f:9d:
                    f9:32:ef:f9:7b:28:e2:35:49:18:11:42:8b:92:8c:
                    26:37:5a:80:61:51:4b:31:e5:21:8e:06:db:3c:77:
                    e8:f2:f8:b9:d6:83:3a:86:37:f6:2f:ea:a0:64:47:
                    37:45:28:c6:06:7e:f1:69:be:51:28:9c:49:82:b5:
                    84:f9:07:a0:18:d3:6a:68:cb:6a:82:c0:f9:4f:5c:
                    83:7a:dd:e5:d0:69:34:62:47:03:31:c9:19:4b:b5:
                    97:eb:06:5b:21:25:66:15:92:82:d5:ac:9d:c5:18:
                    46:3a:10:7f:aa:f3:74:3e:00:5e:31:08:09:2a:1b:
                    f3:24:f2:f8:07:59:61:ae:f9:3c:33:1a:84:93:3e:
                    6d:32:a1:16:56:f9:ca:7e:00:7b:45:da:b3:4f:3d:
                    67:64:a7:9f:54:b3:25:8e:5d:67:a8:53:5e:f4:b3:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:87:7B:34:37:39:5A:86:EA:83:F6:75:C9:F2:D9:6D:F6:10:9C
            X509v3 Authority Key Identifier:
                keyid:78:C7:DF:59:C4:56:35:9A:E9:A7:E7:50:70:12:D1:F6:F0:1D:E7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C7DF59C456359AE9A7E7507012D1F6F01DE7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXoSu43S8xEntnvx4F9WM491jmJxromwAz81wL2P8q8V/0/323830343a346263303a3a2f33322d3332203d3e20323637333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:53:82:2c:0b:68:cc:01:7e:47:3f:1d:02:cd:ec:2e:a1:dc:
         df:b4:83:3f:1e:c8:ad:7e:d3:ce:04:a8:82:8d:6b:38:44:0f:
         53:e5:38:a3:64:1c:00:29:d2:7c:83:9a:fd:db:d0:d0:a4:df:
         a8:65:d9:98:56:51:e9:b3:c5:18:aa:b8:2e:d9:65:a8:d7:2f:
         98:35:fe:71:ed:79:13:cd:25:43:1f:57:f1:14:77:b7:20:0e:
         e5:15:a7:72:4c:df:46:86:24:fd:0d:7d:41:3b:02:c0:8a:aa:
         2a:41:29:08:b2:e9:5f:aa:bb:47:ca:d0:54:1b:31:62:59:6f:
         24:2d:56:0d:c5:84:ad:96:ad:33:20:ae:09:79:90:58:33:0c:
         6a:0e:ac:67:a9:8c:61:2e:03:3d:9f:94:92:6a:65:3e:ed:05:
         dd:a3:60:e0:99:97:ec:d0:31:a5:ee:20:f7:d8:ed:b2:14:86:
         ec:0d:56:a7:f0:ba:33:24:a9:8b:9c:cd:ba:11:59:3e:f7:e2:
         0f:d4:6a:4e:2b:a4:00:ae:7c:c5:4e:88:ba:26:55:fb:71:4d:
         af:e5:0a:7b:51:6c:a2:09:91:2d:cb:bf:38:b4:1a:cb:64:19:
         5f:fe:ff:88:8d:ed:ca:55:43:9d:3f:1a:96:db:7c:5e:e9:3c:
         fb:6f:b3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----