Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32322d3232203d3e203631373832.roa (raw, json)
Hash identifier:          f73jG8QRlwW5n16Slr+Cj7MEnFbI670MYI+MTt5NXi4=
Subject key identifier:   88:98:99:19:0A:B4:9D:F1:28:2A:97:CA:3F:53:05:B6:41:D2:60:A2
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       32F5BD30B236445CC0ABADE2D59857ABBAED4A7D
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa
Signing time:             Mon 28 Apr 2025 19:21:16 +0000
ROA not before:           Mon 28 Apr 2025 19:16:16 +0000
ROA not after:            Mon 27 Apr 2026 19:21:16 +0000
asID:                     61782
IP address blocks:        200.77.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f5:bd:30:b2:36:44:5c:c0:ab:ad:e2:d5:98:57:ab:ba:ed:4a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Apr 28 19:16:16 2025 GMT
            Not After : Apr 27 19:21:16 2026 GMT
        Subject: CN=889899190AB49DF1282A97CA3F5305B641D260A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:19:87:e9:40:89:63:47:08:d4:68:66:53:
                    23:f5:4b:d2:ba:26:eb:36:3a:ff:bc:bd:4c:70:f8:
                    8a:78:19:28:2a:8d:85:60:62:30:b8:5c:c9:7b:83:
                    3a:96:95:54:38:4e:71:54:a3:a6:f5:70:01:69:a9:
                    e2:5a:25:2d:92:a9:25:14:58:23:f8:a4:8e:f0:0f:
                    3e:88:d1:ac:ca:88:4d:03:03:be:0e:4d:97:1e:e0:
                    a3:3b:ce:74:d3:df:42:a8:f6:8b:64:e4:6e:be:99:
                    fd:c3:92:2b:e5:0d:c9:40:4f:e0:51:8c:7b:30:6f:
                    d3:95:6d:01:34:98:dc:c0:36:4e:bc:31:dd:06:0b:
                    29:24:c8:da:bb:cc:79:8c:89:38:43:97:94:d4:de:
                    3f:6a:8c:87:30:72:bb:fe:86:19:c4:e7:80:e0:1e:
                    01:c9:9e:66:87:60:08:07:da:a4:32:4b:c5:5a:e0:
                    49:30:a9:b0:3a:b0:59:a6:98:dd:f6:00:4b:d0:6f:
                    52:03:85:22:ee:8d:26:69:27:ea:6e:1c:8f:6a:53:
                    7d:92:59:33:1d:17:23:d1:68:7e:df:f8:25:e0:94:
                    13:75:ac:9e:b5:ac:8b:2f:18:d4:ec:df:c5:95:07:
                    fd:4a:78:4f:5f:b0:30:10:cf:02:da:54:fd:4f:7f:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:99:19:0A:B4:9D:F1:28:2A:97:CA:3F:53:05:B6:41:D2:60:A2
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:01:f1:89:44:e9:b1:a7:62:a5:14:d9:ab:24:1a:4a:c1:58:
         09:5f:22:84:9f:11:c2:b1:b1:1b:e3:a5:aa:dd:0c:4a:f4:db:
         e6:78:e5:ba:8e:5d:81:1d:8c:e9:80:8d:db:f2:9a:8d:94:4a:
         d3:7f:67:9a:12:f3:d3:56:69:be:34:23:7e:18:72:b9:06:ae:
         1c:56:2b:4c:18:fb:5a:5e:42:2c:b5:51:9a:9b:0c:1a:a0:bc:
         ee:85:75:ba:00:b5:f5:6b:ce:af:9e:a6:9a:13:d1:f4:fa:6f:
         fe:2f:d0:81:2b:f0:c7:61:1a:1b:85:c8:ed:5a:3d:69:b2:99:
         59:06:be:a8:96:b0:42:63:ae:19:15:ce:ce:c4:cf:ed:0e:9e:
         b3:5e:0d:07:d4:05:d7:ab:d2:72:eb:7d:39:1d:12:f7:68:43:
         fe:08:29:43:18:3a:5e:9a:7e:38:1f:60:d9:79:1f:87:77:42:
         ba:54:14:7d:c9:cb:3c:5b:87:c2:7d:72:02:1c:d1:de:48:d9:
         d2:57:eb:eb:ce:14:e8:a2:6d:87:45:28:7a:41:a4:cb:6c:5f:
         42:38:0e:c6:f8:4c:4c:5a:78:6a:31:3f:9a:56:a2:7a:a2:af:
         32:3a:0f:4d:9c:76:6b:a8:32:55:fb:8b:cf:7d:33:2a:1c:52:
         9c:d2:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:19:21 2025 by rpki-client