Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32332d3233203d3e203631373832.roa (raw, json)
Hash identifier:          VC4zkUnm6bVL5udt6MTyfo+JWOxyCUNZoWI0a9oK8Fc=
Subject key identifier:   21:A8:67:A6:A2:67:D2:4F:E5:C0:63:96:C2:57:19:EE:76:28:E2:BF
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       54AB210867E633A77D064CA290FF2657677658A3
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
Signing time:             Mon 28 Apr 2025 19:21:15 +0000
ROA not before:           Mon 28 Apr 2025 19:16:15 +0000
ROA not after:            Mon 27 Apr 2026 19:21:15 +0000
asID:                     61782
IP address blocks:        200.77.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ab:21:08:67:e6:33:a7:7d:06:4c:a2:90:ff:26:57:67:76:58:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Apr 28 19:16:15 2025 GMT
            Not After : Apr 27 19:21:15 2026 GMT
        Subject: CN=21A867A6A267D24FE5C06396C25719EE7628E2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:0a:15:14:c2:1c:f2:68:f3:bf:da:8b:03:
                    f2:64:33:17:b2:9a:54:d7:5b:70:3b:e7:f2:7e:59:
                    f0:52:f5:de:58:0f:8c:78:23:0f:85:24:4c:84:36:
                    80:52:c9:83:d1:cd:11:77:2d:0a:f4:83:e9:45:c9:
                    89:56:f8:67:5a:1d:e8:9b:4a:26:b4:4a:0b:1e:86:
                    73:9c:33:f4:ac:c4:66:2b:8f:27:6e:08:2e:61:29:
                    b8:20:d9:23:60:90:54:3b:0b:aa:41:c7:ff:6d:30:
                    26:e4:81:a4:fb:0d:e8:01:91:fc:11:16:37:b7:9e:
                    05:0b:10:35:17:50:f2:c1:79:7f:69:0d:3d:34:fe:
                    de:14:47:12:7a:b0:c8:ba:a5:60:14:6f:c1:c0:a9:
                    de:28:0a:ac:f1:3b:4a:98:8e:f4:ef:ad:14:65:cb:
                    d5:a0:13:12:8c:ac:4a:7b:ff:e2:db:4d:a5:ef:64:
                    3f:07:34:b3:fc:fd:94:0f:8d:97:ed:ff:82:46:d2:
                    8c:fb:b3:74:5e:c4:28:47:c8:3c:61:3b:bc:8a:e5:
                    3d:8b:5c:09:2f:ae:fc:14:b8:6a:70:40:c2:bf:1e:
                    a8:a0:aa:de:52:35:36:a1:7d:20:b5:e4:f5:d2:08:
                    84:c1:34:71:13:d8:00:af:08:b7:ed:5d:03:af:3c:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:67:A6:A2:67:D2:4F:E5:C0:63:96:C2:57:19:EE:76:28:E2:BF
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:af:16:c7:30:1c:1b:b7:eb:3e:a2:8d:fb:8e:d3:7b:d7:
         12:7b:79:84:6e:ff:cf:39:7c:87:f1:12:7b:0d:a4:1a:95:f4:
         3b:d8:44:f9:88:01:69:d5:ec:2c:f2:db:1b:08:58:09:04:12:
         e0:f1:bd:3a:1b:ca:09:57:fa:1f:e0:7b:fd:e1:43:ac:f4:9a:
         52:ac:45:44:6e:32:d9:bf:19:07:44:c6:c3:76:c0:23:38:a1:
         97:59:a1:cd:68:7d:67:f9:20:fb:3e:a2:40:6b:50:a1:89:36:
         1a:d9:cd:6c:56:6f:ca:f1:89:50:64:73:32:2f:74:c9:18:36:
         e6:d7:42:3b:53:11:4a:8b:65:f3:f8:ad:36:81:95:5a:cc:15:
         18:9d:4e:58:b1:30:fc:58:0a:37:68:fa:b0:d2:82:d0:00:7e:
         e9:c4:ff:49:fe:57:ef:e8:ba:5c:d4:64:e3:04:a5:fd:22:bd:
         e1:c7:ed:e6:1e:cd:5c:8a:d9:e0:ad:1e:20:a5:2e:30:ad:e2:
         fb:3a:d7:b2:d0:7c:57:0c:c2:fe:e5:ba:76:54:cd:5b:bf:e9:
         2d:c3:cd:db:ad:fe:21:5d:33:43:21:34:f8:c2:11:da:99:57:
         96:b5:6c:50:dc:ab:c5:42:ac:df:f9:24:f9:23:3a:f5:84:e3:
         e7:e6:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:29:12 2025 by rpki-client