Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137372e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          wgqmuDI5dvhZ4yyCze4RlzixdDMa+vq5GCbTBF+0ClM=
Subject key identifier:   B8:05:BE:EC:E2:EF:20:B3:30:AA:31:9C:7E:F2:94:B4:A2:EF:16:E9
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       72D5A65AAF375FA578CAF19D42125DF28FD450C5
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 28 Apr 2025 19:21:15 +0000
ROA not before:           Mon 28 Apr 2025 19:16:15 +0000
ROA not after:            Mon 27 Apr 2026 19:21:15 +0000
asID:                     61782
IP address blocks:        200.77.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 11:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d5:a6:5a:af:37:5f:a5:78:ca:f1:9d:42:12:5d:f2:8f:d4:50:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Apr 28 19:16:15 2025 GMT
            Not After : Apr 27 19:21:15 2026 GMT
        Subject: CN=B805BEECE2EF20B330AA319C7EF294B4A2EF16E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:2b:de:24:d6:f6:c8:d0:25:08:b1:56:31:
                    49:57:2e:8b:b5:4b:89:ed:a5:89:9f:04:5b:01:b3:
                    f5:0c:89:4a:5b:e2:c5:67:34:a7:9e:56:38:2d:c7:
                    a2:85:e9:36:ff:3f:40:a5:86:73:5e:6f:9d:fd:5d:
                    d5:36:d8:6c:4c:78:a3:1d:7d:f2:22:7a:35:1d:0b:
                    ac:01:58:71:d4:c0:7d:8e:dd:31:45:9a:5e:af:ce:
                    2f:09:c6:b0:74:b1:6c:3d:38:dd:4c:3a:9b:0a:1f:
                    50:03:b3:a5:6e:45:9f:19:da:68:a4:88:f2:97:c8:
                    da:e2:33:cd:95:7b:0e:73:36:c9:82:8c:ca:b7:85:
                    9a:71:74:86:83:0f:4b:34:85:e7:55:44:5b:51:7f:
                    01:b6:a0:9d:a3:d1:ae:20:38:b9:89:48:43:85:1c:
                    e2:29:9e:c0:15:34:e9:16:3a:fc:12:73:3f:33:07:
                    d2:13:9c:b8:a7:bc:c7:57:f2:03:1f:d3:5b:fe:48:
                    c4:70:ce:b7:10:5f:75:50:33:4f:49:d2:d8:a1:ee:
                    cf:6e:ab:dc:b4:b7:81:48:6f:d4:f1:94:1d:25:4e:
                    13:6e:fc:f4:16:96:6a:74:ec:8d:f4:c4:fa:c1:8d:
                    e9:41:ea:b1:f9:b5:6f:13:b5:66:90:47:3f:e4:85:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:BE:EC:E2:EF:20:B3:30:AA:31:9C:7E:F2:94:B4:A2:EF:16:E9
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:6a:b5:e8:37:21:e4:d3:aa:b5:b9:3e:bd:bc:bd:31:27:46:
         30:b9:9b:ee:6d:23:6a:da:fe:b3:45:0c:e6:6c:e9:5d:bb:f8:
         22:21:2d:3f:4d:f0:48:94:bb:6f:ce:aa:ac:83:b3:5a:5f:2a:
         01:66:91:23:dd:19:7c:97:da:06:fc:78:af:3c:43:77:7c:3a:
         e7:93:b2:52:c5:2c:fa:c9:b9:62:4f:ea:62:0f:f5:a2:ef:75:
         db:3e:df:da:67:51:5a:d2:fa:14:e0:2a:2b:4e:e8:b7:26:1a:
         84:5a:2c:c7:65:00:4a:93:50:68:f7:13:e5:75:8c:5b:14:72:
         fa:b2:c2:91:f8:23:d5:d6:d7:0f:a7:5f:91:04:ba:8e:3e:e7:
         f0:90:cd:a6:4f:bf:55:b6:80:7b:ee:4b:a3:f2:df:15:fa:be:
         1e:16:b9:e1:af:06:c5:94:ad:98:57:39:63:89:10:6f:83:87:
         e2:6f:bf:43:a7:cb:91:d6:c1:05:a3:48:ef:cf:9f:a3:01:58:
         39:ec:54:8b:88:aa:3e:db:ad:48:5c:fc:7a:20:2e:b6:00:7d:
         4c:67:cc:e0:1a:52:13:69:3e:f2:50:08:3c:0c:83:8b:97:e6:
         8b:32:44:c2:15:43:32:9f:18:5c:b4:da:93:a2:bb:2e:fe:3a:
         f4:e2:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:51:53 2025 by rpki-client