Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137382e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137382e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          gfYJk3Iqrr9kVZ5n3S8cX4YM44UcXNyMOLeyed9Qlzo=
Subject key identifier:   D8:82:49:DF:BA:BD:A3:EB:94:70:9C:10:3D:30:BC:02:E4:10:9E:77
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       0235599A522B095D980F27CB772B28E15DD0B2CC
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137382e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 28 Apr 2025 19:21:16 +0000
ROA not before:           Mon 28 Apr 2025 19:16:16 +0000
ROA not after:            Mon 27 Apr 2026 19:21:16 +0000
asID:                     61782
IP address blocks:        200.77.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 11:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:35:59:9a:52:2b:09:5d:98:0f:27:cb:77:2b:28:e1:5d:d0:b2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Apr 28 19:16:16 2025 GMT
            Not After : Apr 27 19:21:16 2026 GMT
        Subject: CN=D88249DFBABDA3EB94709C103D30BC02E4109E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:26:1d:1b:4a:e9:6d:91:e6:5c:60:bc:5c:
                    5d:fa:04:d0:4e:9b:5d:94:1f:6d:ca:9a:62:ef:fe:
                    0e:dc:f6:75:64:f9:2a:5f:23:27:53:a6:58:20:55:
                    09:db:ff:64:f1:77:41:93:01:12:c8:e3:5d:5c:ac:
                    3b:28:a2:21:61:df:a6:14:12:03:9b:b4:a1:fd:47:
                    0a:64:1c:d6:1e:d5:a4:30:a2:e1:26:72:2e:88:23:
                    c4:8d:f4:0f:ae:49:e9:3b:98:9c:3a:27:d2:f6:a1:
                    06:29:ae:5d:06:78:7f:cf:ab:b2:a4:6f:90:62:00:
                    80:8b:62:17:48:93:30:44:1e:8e:fc:a6:ad:3f:7e:
                    85:c7:23:8f:c9:a4:bb:d9:38:b9:ed:ea:69:8a:6f:
                    d7:ef:7b:3a:07:26:83:fa:75:95:cd:5f:c2:a5:a4:
                    ea:e7:51:b3:49:67:2f:e1:ee:cd:3f:09:52:15:f8:
                    59:aa:ce:91:e0:77:f0:26:76:8a:94:74:d4:14:84:
                    5c:79:f2:7e:1e:22:ea:31:bc:43:ae:7b:55:eb:6e:
                    71:04:69:18:09:94:d6:2b:5b:2a:e8:70:6a:56:e2:
                    e2:0c:f1:c7:a7:8a:1c:aa:bb:0e:59:ea:dd:07:d7:
                    f6:6a:79:ab:5d:df:7a:84:f0:77:e8:69:89:22:6a:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:82:49:DF:BA:BD:A3:EB:94:70:9C:10:3D:30:BC:02:E4:10:9E:77
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137382e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:dc:d5:d5:7a:51:e4:1d:db:1f:07:41:1d:4d:02:77:51:
         6c:4c:7d:da:94:e6:b8:ae:85:bc:d9:29:3f:9e:cb:9a:e4:f5:
         ca:58:86:a8:28:cf:94:07:8a:3d:2e:69:e2:e3:2d:61:c9:bd:
         47:67:e1:41:39:10:9c:cc:70:b2:fa:1d:44:8a:6a:fc:2b:a6:
         ec:65:cb:0d:50:b4:80:18:2b:93:cb:cd:5f:f7:90:53:dd:c9:
         7b:f7:fc:45:12:7f:72:5a:9d:37:3a:c6:12:8a:56:b8:b7:3f:
         80:fd:10:f4:42:a8:14:ac:2c:4b:ba:29:d0:90:91:0f:b8:38:
         44:31:cb:2a:03:b3:e6:07:9c:08:2a:b7:55:91:d4:b9:1a:c9:
         11:6a:f6:a1:bc:c2:9c:ca:d9:ca:5b:d7:ca:34:01:b5:d5:b2:
         96:56:65:6e:50:7e:a1:12:f6:59:96:05:7b:d5:88:8d:ca:47:
         a0:9f:a6:f5:62:7e:d4:32:ca:5c:c1:ef:97:e2:d0:19:56:10:
         61:37:39:ec:39:78:79:20:21:5a:ec:5d:3d:bc:b8:b4:99:0d:
         17:ad:81:0a:81:41:bc:84:1f:7a:c5:a6:87:b6:34:47:77:85:
         38:02:92:2d:fe:1c:02:a5:c5:0d:7b:11:58:73:2d:f8:86:7c:
         a9:01:34:e1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAjVZmlIrCV2YDyfLdyso4V3QsswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFN0YwRDExMUZBQjVBNDM3NkREOUM3Q0ZFN0ZEQjY5
MkU1QzhCMzAeFw0yNTA0MjgxOTE2MTZaFw0yNjA0MjcxOTIxMTZaMDMxMTAvBgNV
BAMTKEQ4ODI0OURGQkFCREEzRUI5NDcwOUMxMDNEMzBCQzAyRTQxMDlFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDemSYdG0rpbZHmXGC8XF36BNBO
m12UH23KmmLv/g7c9nVk+SpfIydTplggVQnb/2Txd0GTARLI411crDsooiFh36YU
EgObtKH9RwpkHNYe1aQwouEmci6II8SN9A+uSek7mJw6J9L2oQYprl0GeH/Pq7Kk
b5BiAICLYhdIkzBEHo78pq0/foXHI4/JpLvZOLnt6mmKb9fvezoHJoP6dZXNX8Kl
pOrnUbNJZy/h7s0/CVIV+FmqzpHgd/AmdoqUdNQUhFx58n4eIuoxvEOue1XrbnEE
aRgJlNYrWyrocGpW4uIM8cenihyquw5Z6t0H1/Zqeatd33qE8HfoaYkiagNhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2IJJ37q9o+uUcJwQPTC8AuQQnncwHwYDVR0j
BBgwFoAUeefw0RH6taQ3bdnHz+f9tpLlyLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC83OUU3RjBEMTExRkFCNUE0Mzc2REQ5QzdDRkU3RkRCNjkyRTVDOEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTdGMEQxMTFGQUI1QTQz
NzZERDlDN0NGRTdGREI2OTJFNUM4QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzMDMwMmUzNzM3MmUzMTM3MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyE2yMA0GCSqGSIb3DQEBCwUAA4IBAQAz1NzV1XpR
5B3bHwdBHU0Cd1FsTH3alOa4roW82Sk/nsua5PXKWIaoKM+UB4o9Lmni4y1hyb1H
Z+FBORCczHCy+h1Eimr8K6bsZcsNULSAGCuTy81f95BT3cl79/xFEn9yWp03OsYS
ila4tz+A/RD0QqgUrCxLuinQkJEPuDhEMcsqA7PmB5wIKrdVkdS5GskRavahvMKc
ytnKW9fKNAG11bKWVmVuUH6hEvZZlgV71YiNykegn6b1Yn7UMspcwe+X4tAZVhBh
NznsOXh5ICFa7F09vLi0mQ0XrYEKgUG8hB96xaaHtjRHd4U4ApIt/hwCpcUNexFY
cy34hnypATTh
-----END CERTIFICATE-----
Generated at Wed May 14 21:03:04 2025 by rpki-client