Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32322d3232203d3e203631373832.roa (raw, json)
Hash identifier:          YP+jHLeVg6mH31So2cp2IkgL9+eD5cHxK/ajDRDaTOs=
Subject key identifier:   54:C0:C6:C4:A9:A8:1C:54:79:AC:E8:0F:22:7D:22:43:5E:BB:C1:AE
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       051F319737B769697CCAD0E76F980C06351B2BFB
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa
Signing time:             Mon 30 Mar 2026 19:45:05 +0000
ROA not before:           Mon 30 Mar 2026 19:40:05 +0000
ROA not after:            Mon 29 Mar 2027 19:45:05 +0000
asID:                     61782
IP address blocks:        200.77.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:31:97:37:b7:69:69:7c:ca:d0:e7:6f:98:0c:06:35:1b:2b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Mar 30 19:40:05 2026 GMT
            Not After : Mar 29 19:45:05 2027 GMT
        Subject: CN=54C0C6C4A9A81C5479ACE80F227D22435EBBC1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:6c:7f:42:f7:95:04:7c:d3:89:d4:f5:4c:
                    e5:33:cb:74:e0:0c:f9:45:4b:6b:8f:e8:d2:20:d4:
                    e8:b4:db:2f:78:89:b1:f3:29:3e:2d:d2:71:9d:9c:
                    4f:5f:6a:c0:7f:57:a6:bd:d2:81:18:da:53:32:a3:
                    58:fb:89:cc:60:ed:ed:30:a8:67:08:9e:36:c0:74:
                    ad:13:91:40:a2:52:d0:07:c6:24:59:be:d7:24:54:
                    b8:75:f4:2d:e1:18:0c:44:ea:61:42:29:ad:12:9a:
                    20:e4:b6:a8:6f:9a:aa:89:11:32:bd:53:3c:9f:fe:
                    82:6c:f8:15:8f:ac:ba:04:ec:7d:43:61:68:9d:39:
                    2d:f9:61:64:c8:1c:30:63:58:7d:c2:d4:39:72:aa:
                    f7:23:66:eb:ba:3f:94:00:9e:d5:be:02:31:7e:c3:
                    09:81:a0:9a:09:96:0d:0d:17:6c:5e:44:ae:34:16:
                    5f:60:d4:da:f6:ee:a8:15:ba:d0:84:7b:50:21:ee:
                    27:ea:6f:02:82:8f:17:89:0c:95:d4:22:57:b1:be:
                    a7:1b:81:92:22:e1:f8:58:cf:25:38:b3:69:06:70:
                    c6:44:b9:69:e5:c5:ef:7a:52:8e:81:c3:f8:27:99:
                    2a:39:49:f5:48:22:42:c3:cb:0f:3e:99:68:d0:87:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C0:C6:C4:A9:A8:1C:54:79:AC:E8:0F:22:7D:22:43:5E:BB:C1:AE
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:f4:58:e8:60:f2:60:e8:0d:a2:f7:12:b1:4b:a4:97:d3:f9:
         07:79:85:87:f7:3a:43:0e:e8:5b:65:5f:ff:d1:13:8b:1f:51:
         13:fe:9c:07:36:d2:47:c6:28:77:48:57:d5:e4:27:a2:9a:ff:
         1a:41:46:da:8a:c4:07:ea:87:60:84:47:a8:82:a3:2a:1b:30:
         1e:58:f7:98:45:b3:04:be:87:17:7c:0e:02:5e:59:2d:66:3b:
         3c:0a:58:76:fd:85:c8:04:27:70:d3:70:bd:41:4f:da:fa:90:
         0d:12:0e:ea:62:fc:77:85:98:50:60:84:0e:39:57:18:5d:86:
         a1:9d:b3:34:87:38:8a:b7:05:be:b9:7e:d9:29:62:16:bf:d1:
         d9:56:9f:58:f5:5a:01:58:f7:b4:39:33:ce:43:17:a8:1f:cb:
         19:08:a9:25:a0:2f:3f:b2:d7:d7:3c:cd:85:4e:3d:de:c0:66:
         90:f1:78:5f:cb:34:c9:ee:28:9e:53:cb:07:dc:94:31:aa:b4:
         ce:26:14:9d:8c:96:e3:16:1e:75:f0:5d:01:71:2f:ac:f4:75:
         67:39:bc:19:74:ea:e0:68:16:63:15:d1:90:9a:15:fd:7d:10:
         7b:69:77:8e:ff:96:f7:88:25:95:51:bf:c0:43:7c:e2:17:20:
         69:b2:e1:0d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBR8xlze3aWl8ytDnb5gMBjUbK/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFN0YwRDExMUZBQjVBNDM3NkREOUM3Q0ZFN0ZEQjY5
MkU1QzhCMzAeFw0yNjAzMzAxOTQwMDVaFw0yNzAzMjkxOTQ1MDVaMDMxMTAvBgNV
BAMTKDU0QzBDNkM0QTlBODFDNTQ3OUFDRTgwRjIyN0QyMjQzNUVCQkMxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFWx/QveVBHzTidT1TOUzy3Tg
DPlFS2uP6NIg1Oi02y94ibHzKT4t0nGdnE9fasB/V6a90oEY2lMyo1j7icxg7e0w
qGcInjbAdK0TkUCiUtAHxiRZvtckVLh19C3hGAxE6mFCKa0SmiDktqhvmqqJETK9
Uzyf/oJs+BWPrLoE7H1DYWidOS35YWTIHDBjWH3C1DlyqvcjZuu6P5QAntW+AjF+
wwmBoJoJlg0NF2xeRK40Fl9g1Nr27qgVutCEe1Ah7ifqbwKCjxeJDJXUIlexvqcb
gZIi4fhYzyU4s2kGcMZEuWnlxe96Uo6Bw/gnmSo5SfVIIkLDyw8+mWjQh6rdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVMDGxKmoHFR5rOgPIn0iQ167wa4wHwYDVR0j
BBgwFoAUeefw0RH6taQ3bdnHz+f9tpLlyLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC83OUU3RjBEMTExRkFCNUE0Mzc2REQ5QzdDRkU3RkRCNjkyRTVDOEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTdGMEQxMTFGQUI1QTQz
NzZERDlDN0NGRTdGREI2OTJFNUM4QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzMDMwMmUzNzM3MmUzMTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyE2wMA0GCSqGSIb3DQEBCwUAA4IBAQAK9FjoYPJg
6A2i9xKxS6SX0/kHeYWH9zpDDuhbZV//0ROLH1ET/pwHNtJHxih3SFfV5Ceimv8a
QUbaisQH6odghEeogqMqGzAeWPeYRbMEvocXfA4CXlktZjs8Clh2/YXIBCdw03C9
QU/a+pANEg7qYvx3hZhQYIQOOVcYXYahnbM0hziKtwW+uX7ZKWIWv9HZVp9Y9VoB
WPe0OTPOQxeoH8sZCKkloC8/stfXPM2FTj3ewGaQ8XhfyzTJ7iieU8sH3JQxqrTO
JhSdjJbjFh518F0BcS+s9HVnObwZdOrgaBZjFdGQmhX9fRB7aXeO/5b3iCWVUb/A
Q3ziFyBpsuEN
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:58:27 2026 by rpki-client