Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32332d3233203d3e203631373832.roa (raw, json)
Hash identifier:          gmFeWGLcG939aIAByKr/c3qBwbCgfltyszyXz7qpP6M=
Subject key identifier:   0A:CD:5E:DE:FE:11:1F:CB:42:7C:1C:A4:4A:3F:C1:FD:6E:26:DC:04
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       5CA0E11C99C182415792CD469CE3F8AB613AC795
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
Signing time:             Mon 30 Mar 2026 19:45:05 +0000
ROA not before:           Mon 30 Mar 2026 19:40:05 +0000
ROA not after:            Mon 29 Mar 2027 19:45:05 +0000
asID:                     61782
IP address blocks:        200.77.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a0:e1:1c:99:c1:82:41:57:92:cd:46:9c:e3:f8:ab:61:3a:c7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Mar 30 19:40:05 2026 GMT
            Not After : Mar 29 19:45:05 2027 GMT
        Subject: CN=0ACD5EDEFE111FCB427C1CA44A3FC1FD6E26DC04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:b2:28:7f:d0:1d:24:88:70:51:89:20:2d:
                    47:10:64:de:f4:6a:1f:25:fc:55:79:79:6d:c9:64:
                    4f:71:a1:14:a0:51:38:ce:5b:c8:16:c0:77:1f:c0:
                    35:95:0e:7a:e5:aa:cc:6f:1a:ac:35:a8:ac:4c:8e:
                    1f:b5:36:d1:bf:5e:9e:e2:34:67:aa:3d:cc:a1:89:
                    f6:4c:77:b0:d3:24:ff:7e:56:1e:67:d4:2c:89:9d:
                    2a:ee:ba:f0:c8:a8:36:39:54:8c:a2:ac:ef:e2:31:
                    ae:61:9b:2f:75:f7:c8:a7:88:b0:49:06:e4:d2:5f:
                    31:92:0b:a9:75:75:65:e6:9c:4f:d3:b4:01:18:c0:
                    ef:20:09:63:aa:6f:9e:e1:8a:21:5a:e8:18:69:7d:
                    c0:dd:e4:f0:f2:22:c1:05:2b:49:75:ab:cf:0a:50:
                    ce:4a:29:b0:47:96:e5:cc:0b:f3:c9:c9:04:89:2d:
                    bb:73:d5:90:ab:f6:8c:35:ee:a4:7e:64:44:2d:27:
                    f4:88:97:bd:70:32:0e:ce:b9:32:59:7c:04:28:31:
                    c4:7c:69:02:c0:0d:47:36:a9:6a:2c:f3:0a:79:97:
                    7f:2f:87:06:a2:d8:e4:7b:79:fe:6d:e2:4b:77:3f:
                    dd:ec:50:aa:ff:b9:74:2e:4a:5e:28:ad:a5:f5:ab:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:5E:DE:FE:11:1F:CB:42:7C:1C:A4:4A:3F:C1:FD:6E:26:DC:04
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:4c:e9:5c:21:51:99:b5:f0:85:5b:c2:dc:92:4c:7a:a6:a6:
         23:38:2d:19:bc:e2:53:79:77:2d:b1:bf:ae:5c:97:36:3f:f3:
         39:72:9c:59:31:83:ce:11:d5:45:86:f2:c1:4b:20:bf:27:3d:
         c8:4f:64:cc:3d:da:68:a6:7e:e5:94:a9:8f:cc:91:ec:ab:c4:
         83:f0:90:b1:3e:42:a1:12:44:c0:8a:e1:9d:28:58:1e:30:55:
         cd:99:6e:e0:42:d9:ba:28:44:20:cd:a0:5d:8f:7a:c3:33:16:
         b8:cf:40:95:a6:d1:1e:2f:28:53:f6:0f:d5:af:57:61:8e:6b:
         de:a2:16:b5:bd:f4:63:ed:24:87:db:d2:d6:7c:09:02:e1:63:
         56:ab:3e:47:24:69:c2:81:a5:68:47:02:d1:d8:c4:e3:63:ad:
         cd:5e:b1:de:79:f3:6b:04:b1:b8:c6:18:b6:93:ab:c3:5a:d3:
         59:86:d3:ea:95:3f:6d:0d:e3:69:68:dd:13:c2:1e:35:ae:08:
         ec:94:bd:ee:c8:65:93:e7:d6:54:eb:36:3f:64:9a:88:c4:85:
         6b:d7:15:f9:c2:4d:b4:f0:bb:bd:f2:23:a7:9f:fb:f8:df:88:
         ca:ff:a4:7b:26:56:4d:4a:9b:d3:d5:a9:61:7e:ba:07:4c:d6:
         d5:94:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:57:34 2026 by rpki-client