Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          Vf+dxZ+gYULBCSgHHF9dQZqDK+sBD3UYCxDslfL2g/4=
Subject key identifier:   0F:06:B7:5D:C4:3E:BB:22:E2:A8:34:B2:1D:FC:08:F2:82:FD:77:0F
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       2FED21F437DF6CA954D891F5AC870E055E92D644
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 30 Mar 2026 19:45:06 +0000
ROA not before:           Mon 30 Mar 2026 19:40:06 +0000
ROA not after:            Mon 29 Mar 2027 19:45:06 +0000
asID:                     61782
IP address blocks:        200.77.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ed:21:f4:37:df:6c:a9:54:d8:91:f5:ac:87:0e:05:5e:92:d6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Mar 30 19:40:06 2026 GMT
            Not After : Mar 29 19:45:06 2027 GMT
        Subject: CN=0F06B75DC43EBB22E2A834B21DFC08F282FD770F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:bf:1b:e8:e2:a4:3c:4b:d1:99:c4:38:30:
                    5a:8d:30:bf:99:a3:41:5c:42:6b:e3:33:df:d1:10:
                    d0:a2:ad:8d:5d:af:c9:dd:ae:4b:3a:5c:e2:02:a6:
                    bb:15:e9:db:7e:c9:5e:de:37:70:8d:7b:c7:36:14:
                    5f:a4:a4:fb:75:e1:b3:06:11:fb:18:35:06:1e:00:
                    08:53:92:27:30:71:f3:b8:6e:a6:f1:98:0b:da:b5:
                    1f:94:5f:aa:4e:7d:e7:ea:c0:a7:12:5d:69:2e:61:
                    55:ec:58:8e:78:fe:b2:6d:da:1a:59:1d:91:e7:f8:
                    32:51:1e:41:19:28:1c:72:db:9d:42:89:65:53:67:
                    ad:f2:2f:bf:91:61:2b:aa:97:42:07:c2:0e:f1:4d:
                    2e:c1:54:65:b2:cd:da:76:ed:f7:35:c5:6b:35:ee:
                    d8:cc:15:2b:6c:9d:87:bc:03:08:74:7f:26:36:4e:
                    22:0b:67:cd:7f:ff:1c:3c:41:c1:23:5d:a2:98:4a:
                    1a:79:1f:72:3e:28:08:fa:d5:08:97:5a:32:15:ff:
                    2a:62:a3:46:52:35:0e:81:5b:f0:fb:63:00:ef:49:
                    a8:37:53:d4:10:a9:bd:bc:12:ad:2d:6a:3f:e5:0d:
                    df:fd:ed:fe:17:c6:60:c7:45:a0:2e:1b:39:ac:c8:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:06:B7:5D:C4:3E:BB:22:E2:A8:34:B2:1D:FC:08:F2:82:FD:77:0F
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:60:6c:0f:2a:f0:84:ac:92:2c:3b:04:c4:49:76:2b:13:
         52:5a:6b:fc:79:ed:74:65:4f:f1:a6:e6:7b:50:fc:a9:dd:e9:
         87:52:83:40:36:4a:d7:b2:d2:57:4f:03:ca:39:f3:05:ea:b6:
         68:49:2e:b5:69:18:89:e0:8b:56:7e:33:53:f8:40:c5:5d:cb:
         2f:c0:e6:ab:dd:bf:0d:30:5f:e8:1f:9b:f3:49:92:28:b0:0b:
         18:2a:29:27:28:8b:89:35:ca:17:3e:ed:bf:a9:39:0b:b0:8a:
         13:d2:20:29:90:46:b2:10:94:35:2a:64:34:f2:8f:0d:e2:a3:
         b9:a3:03:59:fb:c9:9a:ff:87:64:94:76:d6:7b:48:ed:87:07:
         13:5c:fc:93:89:4b:14:08:ec:f9:1c:19:51:e6:0f:bc:a8:25:
         f5:c4:4d:03:2f:0e:c0:2a:76:65:51:a3:17:e4:ca:06:63:37:
         2b:92:f6:51:84:d4:d3:ce:ee:0a:37:74:8e:2d:15:b7:be:7d:
         1c:c8:a9:95:ae:87:61:8f:c1:1f:9b:e3:a2:db:34:2b:6f:47:
         48:4b:49:c4:f5:6f:3c:53:a1:a6:1b:c5:8e:f9:eb:7f:0b:45:
         43:b9:90:11:2b:80:74:83:fa:01:36:1a:e6:8a:bc:7e:ef:c1:
         34:ac:b4:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL+0h9DffbKlU2JH1rIcOBV6S1kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFN0YwRDExMUZBQjVBNDM3NkREOUM3Q0ZFN0ZEQjY5
MkU1QzhCMzAeFw0yNjAzMzAxOTQwMDZaFw0yNzAzMjkxOTQ1MDZaMDMxMTAvBgNV
BAMTKDBGMDZCNzVEQzQzRUJCMjJFMkE4MzRCMjFERkMwOEYyODJGRDc3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZL8b6OKkPEvRmcQ4MFqNML+Z
o0FcQmvjM9/RENCirY1dr8ndrks6XOICprsV6dt+yV7eN3CNe8c2FF+kpPt14bMG
EfsYNQYeAAhTkicwcfO4bqbxmAvatR+UX6pOfefqwKcSXWkuYVXsWI54/rJt2hpZ
HZHn+DJRHkEZKBxy251CiWVTZ63yL7+RYSuql0IHwg7xTS7BVGWyzdp27fc1xWs1
7tjMFStsnYe8Awh0fyY2TiILZ81//xw8QcEjXaKYShp5H3I+KAj61QiXWjIV/ypi
o0ZSNQ6BW/D7YwDvSag3U9QQqb28Eq0taj/lDd/97f4XxmDHRaAuGzmsyFVPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDwa3XcQ+uyLiqDSyHfwI8oL9dw8wHwYDVR0j
BBgwFoAUeefw0RH6taQ3bdnHz+f9tpLlyLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC83OUU3RjBEMTExRkFCNUE0Mzc2REQ5QzdDRkU3RkRCNjkyRTVDOEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTdGMEQxMTFGQUI1QTQz
NzZERDlDN0NGRTdGREI2OTJFNUM4QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzMDMwMmUzNzM3MmUzMTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyE2wMA0GCSqGSIb3DQEBCwUAA4IBAQAZ+WBsDyrw
hKySLDsExEl2KxNSWmv8ee10ZU/xpuZ7UPyp3emHUoNANkrXstJXTwPKOfMF6rZo
SS61aRiJ4ItWfjNT+EDFXcsvwOar3b8NMF/oH5vzSZIosAsYKiknKIuJNcoXPu2/
qTkLsIoT0iApkEayEJQ1KmQ08o8N4qO5owNZ+8ma/4dklHbWe0jthwcTXPyTiUsU
COz5HBlR5g+8qCX1xE0DLw7AKnZlUaMX5MoGYzcrkvZRhNTTzu4KN3SOLRW3vn0c
yKmVrodhj8Efm+Oi2zQrb0dIS0nE9W88U6GmG8WO+et/C0VDuZARK4B0g/oBNhrm
irx+78E0rLRo
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:58:24 2026 by rpki-client