Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137372e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          SHiesXQQ91IKCb8Iy0QXzB/IZ/gotGHe0ZrUBHhFQjY=
Subject key identifier:   3F:12:CE:DA:C8:6B:08:1E:78:E8:DB:F3:0D:4B:22:38:34:AC:7F:A7
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       3AD7BD1B82F396AFFD165BB09105BDC211B2D771
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 30 Mar 2026 19:45:05 +0000
ROA not before:           Mon 30 Mar 2026 19:40:05 +0000
ROA not after:            Mon 29 Mar 2027 19:45:05 +0000
asID:                     61782
IP address blocks:        200.77.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d7:bd:1b:82:f3:96:af:fd:16:5b:b0:91:05:bd:c2:11:b2:d7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Mar 30 19:40:05 2026 GMT
            Not After : Mar 29 19:45:05 2027 GMT
        Subject: CN=3F12CEDAC86B081E78E8DBF30D4B223834AC7FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:7c:7e:97:48:f5:82:cd:2e:a2:23:35:54:
                    b6:67:04:92:92:a7:88:60:2e:c1:c9:8e:f2:a2:c8:
                    92:7f:19:4f:a3:90:a3:5a:35:9c:b3:9f:6d:6c:31:
                    07:91:41:1c:86:ae:2b:eb:1f:89:b0:28:35:9c:4f:
                    8d:e0:40:04:93:46:bc:8e:3f:f4:69:52:c3:46:3d:
                    74:62:12:bd:35:1e:83:98:07:15:87:3a:cd:90:ef:
                    24:52:5f:a4:9a:c0:e7:70:3e:ae:7f:e5:f0:24:40:
                    73:cb:29:29:b7:0b:98:cd:7b:df:ad:3f:cc:b2:c1:
                    c4:2c:c5:54:66:ce:75:48:45:b0:de:4f:90:74:e9:
                    e8:ca:56:11:7c:fc:ec:a7:70:ca:4d:2d:12:49:2a:
                    0d:0e:f7:78:07:c5:4e:ab:9f:5c:1f:70:1e:f2:2b:
                    ab:95:26:89:41:59:69:90:d5:9b:bd:6b:2d:35:7d:
                    a4:8c:1a:92:25:6c:8a:03:c5:59:49:20:85:cb:05:
                    3f:a9:8b:6e:9e:9b:aa:a2:72:d8:7b:c6:21:0d:68:
                    36:f0:83:44:70:e4:0e:c8:ed:b4:22:c4:82:fb:48:
                    5d:d3:a0:8f:0d:ee:3d:f3:cd:a1:e0:65:a4:69:7c:
                    fd:c2:9c:7b:b1:6e:7b:6c:8e:f7:4e:ab:95:f1:eb:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:CE:DA:C8:6B:08:1E:78:E8:DB:F3:0D:4B:22:38:34:AC:7F:A7
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:e1:9e:04:81:5c:8f:8c:64:85:32:2a:b2:83:ae:51:ea:
         38:f5:1b:3c:1c:28:0e:5e:4b:c2:6e:55:f3:b2:c3:5a:a0:24:
         ac:39:9f:28:58:69:eb:e3:b0:5b:6e:d3:ea:d6:72:d4:9e:5f:
         c4:f6:28:af:bc:48:5f:6c:53:6f:ef:9c:93:85:44:65:a6:e4:
         10:8e:30:a0:a0:64:f4:d7:dc:7d:d6:39:b6:65:1b:8d:4a:e9:
         4a:e7:29:8c:71:4e:57:b8:0f:98:3b:b1:1a:4d:58:39:f7:38:
         7a:6f:f3:fd:dd:f8:51:7b:6f:e2:29:e9:bd:28:43:8c:3a:01:
         9e:e0:84:a7:4d:b3:46:fe:69:9c:ca:43:ca:a4:16:bd:ab:bd:
         fa:c9:80:e1:8c:94:8c:94:bc:79:ce:5f:5f:ec:2c:c8:0d:d2:
         a4:fb:07:50:39:3b:6f:1d:04:7c:83:3f:9b:47:f1:9e:b3:57:
         61:e3:60:55:33:1d:ea:19:cb:4b:76:fb:da:5a:82:1d:d6:c8:
         dc:15:38:03:aa:b5:fa:a3:30:3b:04:e0:58:1f:e4:a9:25:9a:
         c2:44:83:91:d5:31:18:23:e9:db:ab:9a:1b:4f:19:77:86:93:
         a4:c8:b3:27:b5:cf:2d:e6:49:e1:10:be:62:37:a9:77:19:00:
         ea:01:76:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOte9G4Lzlq/9FluwkQW9whGy13EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFN0YwRDExMUZBQjVBNDM3NkREOUM3Q0ZFN0ZEQjY5
MkU1QzhCMzAeFw0yNjAzMzAxOTQwMDVaFw0yNzAzMjkxOTQ1MDVaMDMxMTAvBgNV
BAMTKDNGMTJDRURBQzg2QjA4MUU3OEU4REJGMzBENEIyMjM4MzRBQzdGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QXx+l0j1gs0uoiM1VLZnBJKS
p4hgLsHJjvKiyJJ/GU+jkKNaNZyzn21sMQeRQRyGrivrH4mwKDWcT43gQASTRryO
P/RpUsNGPXRiEr01HoOYBxWHOs2Q7yRSX6SawOdwPq5/5fAkQHPLKSm3C5jNe9+t
P8yywcQsxVRmznVIRbDeT5B06ejKVhF8/OyncMpNLRJJKg0O93gHxU6rn1wfcB7y
K6uVJolBWWmQ1Zu9ay01faSMGpIlbIoDxVlJIIXLBT+pi26em6qicth7xiENaDbw
g0Rw5A7I7bQixIL7SF3ToI8N7j3zzaHgZaRpfP3CnHuxbntsjvdOq5Xx6xfxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPxLO2shrCB546NvzDUsiODSsf6cwHwYDVR0j
BBgwFoAUeefw0RH6taQ3bdnHz+f9tpLlyLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC83OUU3RjBEMTExRkFCNUE0Mzc2REQ5QzdDRkU3RkRCNjkyRTVDOEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTdGMEQxMTFGQUI1QTQz
NzZERDlDN0NGRTdGREI2OTJFNUM4QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzMDMwMmUzNzM3MmUzMTM3MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyE2xMA0GCSqGSIb3DQEBCwUAA4IBAQA2jOGeBIFc
j4xkhTIqsoOuUeo49Rs8HCgOXkvCblXzssNaoCSsOZ8oWGnr47BbbtPq1nLUnl/E
9iivvEhfbFNv75yThURlpuQQjjCgoGT019x91jm2ZRuNSulK5ymMcU5XuA+YO7Ea
TVg59zh6b/P93fhRe2/iKem9KEOMOgGe4ISnTbNG/mmcykPKpBa9q736yYDhjJSM
lLx5zl9f7CzIDdKk+wdQOTtvHQR8gz+bR/Ges1dh42BVMx3qGctLdvvaWoId1sjc
FTgDqrX6ozA7BOBYH+SpJZrCRIOR1TEYI+nbq5obTxl3hpOkyLMntc8t5knhEL5i
N6l3GQDqAXbi
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:58:26 2026 by rpki-client