Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137392e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137392e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          y6ipchQmr9swvwwASI3bIqNacc33WP/JFTf7PIFmi3Y=
Subject key identifier:   BE:25:95:BB:01:4C:3D:1F:E6:68:4E:99:6F:81:AB:C0:A9:04:D4:EF
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       3C50995E534885297F12B5962493FED989AB803C
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137392e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 30 Mar 2026 19:45:06 +0000
ROA not before:           Mon 30 Mar 2026 19:40:06 +0000
ROA not after:            Mon 29 Mar 2027 19:45:06 +0000
asID:                     61782
IP address blocks:        200.77.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:50:99:5e:53:48:85:29:7f:12:b5:96:24:93:fe:d9:89:ab:80:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Mar 30 19:40:06 2026 GMT
            Not After : Mar 29 19:45:06 2027 GMT
        Subject: CN=BE2595BB014C3D1FE6684E996F81ABC0A904D4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:23:e3:df:7f:1d:5e:85:b3:86:6c:4b:04:
                    94:96:87:d0:b8:4b:5d:0b:96:c3:d9:54:d9:d2:22:
                    ef:85:96:28:7a:5f:e6:21:da:a4:ae:7c:6e:7a:e0:
                    9e:f8:fb:25:57:8a:79:be:25:17:90:9d:f2:1a:34:
                    57:b6:ed:26:80:46:ca:d1:36:cd:3b:59:71:02:35:
                    1f:86:55:16:a7:bc:5c:d4:2d:11:79:0a:22:e8:07:
                    85:2d:49:28:b8:a4:b8:9f:39:eb:c2:97:c3:1b:9d:
                    0a:6f:cf:88:6c:f7:05:5c:6f:57:af:62:10:30:fe:
                    91:92:b2:23:3c:9c:4f:c8:de:e2:82:fd:50:23:4b:
                    5d:39:b0:f9:9a:2d:ec:8c:2f:d5:41:f3:b7:b2:69:
                    8b:d8:e0:38:d6:ca:95:28:92:b2:35:9b:9e:21:58:
                    84:c0:c6:05:2c:c7:3c:3e:d6:ab:2a:ff:1a:15:8e:
                    84:07:90:f0:6b:a8:45:c2:fa:25:43:49:0c:31:27:
                    5f:c4:c0:b4:47:8b:ef:f2:f9:51:8e:69:18:15:2d:
                    c7:0e:62:ec:c5:9d:5a:3a:da:8e:da:e3:e4:21:eb:
                    11:48:8c:dd:7d:8b:b5:bf:5e:ee:77:36:60:06:05:
                    e6:03:4b:dd:65:06:00:27:75:88:eb:68:c6:a8:34:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:25:95:BB:01:4C:3D:1F:E6:68:4E:99:6F:81:AB:C0:A9:04:D4:EF
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137392e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:9b:32:c4:69:74:2b:0d:4e:a1:0a:71:d1:81:8a:f9:1c:
         b5:4d:65:4b:36:d9:bd:45:db:3b:48:ee:64:e6:fa:b0:c9:9f:
         67:9e:66:3b:bf:5f:05:86:30:3d:9d:cd:23:46:00:dc:87:0e:
         f6:48:07:71:ca:ea:b5:71:35:3b:7a:a3:cc:40:1d:34:39:f2:
         cf:37:b7:25:85:fb:c9:7c:34:fb:14:ef:0b:e8:14:b7:e2:0d:
         53:a7:2c:d4:44:1b:23:6d:15:d9:e3:c9:c1:2f:a2:28:02:d7:
         4e:59:c4:76:39:81:f3:b0:2d:6e:43:9f:e0:a4:e4:49:21:37:
         a6:59:96:4d:b0:c8:95:72:55:4c:fc:2b:27:21:2c:42:b5:f4:
         49:cb:83:c9:04:6b:94:a5:34:08:5d:62:4b:e9:95:45:3f:98:
         5b:1b:21:c3:da:c8:b9:1f:d9:2d:14:1a:42:03:f4:19:ef:a5:
         04:fc:a8:d2:c8:2f:72:a0:23:33:61:00:5f:c2:65:b1:27:e7:
         65:a4:33:cb:81:49:9d:33:f3:7f:2f:df:7b:72:2d:93:3c:cd:
         bd:27:88:d5:c0:2a:68:f3:f6:9f:74:98:f7:42:d2:a5:95:f5:
         b2:bc:53:5a:70:f6:d6:66:a1:29:c3:d6:49:0d:13:d4:9b:ba:
         a6:df:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:29:22 2026 by rpki-client