Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32332d3233203d3e203631373832.roa (raw, json)
Hash identifier:          Vmn7UDnPi+rVyOUjWXUuDRRtpgTvWUqR+qBR1lXRrmg=
Subject key identifier:   F1:2E:00:5E:9F:B3:76:67:EF:09:9C:2C:A3:48:16:6D:F8:4E:6D:B3
Certificate issuer:       /CN=64777AF379BD5562A81A7227B3074090F2E51021
Certificate serial:       28FE205C2A8B5D5AD014572BA19B8D158A7136A0
Authority key identifier: 64:77:7A:F3:79:BD:55:62:A8:1A:72:27:B3:07:40:90:F2:E5:10:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64777AF379BD5562A81A7227B3074090F2E51021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
Signing time:             Wed 19 Aug 2026 13:39:32 +0000
ROA not before:           Wed 19 Aug 2026 13:34:32 +0000
ROA not after:            Wed 18 Aug 2027 13:39:32 +0000
asID:                     61782
IP address blocks:        200.77.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/64777AF379BD5562A81A7227B3074090F2E51021.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/64777AF379BD5562A81A7227B3074090F2E51021.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64777AF379BD5562A81A7227B3074090F2E51021.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fe:20:5c:2a:8b:5d:5a:d0:14:57:2b:a1:9b:8d:15:8a:71:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64777AF379BD5562A81A7227B3074090F2E51021
        Validity
            Not Before: Aug 19 13:34:32 2026 GMT
            Not After : Aug 18 13:39:32 2027 GMT
        Subject: CN=F12E005E9FB37667EF099C2CA348166DF84E6DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:f7:e9:ea:01:da:2f:af:6e:f2:5a:f9:cf:
                    44:36:85:3d:35:c5:f2:53:e7:bc:41:b0:3f:ff:51:
                    ef:bd:25:d7:13:6f:63:dd:b3:5f:7e:9a:ff:cc:a8:
                    f6:49:97:65:00:48:e6:7b:a0:79:50:ac:cf:fa:d3:
                    72:b7:a4:0f:71:7e:5d:99:ef:c9:ec:98:87:5f:82:
                    95:86:6c:0d:0f:dd:af:53:b2:32:8c:95:d6:50:3c:
                    61:41:bd:6f:73:c9:f9:de:1f:53:80:cf:ba:ae:5a:
                    b4:a6:cf:31:59:09:20:64:7a:e8:a4:b3:95:4b:70:
                    dd:a8:98:93:d6:5a:42:a8:ca:68:27:32:26:7f:ac:
                    17:e3:71:f2:bb:53:c6:7d:55:d3:7e:5b:83:bd:72:
                    32:6a:91:2b:41:d7:17:98:9e:94:1c:ef:5f:25:7e:
                    c8:7b:36:fd:66:83:1e:9f:b4:2e:99:e2:99:ae:2b:
                    33:6d:94:71:ca:3f:8d:d0:3e:fa:f4:38:c5:1e:e5:
                    90:6d:31:d3:ef:cc:d7:65:b4:86:9d:64:40:ba:b9:
                    09:02:47:39:bf:b8:16:e5:fa:d8:6d:dd:53:12:c7:
                    9b:e2:ed:1b:bb:73:d2:c5:ad:e7:6b:e8:43:b0:1b:
                    96:c9:67:39:80:95:eb:79:da:ef:93:9c:b2:74:84:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2E:00:5E:9F:B3:76:67:EF:09:9C:2C:A3:48:16:6D:F8:4E:6D:B3
            X509v3 Authority Key Identifier:
                keyid:64:77:7A:F3:79:BD:55:62:A8:1A:72:27:B3:07:40:90:F2:E5:10:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/64777AF379BD5562A81A7227B3074090F2E51021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64777AF379BD5562A81A7227B3074090F2E51021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:54:73:1d:bb:39:00:59:e9:69:8f:23:87:da:57:69:4e:bc:
         cd:24:8f:5c:91:40:e8:72:ae:56:0a:08:56:35:0c:62:5c:74:
         eb:2b:4a:6a:88:ef:41:1a:89:0d:fc:30:92:62:df:10:b5:aa:
         1f:02:7e:f1:ed:39:bc:d5:d2:54:cc:74:f6:52:c7:02:b7:d0:
         7a:79:bd:7d:da:ca:7d:14:7f:9c:8c:16:ca:40:fb:76:63:79:
         ce:b9:a4:16:4a:ac:b5:9b:83:dc:05:1a:91:91:9b:cc:ad:d5:
         5d:2e:56:d3:90:30:18:95:d2:ef:4e:c6:b4:a7:0d:12:61:a0:
         4b:ca:eb:0c:29:86:01:a4:89:19:d9:94:0b:f9:f0:21:46:63:
         ea:7c:fd:44:6a:bd:a9:b7:2e:60:4b:11:10:28:84:d0:ee:97:
         89:8f:df:4c:bc:af:31:ad:05:a8:e4:e0:2d:76:3c:86:a6:3a:
         46:06:64:9b:09:53:70:96:d6:91:c7:f8:cc:87:f7:83:b3:85:
         4e:3d:75:73:5f:33:06:9b:d6:cc:b9:a5:36:65:db:35:00:a1:
         11:3c:a1:e8:6a:ec:1b:ff:92:63:7c:8a:1a:b6:f5:10:36:d8:
         17:28:46:e6:5f:78:ea:4c:a9:88:63:45:26:3e:eb:e2:6d:d9:
         07:80:1a:39
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKP4gXCqLXVrQFFcroZuNFYpxNqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ3NzdBRjM3OUJENTU2MkE4MUE3MjI3QjMwNzQwOTBG
MkU1MTAyMTAeFw0yNjA4MTkxMzM0MzJaFw0yNzA4MTgxMzM5MzJaMDMxMTAvBgNV
BAMTKEYxMkUwMDVFOUZCMzc2NjdFRjA5OUMyQ0EzNDgxNjZERjg0RTZEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOy/fp6gHaL69u8lr5z0Q2hT01
xfJT57xBsD//Ue+9JdcTb2Pds19+mv/MqPZJl2UASOZ7oHlQrM/603K3pA9xfl2Z
78nsmIdfgpWGbA0P3a9TsjKMldZQPGFBvW9zyfneH1OAz7quWrSmzzFZCSBkeuik
s5VLcN2omJPWWkKoymgnMiZ/rBfjcfK7U8Z9VdN+W4O9cjJqkStB1xeYnpQc718l
fsh7Nv1mgx6ftC6Z4pmuKzNtlHHKP43QPvr0OMUe5ZBtMdPvzNdltIadZEC6uQkC
Rzm/uBbl+tht3VMSx5vi7Ru7c9LFredr6EOwG5bJZzmAlet52u+TnLJ0hOFZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8S4AXp+zdmfvCZwso0gWbfhObbMwHwYDVR0j
BBgwFoAUZHd683m9VWKoGnInswdAkPLlECEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC82NDc3N0FGMzc5QkQ1NTYyQTgxQTcyMjdCMzA3NDA5MEYyRTUxMDIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0Nzc3QUYzNzlCRDU1NjJB
ODFBNzIyN0IzMDc0MDkwRjJFNTEwMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzMDMwMmUzNzM3MmUzMTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByE2wMA0GCSqGSIb3DQEBCwUAA4IBAQCTVHMduzkA
WelpjyOH2ldpTrzNJI9ckUDocq5WCghWNQxiXHTrK0pqiO9BGokN/DCSYt8Qtaof
An7x7Tm81dJUzHT2UscCt9B6eb192sp9FH+cjBbKQPt2Y3nOuaQWSqy1m4PcBRqR
kZvMrdVdLlbTkDAYldLvTsa0pw0SYaBLyusMKYYBpIkZ2ZQL+fAhRmPqfP1Ear2p
ty5gSxEQKITQ7peJj99MvK8xrQWo5OAtdjyGpjpGBmSbCVNwltaRx/jMh/eDs4VO
PXVzXzMGm9bMuaU2Zds1AKERPKHoauwb/5JjfIoatvUQNtgXKEbmX3jqTKmIY0Um
PuvibdkHgBo5
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:02:41 2026 by rpki-client