Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          zxJegJyP9cgnSfpBPnBpj6Stlmr+Yg+20ejrbSrbFXc=
Subject key identifier:   35:3C:26:1F:7A:71:46:E1:59:76:A8:F0:37:7A:84:10:D9:6E:BE:F4
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       61B8B46868EEF6E456A064C01889E27C74AB1EA5
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 27 May 2024 18:48:00 +0000
ROA not before:           Mon 27 May 2024 18:43:00 +0000
ROA not after:            Mon 26 May 2025 18:48:00 +0000
asID:                     61782
IP address blocks:        200.77.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b8:b4:68:68:ee:f6:e4:56:a0:64:c0:18:89:e2:7c:74:ab:1e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: May 27 18:43:00 2024 GMT
            Not After : May 26 18:48:00 2025 GMT
        Subject: CN=353C261F7A7146E15976A8F0377A8410D96EBEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:0d:b8:32:6a:01:84:b2:18:c7:26:80:49:
                    4b:69:4e:50:55:06:a5:aa:4b:03:c6:3a:29:f7:69:
                    e3:95:64:c2:21:c0:be:eb:b2:63:02:f3:a0:94:74:
                    1b:8f:9a:ae:10:1a:77:c6:16:3b:87:52:d0:23:79:
                    31:dc:6b:d6:e5:79:f1:2f:5a:04:75:b5:d8:38:c2:
                    85:ed:65:ed:76:13:ef:91:30:39:87:5e:2e:9c:43:
                    a6:04:c3:de:a0:c4:a9:5f:a2:68:8c:52:b4:c6:70:
                    25:2f:40:dd:2a:50:65:55:b6:98:f5:21:68:13:04:
                    fe:e7:07:63:ee:95:59:af:5c:42:6c:2d:ab:f3:a5:
                    4a:cc:01:5e:4a:55:e9:c9:63:e2:f6:71:c7:9a:65:
                    4a:ee:7b:81:dc:91:02:a8:cf:12:c0:ae:dc:8b:9c:
                    0d:b5:3f:e4:e4:e8:22:ab:a5:37:b6:19:64:d9:2c:
                    6a:51:b1:7b:d2:0c:ac:25:24:a0:47:7e:a5:13:28:
                    b0:52:9d:4b:76:f1:71:bb:c1:ff:dc:68:47:c2:32:
                    ae:3d:52:17:f6:3f:a5:db:6c:58:18:8e:2b:36:24:
                    12:88:ca:16:26:44:3b:f9:78:b6:12:58:9a:ee:97:
                    60:33:fb:46:ab:05:d3:8f:5f:b0:16:ab:9b:ba:92:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3C:26:1F:7A:71:46:E1:59:76:A8:F0:37:7A:84:10:D9:6E:BE:F4
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137362e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:54:5a:25:c9:55:47:00:25:32:a8:fe:f2:28:54:2b:14:00:
         b8:9b:95:d9:8c:5a:89:3f:a4:f3:d2:9a:37:1d:e7:04:d9:e4:
         08:20:56:25:4f:36:f5:64:9b:ef:48:d9:29:bd:0a:2e:4b:26:
         fe:3f:47:00:0a:94:9c:f1:f9:b5:75:a2:94:f3:c9:87:18:fc:
         f8:9a:a2:e0:39:a9:18:51:82:5d:eb:9b:d3:6e:90:2e:21:8b:
         67:4c:c2:ff:ca:d1:33:2e:8e:ca:3e:1f:14:7d:4e:a1:24:11:
         e5:91:09:e3:0d:94:2f:1a:36:71:7d:66:d9:4d:54:b4:b2:bb:
         9f:fb:63:b1:87:4a:44:67:82:00:cc:69:dd:49:9e:d3:f4:36:
         e4:bb:29:7a:55:db:e3:9e:79:dc:0a:99:0f:98:31:94:fa:1a:
         79:41:70:b6:54:45:e2:2c:07:e0:3a:64:37:19:e0:b2:e9:8f:
         81:55:e9:29:d5:1a:1b:7a:c9:6a:b7:6e:7b:e3:f3:ed:c8:aa:
         c7:e9:09:ef:4b:66:5c:2d:ee:50:0d:f8:f4:34:1a:82:33:7e:
         cd:8d:88:65:51:50:62:81:3b:5f:0e:80:0c:fc:71:80:fe:ee:
         1a:cb:3b:09:4b:4d:a6:72:c7:b6:9a:f2:32:d9:ab:4c:79:d4:
         7e:89:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:16 2024 by rpki-client on console-fra.rpki-client.org