Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137372e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          Dlvpq6iVV50bfWduDwLKJU3cTS+GC33ZsP08djRLjwA=
Subject key identifier:   16:7D:2D:04:3D:99:E8:61:DF:32:CE:85:B1:9A:56:3D:35:D8:03:B3
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       5C3E21BCB4615081302ACD64A20E39963CF36555
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 27 May 2024 18:48:03 +0000
ROA not before:           Mon 27 May 2024 18:43:03 +0000
ROA not after:            Mon 26 May 2025 18:48:03 +0000
asID:                     61782
IP address blocks:        200.77.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3e:21:bc:b4:61:50:81:30:2a:cd:64:a2:0e:39:96:3c:f3:65:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: May 27 18:43:03 2024 GMT
            Not After : May 26 18:48:03 2025 GMT
        Subject: CN=167D2D043D99E861DF32CE85B19A563D35D803B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:36:7a:e0:88:ea:3e:ef:5a:c6:b4:07:09:
                    4d:88:54:14:df:fc:51:55:d3:6f:1a:14:59:eb:ff:
                    8a:a5:1a:2f:38:60:7c:79:4a:e3:4a:f9:6d:3a:92:
                    12:eb:08:a8:cd:49:ed:9d:2b:a8:9b:4a:f0:90:97:
                    86:fe:81:9a:7b:1d:f7:43:ef:62:5e:0c:cc:b1:ef:
                    b6:7b:75:76:ed:8c:8f:f1:26:07:24:4b:45:d3:f9:
                    0c:34:a4:f0:fc:5f:fe:35:88:12:55:a6:c9:fa:c9:
                    ac:7a:fc:4e:a8:90:ce:3e:2e:44:78:61:5d:27:49:
                    50:e7:80:0e:dc:19:ac:9f:04:00:7f:e2:a4:5c:79:
                    37:f5:fb:f9:67:d5:ec:ea:99:1f:9c:47:ab:14:59:
                    1f:59:02:70:31:73:d2:25:4f:aa:23:70:0f:09:ea:
                    b1:e3:a9:2c:c9:6f:56:17:5b:7e:68:43:16:9f:f5:
                    a3:ba:e6:0c:f0:28:3a:e5:55:b4:db:bf:8c:68:66:
                    54:d6:0d:17:80:70:41:cc:cf:1f:41:39:c0:e9:de:
                    10:8c:2c:10:a4:ee:8d:fc:87:17:b4:1d:a4:0c:1f:
                    44:11:b4:1b:92:94:da:78:cc:7b:62:50:00:70:d9:
                    85:a1:fa:16:b1:43:32:7b:e9:b1:e0:f7:e6:cc:c6:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:2D:04:3D:99:E8:61:DF:32:CE:85:B1:9A:56:3D:35:D8:03:B3
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:29:0f:34:42:06:0b:b0:81:01:0b:e1:35:a3:cd:24:b9:
         bd:7c:65:86:d2:ea:02:88:99:a6:be:76:dc:25:73:09:c0:b2:
         e2:9c:82:d3:a4:84:fe:e0:63:c1:20:c3:5c:b3:0d:d3:c1:ce:
         45:a3:ab:b2:76:aa:13:33:e7:a0:33:61:7d:3b:93:8e:0d:b0:
         93:20:18:ee:c2:2c:53:55:16:87:54:b7:a6:a6:9d:83:e4:ad:
         cd:b7:b8:67:39:f0:68:94:12:5b:92:84:fa:a5:2d:84:a8:de:
         5f:2b:f1:4a:b6:cd:7d:0f:d3:b0:e9:c6:49:80:f4:ee:9e:08:
         49:fe:16:7f:f8:a2:e7:4c:b8:7d:58:d9:a9:d8:f9:70:ec:50:
         80:6b:19:d9:4a:cc:4f:26:99:7b:bb:5d:74:47:50:67:1e:44:
         65:d1:29:07:75:c1:92:13:35:fe:f4:ec:00:c3:2a:12:f8:a1:
         e5:eb:c8:01:b2:fc:1b:36:6f:5a:90:82:61:ac:48:f7:f3:3e:
         44:ba:ad:a8:f0:ae:8d:fc:7b:47:15:d2:d3:35:6f:00:36:b9:
         d9:27:f6:fc:85:28:56:3c:ff:0c:e0:a6:91:ae:79:b2:84:b8:
         bf:c9:9c:b6:03:f9:9d:bb:cf:6d:f1:22:33:73:5b:a3:4e:35:
         a5:51:2c:1c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXD4hvLRhUIEwKs1kog45ljzzZVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFN0YwRDExMUZBQjVBNDM3NkREOUM3Q0ZFN0ZEQjY5
MkU1QzhCMzAeFw0yNDA1MjcxODQzMDNaFw0yNTA1MjYxODQ4MDNaMDMxMTAvBgNV
BAMTKDE2N0QyRDA0M0Q5OUU4NjFERjMyQ0U4NUIxOUE1NjNEMzVEODAzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfzZ64IjqPu9axrQHCU2IVBTf
/FFV028aFFnr/4qlGi84YHx5SuNK+W06khLrCKjNSe2dK6ibSvCQl4b+gZp7HfdD
72JeDMyx77Z7dXbtjI/xJgckS0XT+Qw0pPD8X/41iBJVpsn6yax6/E6okM4+LkR4
YV0nSVDngA7cGayfBAB/4qRceTf1+/ln1ezqmR+cR6sUWR9ZAnAxc9IlT6ojcA8J
6rHjqSzJb1YXW35oQxaf9aO65gzwKDrlVbTbv4xoZlTWDReAcEHMzx9BOcDp3hCM
LBCk7o38hxe0HaQMH0QRtBuSlNp4zHtiUABw2YWh+haxQzJ76bHg9+bMxtfjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFn0tBD2Z6GHfMs6FsZpWPTXYA7MwHwYDVR0j
BBgwFoAUeefw0RH6taQ3bdnHz+f9tpLlyLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC83OUU3RjBEMTExRkFCNUE0Mzc2REQ5QzdDRkU3RkRCNjkyRTVDOEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTdGMEQxMTFGQUI1QTQz
NzZERDlDN0NGRTdGREI2OTJFNUM4QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzMDMwMmUzNzM3MmUzMTM3MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyE2xMA0GCSqGSIb3DQEBCwUAA4IBAQCv0ykPNEIG
C7CBAQvhNaPNJLm9fGWG0uoCiJmmvnbcJXMJwLLinILTpIT+4GPBIMNcsw3Twc5F
o6uydqoTM+egM2F9O5OODbCTIBjuwixTVRaHVLempp2D5K3Nt7hnOfBolBJbkoT6
pS2EqN5fK/FKts19D9Ow6cZJgPTunghJ/hZ/+KLnTLh9WNmp2Plw7FCAaxnZSsxP
Jpl7u110R1BnHkRl0SkHdcGSEzX+9OwAwyoS+KHl68gBsvwbNm9akIJhrEj38z5E
uq2o8K6N/HtHFdLTNW8ANrnZJ/b8hShWPP8M4KaRrnmyhLi/yZy2A/mdu89t8SIz
c1ujTjWlUSwc
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:16 2024 by rpki-client on console-fra.rpki-client.org