Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137372e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          mCf+GdpSjRunpARljtxJ+h5M3N/o59/uEIk9Lr0Capk=
Subject key identifier:   B2:D8:F6:23:68:13:F1:5D:B4:1C:5F:4A:10:25:9C:20:B3:40:27:C3
Certificate issuer:       /CN=64777AF379BD5562A81A7227B3074090F2E51021
Certificate serial:       6C803E1EB1A9E3F253E80C69A672F365D5BFFA08
Authority key identifier: 64:77:7A:F3:79:BD:55:62:A8:1A:72:27:B3:07:40:90:F2:E5:10:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64777AF379BD5562A81A7227B3074090F2E51021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa
Signing time:             Wed 19 Aug 2026 13:39:39 +0000
ROA not before:           Wed 19 Aug 2026 13:34:39 +0000
ROA not after:            Wed 18 Aug 2027 13:39:39 +0000
asID:                     61782
IP address blocks:        200.77.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/64777AF379BD5562A81A7227B3074090F2E51021.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/64777AF379BD5562A81A7227B3074090F2E51021.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64777AF379BD5562A81A7227B3074090F2E51021.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:3e:1e:b1:a9:e3:f2:53:e8:0c:69:a6:72:f3:65:d5:bf:fa:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64777AF379BD5562A81A7227B3074090F2E51021
        Validity
            Not Before: Aug 19 13:34:39 2026 GMT
            Not After : Aug 18 13:39:39 2027 GMT
        Subject: CN=B2D8F6236813F15DB41C5F4A10259C20B34027C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:05:61:ed:7e:e0:81:0b:a5:01:4b:e3:0d:
                    56:59:fb:5c:1b:6a:17:36:d0:6c:53:e3:6b:67:39:
                    36:3b:3c:9d:b2:40:9c:a7:02:d1:29:cd:f1:e9:cc:
                    2e:c0:d5:eb:e2:0f:84:a6:dd:35:82:af:b0:da:fe:
                    de:28:94:8d:30:6c:8d:7b:03:d3:96:d0:89:2d:b3:
                    4c:4b:b2:7c:fb:42:28:5d:78:50:6a:46:4c:46:ae:
                    b5:2f:40:95:d0:9a:06:a0:1e:b7:4c:f8:a3:5c:ef:
                    12:a7:83:74:c2:ce:60:64:ba:41:82:7b:78:31:77:
                    a7:f6:8b:6a:64:2d:af:e1:98:d1:06:81:f1:19:3d:
                    16:b2:e8:af:8e:ad:ae:ea:a2:74:de:d3:ad:57:01:
                    38:6d:8a:66:20:bb:be:41:00:0e:4b:0f:f1:cb:1d:
                    07:18:a9:ab:96:99:37:bb:0d:41:03:d9:0e:86:1a:
                    6d:a5:35:e2:91:d7:3a:cc:c1:13:a2:66:0a:3b:84:
                    ab:af:51:d1:17:e5:31:4d:52:e9:1d:80:9f:d9:6b:
                    74:02:28:1e:76:ca:f4:3c:ed:d0:5a:8e:d1:64:14:
                    69:97:0a:e2:94:95:fd:c1:38:cf:d2:fd:79:bf:ce:
                    fc:f1:b7:71:76:3e:be:26:91:30:0c:c4:c7:d7:27:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D8:F6:23:68:13:F1:5D:B4:1C:5F:4A:10:25:9C:20:B3:40:27:C3
            X509v3 Authority Key Identifier:
                keyid:64:77:7A:F3:79:BD:55:62:A8:1A:72:27:B3:07:40:90:F2:E5:10:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/64777AF379BD5562A81A7227B3074090F2E51021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64777AF379BD5562A81A7227B3074090F2E51021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137372e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:78:7f:75:92:34:93:ea:e2:29:3f:2b:ac:4c:82:df:16:b3:
         a6:4b:1a:9e:c9:66:8e:d8:44:53:fa:73:9b:e8:37:d0:6b:eb:
         b6:de:df:83:e0:62:be:76:5b:08:a1:e2:1a:0f:aa:5f:a3:44:
         e0:ec:a8:33:e7:10:d9:15:ce:fe:50:1f:7b:3d:a6:c4:68:6b:
         7d:80:1d:69:4a:ad:d4:e3:d8:a8:37:6b:d5:a2:2f:67:7d:1d:
         75:16:b8:e9:74:0b:fc:ee:c4:ef:04:3b:66:b0:f5:f1:13:0f:
         11:94:e4:6d:8d:70:c9:87:a6:90:2d:b7:67:b5:49:24:22:67:
         1f:3e:d2:59:9a:eb:a6:9a:a1:d9:63:a4:b6:a5:06:2c:19:0a:
         b3:ae:4e:52:41:e7:e3:9e:2d:a0:59:42:f6:95:1f:84:20:00:
         1c:97:d0:52:52:8d:ab:c8:93:7a:fb:ce:42:49:1e:f3:54:31:
         2d:33:a1:2b:f3:81:ef:55:3d:18:d3:34:90:31:49:97:07:67:
         2b:bd:a2:8b:59:3a:82:a1:80:aa:9b:8c:23:3c:56:a8:d2:be:
         8e:05:61:c0:84:d2:85:1e:c3:0e:1f:02:42:4a:4d:54:cf:ce:
         00:7a:50:e3:fc:3b:fe:5d:07:3d:36:b1:42:cd:70:e5:d8:bc:
         f4:2e:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:10:52 2026 by rpki-client