Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137382e302f32342d3234203d3e203631373832.roa
File:                     3230302e37372e3137382e302f32342d3234203d3e203631373832.roa (raw, json)
Hash identifier:          /gZ9WosJ6h2JLdod4jxJarqsznlY3jnlVeZNhY7JZdI=
Subject key identifier:   B8:68:8F:47:29:80:60:FD:DF:86:9B:F2:B7:65:79:13:F3:3A:D9:EF
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       239DACE2A9FA9E288C5B7F1D74C170EB69E04514
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137382e302f32342d3234203d3e203631373832.roa
Signing time:             Mon 27 May 2024 18:48:09 +0000
ROA not before:           Mon 27 May 2024 18:43:09 +0000
ROA not after:            Mon 26 May 2025 18:48:09 +0000
asID:                     61782
IP address blocks:        200.77.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9d:ac:e2:a9:fa:9e:28:8c:5b:7f:1d:74:c1:70:eb:69:e0:45:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: May 27 18:43:09 2024 GMT
            Not After : May 26 18:48:09 2025 GMT
        Subject: CN=B8688F47298060FDDF869BF2B7657913F33AD9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:8b:eb:29:ed:4a:f7:d4:17:99:14:3f:ff:
                    ce:89:5b:a2:ee:ad:f5:ee:7b:8c:e4:0d:3a:d0:25:
                    dd:7e:78:59:fd:ba:fe:c1:44:c3:aa:a2:f9:48:3f:
                    99:d1:70:a9:b2:61:c4:9c:cb:4f:6d:a1:35:46:ac:
                    0c:cf:9c:3f:4e:40:5d:e3:ae:29:2c:d4:48:24:80:
                    f0:4d:fe:41:59:9d:78:4d:e2:26:b5:66:1b:89:a7:
                    2c:f7:f5:01:9e:2e:20:9c:6a:a4:13:dd:15:1a:60:
                    f4:44:35:1e:d1:81:61:ef:1f:cf:e9:43:1d:cb:e7:
                    61:81:99:16:19:3e:77:a6:40:58:73:05:d8:9d:d5:
                    e8:53:33:90:f6:fd:79:a1:4f:4a:bd:23:90:09:aa:
                    dd:33:0e:87:10:f2:5a:bb:55:16:65:88:56:e9:46:
                    d3:52:d4:7b:82:0a:ac:ea:11:99:e8:ec:5f:b5:0e:
                    b7:d5:4e:f9:2a:ed:90:94:a3:85:f0:71:0f:49:d9:
                    a2:76:23:96:06:c8:03:66:64:5f:60:68:02:e3:e9:
                    d3:fa:bb:b6:f2:bc:38:d5:1c:7d:a1:01:94:a5:24:
                    3a:07:ac:66:90:b9:8d:fa:b1:32:b6:88:b1:3f:c0:
                    ae:77:d2:e7:af:9a:9b:63:1e:72:21:46:71:3f:cd:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:8F:47:29:80:60:FD:DF:86:9B:F2:B7:65:79:13:F3:3A:D9:EF
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/3230302e37372e3137382e302f32342d3234203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:de:48:24:75:bc:04:e6:57:62:7e:61:b1:1e:9d:00:37:9b:
         4f:57:96:b6:c8:1c:0c:8b:d0:43:d1:1b:58:af:42:9e:dd:aa:
         25:a9:fd:28:07:8b:9f:81:64:53:ad:de:38:47:5f:d8:36:cf:
         c0:94:96:28:0a:86:cf:0a:35:16:62:6a:2a:e0:29:48:bd:c0:
         e4:b6:c4:da:33:47:a1:ca:59:5a:50:30:82:38:71:19:14:32:
         60:16:f3:db:e6:70:57:8a:4c:31:c1:eb:fb:fc:11:a9:6a:c0:
         eb:f1:bd:92:d3:5b:6c:1f:b8:95:46:68:21:29:91:7f:ac:0c:
         38:58:6f:be:72:34:bc:35:f4:44:1a:2f:d1:aa:85:41:4e:f3:
         1e:fb:38:30:23:1f:54:0e:01:ef:01:8d:47:f1:6c:b2:ac:89:
         8e:5e:3a:ca:7e:ae:ad:9a:0f:35:f8:80:9d:eb:1a:8e:90:6b:
         df:7e:de:d7:ef:de:6f:16:08:79:de:74:80:c1:dd:bf:da:3b:
         c4:e1:7c:5b:da:62:6d:f0:3a:9b:55:65:e3:cb:36:fb:08:70:
         de:42:7b:fe:5c:72:49:f9:7b:9b:ac:05:2a:05:2c:bd:66:f8:
         62:3c:b9:7f:3c:0a:e5:be:35:f8:09:03:c1:66:94:d7:78:cf:
         80:14:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:16 2024 by rpki-client on console-fra.rpki-client.org