Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e302e302f31382d3138203d3e203533303136.roa
File:                     3137372e37342e302e302f31382d3138203d3e203533303136.roa (raw, json)
Hash identifier:          mkcc5aOhHYouD05CcvAChtaUr/DH6E3P4Gstw55LHYg=
Subject key identifier:   E7:55:81:AD:1D:83:FA:48:5B:63:78:BF:91:CF:28:02:91:91:0D:24
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       7BCD874533C60AC4AA054D5EE7F211A2BC942AB9
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e302e302f31382d3138203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:29 +0000
ROA not before:           Thu 20 Mar 2025 19:35:29 +0000
ROA not after:            Thu 19 Mar 2026 19:40:29 +0000
asID:                     53016
IP address blocks:        177.74.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cd:87:45:33:c6:0a:c4:aa:05:4d:5e:e7:f2:11:a2:bc:94:2a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:29 2025 GMT
            Not After : Mar 19 19:40:29 2026 GMT
        Subject: CN=E75581AD1D83FA485B6378BF91CF280291910D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:1f:57:ef:a9:4a:3c:ca:ec:86:b3:e6:2d:
                    f0:57:3d:f5:16:c1:87:09:27:d8:34:7c:d1:c1:89:
                    0d:07:94:98:27:ba:42:58:45:b9:d3:2c:51:33:67:
                    e1:69:2a:f0:37:96:6b:8e:bf:d8:f4:58:2a:4f:f8:
                    5c:96:f0:8c:24:2d:b6:86:dd:05:fb:98:66:e1:57:
                    ea:cb:48:38:b1:52:44:93:87:de:23:68:6d:2c:a5:
                    ef:d7:d2:47:30:ca:43:88:85:c1:ff:2d:a3:3a:62:
                    e3:79:85:12:6c:16:14:1b:ce:2b:ce:a1:8e:90:51:
                    7b:66:ce:c3:9b:3a:65:b5:e4:3f:c8:ef:b5:8a:de:
                    6a:84:18:5f:16:e5:01:05:86:f1:f5:69:b7:e3:f7:
                    07:10:65:91:76:bf:a5:79:c4:81:4c:25:ab:e8:3b:
                    d0:b4:86:fa:5b:ff:25:79:48:4b:52:3b:3f:a1:50:
                    d2:34:5d:26:b7:b3:58:50:b0:85:40:40:b5:a4:6c:
                    59:aa:e5:6d:76:6c:07:c0:25:b0:66:e4:2b:66:4e:
                    cc:de:bd:bf:3d:07:90:e9:29:d4:b5:b9:d1:3b:8f:
                    6a:fd:13:66:1d:71:56:53:65:71:b9:be:b9:01:f6:
                    4e:2c:63:03:1a:c0:89:fe:73:c6:49:4f:85:8b:68:
                    3e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:55:81:AD:1D:83:FA:48:5B:63:78:BF:91:CF:28:02:91:91:0D:24
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e302e302f31382d3138203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:3f:c3:35:4d:d5:ef:9b:eb:55:05:75:3e:18:8f:ac:0b:
         a8:22:80:08:97:86:9b:67:59:20:cd:0e:58:bc:0e:42:8e:b1:
         35:15:fe:bb:04:37:03:98:ef:b7:06:fa:3c:ec:c6:7b:35:03:
         2d:34:78:9b:30:21:e9:92:9d:4e:cc:a9:7b:d6:13:28:f9:93:
         af:48:e7:30:2c:c7:ca:3c:dc:f3:d8:a2:a8:9d:89:b3:e1:b3:
         0f:a1:0e:88:13:df:15:8d:fb:a9:c3:77:68:b6:6b:d9:b0:49:
         54:d0:86:ae:ea:e9:ae:29:2f:e3:4b:a9:ef:d9:0a:80:6f:a5:
         00:bd:85:ea:c0:b8:57:c7:4c:b6:18:5a:18:13:b6:a9:b4:21:
         b5:5f:cf:85:ba:73:68:5f:8e:0a:27:3e:1a:44:99:2d:be:7d:
         2f:b7:0e:3d:9f:0d:ef:2e:dd:f3:53:b8:27:66:a6:ff:ed:ed:
         f9:cf:e9:0b:1d:94:72:75:4f:ed:31:4e:da:0d:48:5e:df:13:
         cd:df:9e:75:09:1d:42:60:23:90:79:63:4c:cd:b5:ee:19:49:
         c3:6a:13:08:a0:17:e3:10:5f:cb:ad:23:92:b6:a8:2e:ce:52:
         1c:31:9c:71:96:df:74:b3:b5:7a:c0:56:fb:f5:76:0e:43:33:
         9e:22:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net