Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          V2iz6CF12Z0AEUrqZ7WpVFUAOW3Xb96Ag9LkZaNH9tc=
Subject key identifier:   00:C4:C8:75:23:74:08:2B:ED:77:3F:A3:5C:3C:46:11:C3:A1:06:F6
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       6BDB87ABB9FD9BF4DF35758DD4DEC3C61BC24A1D
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:28 +0000
ROA not before:           Thu 20 Mar 2025 19:35:28 +0000
ROA not after:            Thu 19 Mar 2026 19:40:28 +0000
asID:                     53016
IP address blocks:        177.74.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:db:87:ab:b9:fd:9b:f4:df:35:75:8d:d4:de:c3:c6:1b:c2:4a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:28 2025 GMT
            Not After : Mar 19 19:40:28 2026 GMT
        Subject: CN=00C4C8752374082BED773FA35C3C4611C3A106F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:b5:6b:95:f9:e5:64:64:70:58:a8:48:52:
                    8a:98:5a:2c:3e:d1:2b:b0:79:db:c3:cb:74:56:42:
                    6e:30:05:d2:69:bc:20:e0:c0:14:7e:33:d6:cf:b0:
                    fc:1a:b1:53:33:ed:dd:61:1d:de:11:6b:29:c6:eb:
                    c2:ce:90:d6:5c:89:79:90:30:55:84:84:2c:cd:a4:
                    90:79:70:c4:ee:03:56:ae:eb:d9:87:b5:b2:0e:64:
                    12:75:12:61:4e:ae:97:10:bc:ee:c3:62:a5:01:d1:
                    d7:0f:41:cd:68:ff:d0:b9:15:1f:07:ac:0e:db:98:
                    1f:64:0d:5c:5a:c9:32:6a:a2:d4:9a:74:db:3a:02:
                    96:b0:6f:1a:4e:20:a7:95:fd:37:f2:a1:a2:8e:a4:
                    00:01:58:a8:2a:cb:ad:5f:92:0a:ba:02:7e:86:ef:
                    6f:75:1c:a5:e0:32:35:32:9b:41:75:7b:0d:1e:fc:
                    87:78:39:ec:a5:8c:b2:c6:c6:da:cc:b4:ea:45:4a:
                    b1:71:84:cb:50:56:c3:3f:e8:8f:3e:cd:e5:d5:39:
                    f9:f5:b9:39:1a:24:84:a7:ff:4b:28:12:20:74:c3:
                    b1:b4:44:f1:13:03:db:84:5c:1f:00:f8:35:33:f8:
                    b3:61:08:23:bf:d9:6d:6d:4f:52:03:31:0f:bf:d1:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C4:C8:75:23:74:08:2B:ED:77:3F:A3:5C:3C:46:11:C3:A1:06:F6
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:31:e2:d1:7a:3f:c5:1c:f0:ca:22:a3:b5:e8:96:3b:0a:58:
         72:ff:52:26:7e:fb:09:d1:8b:c8:15:a8:09:c4:dd:a1:62:ab:
         0d:28:bc:25:da:d5:53:22:d5:42:88:33:48:bf:fa:1a:ee:65:
         4a:02:d6:a2:f2:34:0d:84:6a:2f:e8:ae:43:4f:c0:4a:b3:58:
         a7:de:13:b2:68:ea:d6:3f:d6:f2:0b:ad:7f:eb:69:86:f4:c1:
         94:d3:9c:9f:15:3e:00:37:ae:a8:ac:99:a3:30:41:4a:32:2d:
         71:d3:85:5b:3e:dd:03:39:9d:ef:50:dd:85:9f:42:58:24:25:
         4b:52:ce:99:79:0d:bb:e6:39:a0:d0:8d:c5:e7:df:1b:a6:c8:
         48:fc:29:4a:ea:6c:c2:8d:40:00:4f:8b:e3:eb:cd:58:9c:d7:
         28:bb:c7:fb:cd:09:dc:4b:13:34:99:2a:2b:94:f4:94:68:d3:
         5e:73:dd:6f:67:cd:e8:73:4f:bb:3e:da:9a:42:3a:3b:24:ad:
         d7:a5:a8:79:a4:8c:76:a8:1a:06:00:c3:91:da:38:1e:88:49:
         05:14:e4:e7:32:0e:e3:46:e2:46:54:c9:67:25:0e:d6:b9:7d:
         92:08:69:17:ff:7e:3e:6d:63:77:84:63:71:88:27:f7:02:c6:
         2a:09:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net