Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32302e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e32302e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          YhaOeECikXnhI8Sp7Ld5pMs/z1J9iZ7VNzkRTXy1DBY=
Subject key identifier:   B0:F1:66:6A:7C:0D:52:16:71:1A:E6:B8:0F:C9:D3:5A:14:17:68:F4
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       35467EFB0BCA61E3DC3162F3C416B82579423AAF
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32302e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:29 +0000
ROA not before:           Thu 20 Mar 2025 19:35:29 +0000
ROA not after:            Thu 19 Mar 2026 19:40:29 +0000
asID:                     53016
IP address blocks:        177.74.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:46:7e:fb:0b:ca:61:e3:dc:31:62:f3:c4:16:b8:25:79:42:3a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:29 2025 GMT
            Not After : Mar 19 19:40:29 2026 GMT
        Subject: CN=B0F1666A7C0D5216711AE6B80FC9D35A141768F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:0c:6d:d4:3a:af:f5:64:ba:f2:56:32:10:
                    03:d0:f9:68:57:95:64:ef:45:8c:4d:43:17:27:23:
                    ee:d5:04:ef:70:d4:72:98:e1:7a:06:43:cb:2a:06:
                    36:2f:3e:2f:be:08:bf:2b:36:dc:5f:01:2b:25:21:
                    b0:c2:c3:ff:cf:00:9d:c2:c1:e3:e1:fa:df:67:28:
                    9c:76:20:d3:cb:6f:8b:05:86:5b:19:fa:42:5a:fa:
                    7b:1e:bd:0d:b1:0b:0e:6e:3d:f7:b0:e2:1f:d1:97:
                    c8:58:3a:d8:03:d9:c4:04:e5:48:bc:12:18:3f:72:
                    fc:13:50:95:51:84:2b:77:67:20:e7:7f:7b:67:ef:
                    c3:6e:58:3e:52:5f:7c:15:78:80:ab:ee:aa:d6:d1:
                    85:10:81:9b:84:ee:4c:c1:2c:e7:2a:2d:7e:9b:52:
                    77:51:b8:d4:f5:e9:e7:84:16:45:a8:61:b9:5f:87:
                    c6:ca:86:c0:cb:af:9b:7b:de:37:39:c0:49:a4:8f:
                    de:2d:60:e7:fa:6c:77:31:78:71:60:38:fc:e9:31:
                    3a:6b:14:36:79:5f:c3:a3:2d:84:2e:ef:d6:fb:f4:
                    5a:43:ba:05:c2:32:32:fc:aa:1f:02:f1:9f:8c:7f:
                    82:8b:32:80:89:e1:46:9b:5f:21:05:d6:f9:d5:16:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F1:66:6A:7C:0D:52:16:71:1A:E6:B8:0F:C9:D3:5A:14:17:68:F4
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32302e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:8f:0c:5c:3b:26:7d:8a:bd:e1:47:f8:61:ed:e0:2e:48:45:
         86:c7:e0:cc:a2:d8:a1:52:47:29:57:fc:c4:4d:df:11:c6:e9:
         4c:38:be:e5:43:6e:ea:62:c8:e5:e1:b1:eb:a0:13:c5:3e:da:
         b0:3e:dd:6b:25:e7:0a:26:73:f8:01:ab:5c:2b:d6:46:33:f1:
         be:9d:c3:72:12:7d:e5:81:1a:0e:45:cb:f0:c8:6e:ff:f5:4a:
         92:4a:7f:ba:d7:ee:76:69:24:7a:9c:55:e7:5d:da:0b:37:03:
         00:75:2c:92:18:30:e7:b3:01:30:7d:2e:72:34:84:fa:46:c2:
         5a:db:73:2b:fd:7a:78:f8:8e:20:d8:0c:35:55:68:9e:78:29:
         b2:02:84:de:8e:fb:f8:fe:0a:92:13:4f:df:7e:13:1d:8d:9c:
         0d:68:f6:51:91:6c:67:91:4a:42:4e:8c:b4:79:8e:f3:ea:55:
         48:b7:fa:08:5d:a6:b5:4e:38:22:8d:ec:a3:c0:a2:ef:5e:35:
         f6:42:fa:3b:b9:91:a8:20:29:c5:55:15:ac:16:f9:65:a1:87:
         92:29:f2:0d:07:80:87:92:dc:d7:3d:ac:41:a6:69:f4:e7:0b:
         3f:5b:0b:42:98:7b:f4:43:94:a4:ae:25:2f:89:96:93:5b:a6:
         22:5c:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net