Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35302e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e35302e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          KDozmq4A7OeZJJ4rUro6maGozu1nZh3qR/q9aXG82Ys=
Subject key identifier:   81:F4:7B:B8:DC:4F:D4:F1:F2:8D:4D:3A:1E:36:51:6C:74:2B:19:21
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       1392979FD71537F2296AF4AD59DAC43F42D9044D
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35302e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:27 +0000
ROA not before:           Thu 20 Mar 2025 19:35:27 +0000
ROA not after:            Thu 19 Mar 2026 19:40:27 +0000
asID:                     53016
IP address blocks:        177.74.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:92:97:9f:d7:15:37:f2:29:6a:f4:ad:59:da:c4:3f:42:d9:04:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:27 2025 GMT
            Not After : Mar 19 19:40:27 2026 GMT
        Subject: CN=81F47BB8DC4FD4F1F28D4D3A1E36516C742B1921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:c4:6e:d8:29:8a:7b:26:cb:b0:e9:c5:86:
                    0b:63:7d:c1:d2:3e:14:6f:2f:85:80:d2:d0:13:13:
                    4c:04:80:12:aa:4c:1b:9d:12:3a:fe:c2:2f:04:ec:
                    30:7b:06:9b:46:70:91:4d:57:2f:81:c6:8a:ee:92:
                    62:44:d2:59:cd:12:06:66:c4:00:4b:9a:96:b8:bd:
                    0e:fc:89:69:e5:98:18:1f:fd:09:e7:ff:83:c4:00:
                    91:e4:04:00:54:6b:87:a2:61:1a:37:b5:21:39:51:
                    e5:89:4d:1c:d0:f5:7e:bc:a4:63:c7:59:d7:fd:b9:
                    6d:25:cc:4e:bc:1c:e4:c9:1e:8a:49:50:4b:a3:9e:
                    12:88:b0:59:90:1e:23:f3:68:22:d1:6a:4d:63:c4:
                    7a:0d:85:7a:ca:02:5b:58:71:9a:10:40:f2:f5:6b:
                    99:3e:76:51:3e:97:24:88:c3:f4:d6:af:08:10:3f:
                    33:17:ea:62:06:32:69:a2:f0:3e:11:6a:cf:5c:d1:
                    45:16:39:b0:7f:45:f7:d2:2f:e2:52:8c:75:1b:e8:
                    84:6d:dd:c7:d5:ef:3b:a1:95:f0:50:aa:b8:b6:a3:
                    40:9b:b5:b5:aa:cf:b2:34:ca:ef:9f:65:6b:86:80:
                    e8:1e:fa:c3:35:67:7d:52:23:7f:ac:9b:7a:e2:e8:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F4:7B:B8:DC:4F:D4:F1:F2:8D:4D:3A:1E:36:51:6C:74:2B:19:21
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35302e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:88:7e:95:f7:4e:f2:e4:33:d3:3f:52:17:e7:8b:f0:fd:85:
         7d:3f:32:68:66:43:e0:ab:b8:a0:8b:f8:36:d3:01:23:3c:bf:
         1c:db:d8:38:30:b9:b9:7e:fe:0e:3d:e5:b6:42:bb:79:4d:ca:
         2f:a0:55:08:69:7f:50:c6:7d:0e:29:33:80:fd:1a:69:75:00:
         d4:fc:23:0f:25:a7:bb:0d:f5:88:3e:d2:71:d1:8a:6b:7a:d9:
         fa:37:91:97:f9:f8:87:a0:66:75:e4:0c:3e:56:f3:03:53:8c:
         da:d5:16:c5:98:5a:63:ba:e8:37:01:8f:9d:82:c1:3e:49:d8:
         d0:88:4c:05:0c:f5:28:40:d9:03:ef:96:0b:45:86:ec:b5:08:
         d3:23:fb:d3:cb:2e:19:5c:ce:da:fc:db:b8:9b:da:e0:2f:6b:
         4c:6b:f3:2c:73:39:73:f1:ae:db:3c:d6:d6:8e:6b:45:3b:1d:
         8d:30:16:8b:b6:87:a7:c7:bb:4d:5a:0c:45:dc:c3:52:4e:01:
         24:5c:6e:b4:30:d1:4b:46:7c:0e:94:19:ad:99:e2:f4:0b:e4:
         41:14:45:2c:18:f1:96:bd:91:2c:b4:26:56:6f:53:13:c8:0a:
         0f:a2:09:65:91:ac:d7:8c:1b:ba:9d:37:c6:b2:47:b9:15:e2:
         eb:e7:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net