Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e35312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          rsHgYJdK6PSBKjsP0FfIrR4qPadnqLpI+t7lxmIBjV8=
Subject key identifier:   EC:CE:51:89:0B:48:88:FD:38:DD:51:5E:07:97:3F:45:C7:11:9E:BA
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       26B89027FEB84F531D82097F5152F4BD46036484
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:29 +0000
ROA not before:           Thu 20 Mar 2025 19:35:29 +0000
ROA not after:            Thu 19 Mar 2026 19:40:29 +0000
asID:                     53016
IP address blocks:        177.74.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b8:90:27:fe:b8:4f:53:1d:82:09:7f:51:52:f4:bd:46:03:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:29 2025 GMT
            Not After : Mar 19 19:40:29 2026 GMT
        Subject: CN=ECCE51890B4888FD38DD515E07973F45C7119EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:fb:b8:2e:5a:2d:36:e8:da:67:f2:cb:a3:
                    42:55:3c:93:5d:a4:ad:62:c6:39:98:c5:af:93:80:
                    5d:25:b6:96:25:e2:15:4c:23:91:83:9c:6a:82:13:
                    42:30:41:10:6f:f4:a5:19:b2:c3:2c:b7:05:dc:8c:
                    b6:38:93:5c:62:57:c1:bc:d6:a3:2e:5a:46:d0:6b:
                    a9:b2:23:d3:5d:3d:8f:e2:d6:ee:99:5f:71:6b:58:
                    b4:67:30:66:72:c5:b6:48:b2:1b:41:56:10:06:ad:
                    d0:1a:f7:b0:48:7c:da:8e:2a:dc:75:4f:d4:43:c9:
                    44:73:bf:65:d6:11:b6:5d:00:d2:8e:4a:43:d3:ca:
                    51:79:bf:26:62:ec:65:7b:b9:a1:ab:74:b7:f3:b2:
                    4a:68:fb:76:92:a4:eb:eb:35:91:d4:9f:cd:fa:73:
                    bd:9a:2a:6d:9e:b2:2d:c4:25:9d:7f:c9:88:f3:c7:
                    ac:40:90:a4:a5:81:9c:23:b9:67:55:44:f0:52:23:
                    d7:b1:4b:ab:70:b0:9c:8b:01:77:d3:87:c3:42:3e:
                    77:7f:5c:7c:6f:10:8e:70:73:f5:b9:42:41:76:34:
                    64:fb:c9:93:42:42:61:e7:cd:b7:b4:b6:47:d6:5e:
                    66:f9:51:9c:7a:f0:9f:58:50:a1:4d:91:6e:8f:05:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:51:89:0B:48:88:FD:38:DD:51:5E:07:97:3F:45:C7:11:9E:BA
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:ae:73:12:5b:e0:00:72:11:13:63:df:fa:0d:0b:28:96:
         58:76:e1:10:60:66:de:eb:2d:0f:b5:e3:4f:46:74:1b:16:9d:
         9b:df:43:49:2d:b9:49:95:db:63:51:dd:92:1a:16:bb:6a:31:
         1b:1e:54:11:45:e0:3c:6b:b3:9c:5b:cc:51:5b:02:03:fc:24:
         d0:65:2c:e0:7b:66:8b:5d:87:4e:25:1e:ef:4a:6b:9e:65:82:
         52:c1:d3:e2:00:ab:4b:2b:c8:d9:69:62:30:4c:b2:21:69:a9:
         55:91:95:80:32:ca:f7:6f:ce:7f:17:12:30:b4:c4:a9:31:00:
         66:75:79:83:04:ca:6c:8f:19:3d:36:e0:8f:3a:50:26:a6:58:
         05:4f:59:58:64:f8:e3:aa:1d:7e:27:9a:58:1c:14:13:22:41:
         3c:ee:2e:3c:ea:62:20:5e:cc:2a:83:da:f1:0a:9c:64:0c:76:
         bb:0a:c8:5a:2c:cd:27:2b:fa:b8:0c:e1:0a:28:92:56:58:70:
         68:49:ea:5c:46:70:f8:10:f1:c8:b0:72:c9:6c:0a:5c:a9:0a:
         e0:5c:c2:0c:d5:a3:5a:d4:41:c0:2b:60:80:ab:55:22:e8:d2:
         00:e4:e5:00:99:5e:97:53:71:e0:a6:12:55:ca:79:36:59:14:
         0b:89:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net