Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35342e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e35342e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          xyo2RjjiySt8Y+wN1TXIRCHdrDcUqK4clAzvCRPy2b0=
Subject key identifier:   48:B6:B6:A6:DC:D1:E9:F0:31:7D:CB:CC:2E:41:FB:12:6F:B1:76:EC
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       388163E7CFA64BEF6A97040FD54B13DDE677AE7F
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35342e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:28 +0000
ROA not before:           Thu 20 Mar 2025 19:35:28 +0000
ROA not after:            Thu 19 Mar 2026 19:40:28 +0000
asID:                     53016
IP address blocks:        177.74.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:81:63:e7:cf:a6:4b:ef:6a:97:04:0f:d5:4b:13:dd:e6:77:ae:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:28 2025 GMT
            Not After : Mar 19 19:40:28 2026 GMT
        Subject: CN=48B6B6A6DCD1E9F0317DCBCC2E41FB126FB176EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:96:30:81:57:94:ec:51:1f:5c:9d:ad:33:
                    4d:4c:f5:ee:ae:24:57:fb:59:de:f2:44:6f:81:29:
                    c7:1d:f4:47:33:01:29:20:2e:b3:eb:2b:60:bc:e2:
                    86:dc:11:2c:fa:af:35:af:4a:07:16:e0:dd:18:62:
                    e2:f7:c3:8b:23:6f:89:a7:cf:8a:0c:b6:89:2c:49:
                    9b:05:d4:26:f6:cf:4a:20:36:61:22:66:d8:5f:d0:
                    ef:79:5e:72:e8:55:37:1a:b0:2c:58:4e:14:f4:28:
                    1a:d0:12:5d:ce:ea:05:0a:e9:a8:f3:74:01:e5:aa:
                    3e:cd:0f:fb:3b:e5:6c:fe:73:84:bf:de:6d:77:84:
                    80:e8:b6:7f:ce:94:2b:a5:18:21:7c:a2:6a:b0:d0:
                    7c:0a:45:df:af:a9:be:6c:22:7e:49:ba:42:e7:8c:
                    85:3c:be:a8:5f:bd:d3:85:4b:27:50:d1:ab:56:f3:
                    5e:69:d7:ee:f1:1a:4e:df:77:81:46:c2:3b:bb:98:
                    95:af:48:82:a7:06:6f:b0:f4:aa:14:ef:f7:79:03:
                    c4:7f:80:5d:08:5f:98:f0:ab:86:ab:6e:7e:da:a3:
                    e2:ab:de:3a:a0:47:c4:4a:0b:75:2e:b4:f3:34:2b:
                    91:66:ea:2b:04:fa:bc:b3:59:d9:86:08:05:ee:9e:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B6:B6:A6:DC:D1:E9:F0:31:7D:CB:CC:2E:41:FB:12:6F:B1:76:EC
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35342e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:21:7e:5b:e4:c8:9a:c8:e9:7e:44:ae:0d:3e:fb:19:52:89:
         60:37:bb:67:8b:dd:f8:fb:4a:16:4a:eb:1b:4f:e2:cb:02:2c:
         1a:23:da:4a:80:0c:ab:c9:4b:4f:72:0f:88:dc:30:79:2c:19:
         73:f7:46:3d:76:23:d2:94:da:24:9e:4e:69:b4:ac:f4:2c:d8:
         94:77:4a:40:b0:9d:7e:59:fb:6d:3b:f5:cc:c3:58:5b:08:6a:
         6a:b5:ae:a9:2c:c9:ce:2b:e0:b1:aa:e9:24:b6:0a:33:b6:cd:
         5d:b1:e2:63:ed:3e:53:92:29:e0:73:e4:a2:50:63:44:f6:fa:
         8c:ef:3d:ab:fc:12:0c:92:10:ac:1b:61:59:f2:74:cb:d7:d7:
         7d:9f:ae:d1:59:49:75:4f:2d:95:bb:cc:d8:8a:5e:8f:1a:3c:
         96:4a:b5:8d:bb:53:73:8a:7c:15:91:c0:c8:24:df:94:a1:ba:
         92:c9:f8:2e:27:52:84:e5:07:1e:fd:d2:26:64:36:8a:d5:df:
         b2:79:6a:47:63:35:b8:fc:9d:db:32:49:52:87:83:00:84:ed:
         5d:1c:67:64:7c:b4:58:bb:27:5f:e5:db:8a:36:f7:32:21:c6:
         34:c8:0d:80:f4:c0:5c:0e:d1:2a:71:47:81:8a:a3:bb:6f:69:
         42:98:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net