Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35362e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e35362e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          h7KKrz74MSyHcFCrj6Zr0Q5eDt70051a0qKjjBaZcQ4=
Subject key identifier:   75:A6:6D:4F:86:3B:87:60:54:DF:5D:8C:EC:79:23:A7:11:F6:8A:DD
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       6782A9CC3AF8AA5D52194FC50EC2B5F215608C6A
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35362e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:28 +0000
ROA not before:           Thu 20 Mar 2025 19:35:28 +0000
ROA not after:            Thu 19 Mar 2026 19:40:28 +0000
asID:                     53016
IP address blocks:        177.74.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:82:a9:cc:3a:f8:aa:5d:52:19:4f:c5:0e:c2:b5:f2:15:60:8c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:28 2025 GMT
            Not After : Mar 19 19:40:28 2026 GMT
        Subject: CN=75A66D4F863B876054DF5D8CEC7923A711F68ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:72:71:68:0b:b5:d8:10:d4:8b:47:06:7d:
                    07:0b:ea:6d:27:4e:88:dc:5b:56:21:33:6f:80:bd:
                    dd:cc:42:29:6c:7d:5d:47:80:81:aa:7b:81:7e:f6:
                    7f:9e:b2:29:4d:a3:f0:82:50:8a:03:1d:e7:7c:5e:
                    73:47:6d:b0:85:58:f7:06:fe:77:94:3c:6d:bc:47:
                    5f:a1:17:8f:ca:63:60:8d:8e:e8:47:58:03:9e:72:
                    a9:83:11:a8:74:af:49:6c:d6:d7:8b:81:6a:f0:f9:
                    20:0c:1f:8a:9c:46:8f:ff:b6:00:86:87:87:e2:19:
                    e1:8a:72:f7:ac:f7:eb:f4:48:c9:39:d8:a5:ec:a2:
                    94:d3:e8:3a:10:46:4f:cd:8b:de:90:99:85:45:db:
                    c6:05:ce:26:0b:66:5a:3a:98:f5:25:45:ae:4c:df:
                    56:13:33:f8:40:86:d2:2d:5e:89:4f:9f:7c:f2:18:
                    b2:62:93:6c:a3:e1:24:f7:69:f2:da:9c:87:0a:01:
                    f7:28:82:f7:83:c9:cb:18:fd:b8:f0:16:c0:c9:6c:
                    99:6f:66:da:e4:14:f3:3f:4f:1c:35:13:b2:4d:e1:
                    1d:c0:3c:9a:9c:8a:a7:4a:e4:47:65:71:1e:f6:b3:
                    a9:7b:75:ad:01:1b:57:35:df:48:41:83:5b:79:2d:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A6:6D:4F:86:3B:87:60:54:DF:5D:8C:EC:79:23:A7:11:F6:8A:DD
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35362e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:be:f6:ef:af:04:1d:0d:20:83:39:72:77:02:07:a3:53:fd:
         33:a2:e4:e8:2e:92:c0:8a:1b:07:e2:5b:ba:60:fc:64:c3:94:
         a6:41:87:a6:5c:5f:bf:53:ba:fe:06:f6:fd:ff:82:96:13:66:
         ab:e4:39:89:23:d4:0a:6f:f1:00:c5:f0:b7:0c:e5:eb:66:ce:
         b9:74:5e:e4:c5:d9:8e:84:8f:e4:b5:36:0d:33:de:71:c2:42:
         df:05:63:c1:b5:4b:40:64:f4:88:02:6a:de:38:6b:5f:31:bd:
         75:89:c0:8a:ce:d9:a2:74:ea:7f:ae:64:8f:b1:1e:20:7a:a7:
         be:de:de:60:0b:84:8a:49:86:ae:f4:18:6a:4d:1e:fd:a4:cc:
         38:f6:81:70:d5:27:2d:99:ff:dc:99:8f:89:1d:3f:35:d8:b0:
         e1:7b:7d:b4:f5:8a:59:c6:e3:5c:c5:02:80:7b:d7:ee:15:91:
         80:a6:2c:80:6e:16:58:50:c0:33:b9:b9:f6:c0:e3:50:21:3c:
         65:a7:67:48:67:aa:ee:46:3c:5f:e2:45:6b:89:5b:cf:75:92:
         79:4a:77:d5:42:3f:a8:c4:4f:d9:06:66:47:a0:02:cd:90:34:
         ca:c4:f4:9b:d7:32:fd:b7:8b:ac:40:55:3f:57:2e:4c:23:b1:
         a8:98:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net