Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35382e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e35382e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          nbkCbskzPCMT0MxCiBJbZFeVkZFcfQNDrkARBrJb2l8=
Subject key identifier:   41:44:72:40:26:01:94:57:53:A7:31:FA:07:4A:27:CE:4B:08:97:65
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       4BFF2BA31C9249EA14F7B9C742B1DE22AC1DD91C
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35382e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:30 +0000
ROA not before:           Thu 20 Mar 2025 19:35:30 +0000
ROA not after:            Thu 19 Mar 2026 19:40:30 +0000
asID:                     53016
IP address blocks:        177.74.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ff:2b:a3:1c:92:49:ea:14:f7:b9:c7:42:b1:de:22:ac:1d:d9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:30 2025 GMT
            Not After : Mar 19 19:40:30 2026 GMT
        Subject: CN=414472402601945753A731FA074A27CE4B089765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:23:4c:c8:ba:fd:b6:bf:45:b2:3b:e3:33:
                    bd:d7:76:2e:e5:c8:ae:e8:f7:03:8a:0d:21:dc:95:
                    df:bb:6a:dc:b3:0d:64:f0:fc:37:51:84:c9:37:07:
                    31:32:99:56:bf:53:98:d5:1f:3a:df:24:8a:5e:d7:
                    88:fb:fc:05:39:46:31:85:ea:a3:b5:2e:d6:5f:e7:
                    dd:ce:1d:e3:4a:15:c3:91:9d:17:f0:83:03:29:92:
                    81:eb:0a:bc:e0:94:32:b9:2c:69:f3:f2:55:1c:71:
                    b2:86:a2:bc:ed:e2:24:75:67:e8:73:51:bd:a5:69:
                    23:69:d2:36:e5:c8:b2:f3:02:7c:60:76:a3:49:b4:
                    cc:8e:80:d7:df:4b:15:12:28:02:3e:63:f8:29:00:
                    a4:4a:b9:fb:7f:82:c0:1d:75:02:cd:d1:c0:f9:e4:
                    66:2a:fc:a1:d8:36:3f:7b:0b:aa:de:2b:b5:c1:e2:
                    cc:89:da:c5:5d:e5:63:21:03:f2:f2:5a:e7:86:d0:
                    e7:54:75:15:aa:16:32:56:92:90:dd:c7:eb:8d:c2:
                    79:bb:e2:6a:6c:ab:da:f6:ca:6c:1d:72:ec:88:68:
                    1c:a4:10:d3:ce:c0:95:7b:2e:8e:af:dc:24:74:ba:
                    f5:22:c1:c0:35:a3:46:f0:e1:05:09:75:e1:45:ca:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:44:72:40:26:01:94:57:53:A7:31:FA:07:4A:27:CE:4B:08:97:65
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35382e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:ef:66:6a:f1:a9:92:5c:be:10:c6:f5:43:f6:64:fd:44:
         55:a7:81:2e:06:12:92:13:b7:48:0a:0a:4e:aa:68:d2:29:36:
         b5:89:d5:de:84:ea:f6:5e:7f:c3:89:ab:d2:0f:62:f4:46:2d:
         59:89:a5:cb:73:9b:42:bc:5d:5f:d9:c1:7c:49:49:2b:c5:d6:
         bc:c1:5f:d1:6a:84:fc:30:b2:48:b4:80:2c:f6:24:e5:d3:24:
         1d:31:63:45:bc:28:a1:f7:06:2f:6f:11:b0:aa:1c:d5:09:ee:
         4e:74:a0:f5:13:3a:41:b5:51:36:df:39:d8:22:dc:c2:ef:d4:
         3d:1f:6e:ff:b1:0c:d4:9a:77:c5:b9:bc:5e:98:ee:60:fe:ff:
         36:8b:e0:01:3d:4c:c8:bd:89:1c:09:8c:43:c7:58:05:99:e4:
         88:85:ec:72:be:7a:1a:aa:6b:59:a5:3b:d5:11:1a:b2:e0:e6:
         d5:2b:bb:42:a1:eb:65:11:70:b4:83:dc:20:76:62:59:e2:9e:
         16:d6:b7:0e:5d:33:ee:63:7b:4f:2f:10:58:a2:b0:a0:bc:e4:
         ee:76:e8:49:5a:e7:85:d2:27:67:84:cc:8b:6f:a4:46:32:aa:
         fe:6e:ea:30:8c:2c:e6:76:09:70:63:d8:03:f1:b7:8d:31:e3:
         88:32:2a:4a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUS/8roxySSeoU97nHQrHeIqwd2RwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNBM0Q5MTZGQ0FCMkU5Q0Q4NUQ5NjU3OEU0MDI0MkEy
RjVDOTY2MjAeFw0yNTAzMjAxOTM1MzBaFw0yNjAzMTkxOTQwMzBaMDMxMTAvBgNV
BAMTKDQxNDQ3MjQwMjYwMTk0NTc1M0E3MzFGQTA3NEEyN0NFNEIwODk3NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+yNMyLr9tr9FsjvjM73Xdi7l
yK7o9wOKDSHcld+7atyzDWTw/DdRhMk3BzEymVa/U5jVHzrfJIpe14j7/AU5RjGF
6qO1LtZf593OHeNKFcORnRfwgwMpkoHrCrzglDK5LGnz8lUccbKGorzt4iR1Z+hz
Ub2laSNp0jblyLLzAnxgdqNJtMyOgNffSxUSKAI+Y/gpAKRKuft/gsAddQLN0cD5
5GYq/KHYNj97C6reK7XB4syJ2sVd5WMhA/LyWueG0OdUdRWqFjJWkpDdx+uNwnm7
4mpsq9r2ymwdcuyIaBykENPOwJV7Lo6v3CR0uvUiwcA1o0bw4QUJdeFFyqJXAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUQURyQCYBlFdTpzH6B0onzksIl2UwHwYDVR0j
BBgwFoAUc6PZFvyrLpzYXZZXjkAkKi9clmIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xcG9TcTllbXhUVUhOcEZvbmt3ZmhCb3JVWHdyZFdWN0prTEVVSmlIQ1g2
LzAvNzNBM0Q5MTZGQ0FCMkU5Q0Q4NUQ5NjU3OEU0MDI0MkEyRjVDOTY2Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83M0EzRDkxNkZDQUIyRTlDRDg1
RDk2NTc4RTQwMjQyQTJGNUM5NjYyLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
cG9TcTllbXhUVUhOcEZvbmt3ZmhCb3JVWHdyZFdWN0prTEVVSmlIQ1g2LzAvMzEz
NzM3MmUzNzM0MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMwMzEz
Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALFKOjANBgkqhkiG9w0BAQsFAAOCAQEAfKHvZmrxqZJcvhDG
9UP2ZP1EVaeBLgYSkhO3SAoKTqpo0ik2tYnV3oTq9l5/w4mr0g9i9EYtWYmly3Ob
QrxdX9nBfElJK8XWvMFf0WqE/DCySLSALPYk5dMkHTFjRbwoofcGL28RsKoc1Qnu
TnSg9RM6QbVRNt852CLcwu/UPR9u/7EM1Jp3xbm8XpjuYP7/NovgAT1MyL2JHAmM
Q8dYBZnkiIXscr56GqprWaU71REasuDm1Su7QqHrZRFwtIPcIHZiWeKeFta3Dl0z
7mN7Ty8QWKKwoLzk7nboSVrnhdInZ4TMi2+kRjKq/m7qMIws5nYJcGPYA/G3jTHj
iDIqSg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net