Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36302e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e36302e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          4faI3H/MCG9ulq/uiAtWpLjq02jvbn6QTQENZQfSRzQ=
Subject key identifier:   70:00:39:90:28:44:E1:1F:82:0C:E1:0F:39:33:0B:8B:3B:02:09:21
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       4A3F6BB7250A5CC4726E146128EF8D3C0E8D1FC8
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36302e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:31 +0000
ROA not before:           Thu 20 Mar 2025 19:35:31 +0000
ROA not after:            Thu 19 Mar 2026 19:40:31 +0000
asID:                     53016
IP address blocks:        177.74.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3f:6b:b7:25:0a:5c:c4:72:6e:14:61:28:ef:8d:3c:0e:8d:1f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:31 2025 GMT
            Not After : Mar 19 19:40:31 2026 GMT
        Subject: CN=700039902844E11F820CE10F39330B8B3B020921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:71:e9:7c:53:39:f8:5d:4e:d5:9e:93:3a:
                    4e:2c:10:fc:83:2c:2e:7b:45:b3:99:ba:16:7b:06:
                    03:8f:01:04:ad:dd:5b:04:06:89:ff:08:9e:20:d0:
                    04:91:fe:4f:15:15:46:19:a6:d2:6d:1a:49:43:82:
                    9f:6d:42:04:b1:75:8c:15:2d:78:75:b1:07:0b:84:
                    49:b7:81:5c:d6:c5:2c:63:30:0d:53:cd:eb:5b:bc:
                    09:1d:35:7c:40:ba:20:31:93:6a:da:c4:bd:43:1c:
                    6b:82:bf:a2:21:89:34:a1:f3:11:5c:45:d8:66:de:
                    42:d0:0a:25:65:44:7a:d6:08:52:6e:c4:8a:f0:3a:
                    86:de:5b:01:b5:24:fc:f0:2b:59:17:ef:80:d9:ee:
                    80:e9:42:ea:40:52:a0:c4:4c:13:d9:c0:02:65:e6:
                    f3:d9:05:a5:9c:ff:1e:72:c6:88:8b:4c:a1:b7:e3:
                    28:59:95:c6:ea:c5:e4:d2:e9:28:db:ee:94:48:55:
                    56:c6:0c:1e:aa:40:13:08:98:b6:33:76:92:d9:54:
                    61:e2:61:00:19:59:e7:63:65:6c:89:67:42:51:7b:
                    54:fa:83:52:84:84:05:7e:2d:11:3f:93:af:b8:0e:
                    53:17:17:c9:3a:e7:2a:67:5e:42:f2:d6:8a:3d:39:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:00:39:90:28:44:E1:1F:82:0C:E1:0F:39:33:0B:8B:3B:02:09:21
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36302e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:63:0c:60:31:0a:e3:65:ab:ee:ed:7d:f9:42:54:13:bc:0e:
         68:df:7c:e8:e5:2c:66:2a:8a:fb:49:3a:d3:92:4f:eb:71:bb:
         00:90:46:2c:d0:83:1f:59:50:1a:7d:ce:24:8c:a5:00:16:ea:
         d3:b7:d6:db:66:0f:87:92:71:f5:fd:62:70:9a:bf:3e:45:87:
         be:da:c6:df:d0:b6:b9:a8:30:be:a1:ba:72:64:2e:3c:56:b5:
         d2:a1:98:d1:d3:06:fd:00:93:77:4e:be:72:a6:46:61:45:31:
         83:56:67:c6:9b:e2:e8:b2:73:8e:4b:f6:fb:37:14:f7:13:03:
         b4:da:4c:f3:21:b9:7c:f4:aa:d4:98:2e:d9:64:37:ca:4b:6b:
         95:1f:1d:ed:a1:14:33:d6:9f:41:30:08:22:90:8d:e3:a5:a0:
         f6:02:79:c1:bd:80:8c:14:ba:8a:ff:28:91:5e:e0:98:17:c3:
         c6:94:6e:c9:46:89:08:4e:20:b7:02:89:5e:52:5a:45:43:7f:
         26:39:62:e1:be:d1:ba:d1:64:e0:b8:1a:bd:7c:19:8d:1f:eb:
         1e:8d:7d:64:1b:e6:1e:9b:88:07:7c:09:0b:82:6d:a5:5d:ed:
         b9:82:45:21:d1:f0:2a:56:84:d8:82:61:83:86:5f:f5:27:d8:
         f4:57:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:17 2025 by rpki-client on console.sobornost.net