Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e36312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          EItOjOnpHxUl4/Oqb59VAsSrjI1ibKuKJTtaiXnjAZM=
Subject key identifier:   B0:10:BB:45:23:2C:07:BE:41:BA:FA:F5:E2:30:F0:9E:D2:9D:B4:E6
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       47D1B955CD512399DC73B7E4A2A3B1E5DE8ABB12
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:28 +0000
ROA not before:           Thu 20 Mar 2025 19:35:28 +0000
ROA not after:            Thu 19 Mar 2026 19:40:28 +0000
asID:                     53016
IP address blocks:        177.74.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d1:b9:55:cd:51:23:99:dc:73:b7:e4:a2:a3:b1:e5:de:8a:bb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:28 2025 GMT
            Not After : Mar 19 19:40:28 2026 GMT
        Subject: CN=B010BB45232C07BE41BAFAF5E230F09ED29DB4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:a3:c4:43:e2:22:7a:4d:73:d6:cf:b4:19:
                    5d:06:c4:78:f8:bc:69:a2:8b:64:c2:4f:43:b6:5b:
                    17:75:23:7b:f8:3c:4a:71:8e:e4:f4:90:2c:02:81:
                    4d:e4:db:96:73:c9:a8:b0:4e:85:d2:31:d2:dd:2d:
                    6a:93:de:27:33:bc:ec:69:bd:29:60:55:11:ca:47:
                    40:0a:ab:be:14:e9:c6:c2:ba:a6:a2:6c:c7:7d:78:
                    f0:be:81:9f:81:0d:3f:ec:89:fa:83:79:bf:5f:f6:
                    9e:9d:12:c1:69:b8:31:aa:63:cb:dd:6c:52:d1:a4:
                    10:0a:95:91:2e:01:ca:9b:c7:4e:45:83:64:6e:94:
                    10:07:e9:d4:b0:17:a1:0e:f7:fa:09:b6:0d:57:e3:
                    80:7c:5d:0e:0e:a9:e5:27:60:99:66:9f:a1:e2:23:
                    3a:00:75:08:cf:39:7f:40:58:51:b7:95:5c:6d:be:
                    48:f4:6a:6b:ad:29:e6:44:3c:52:09:60:b0:92:8a:
                    87:96:e1:7b:38:d9:2a:05:c1:ef:73:e6:5e:92:59:
                    d9:77:b7:5b:9c:0b:5f:33:35:b0:63:65:5f:45:4e:
                    37:58:b1:cd:1a:d4:d9:23:90:d5:29:2c:37:65:1b:
                    9b:bf:3c:7e:0b:d3:43:86:2f:92:59:bf:42:f3:ba:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:10:BB:45:23:2C:07:BE:41:BA:FA:F5:E2:30:F0:9E:D2:9D:B4:E6
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:63:87:ca:58:f8:bf:39:fe:68:bd:d0:1e:b9:31:c2:a8:f0:
         07:d7:04:4b:85:e2:e5:a6:13:3b:f8:24:ea:c2:8a:26:bb:9d:
         51:18:50:a8:29:25:80:e7:9f:20:d6:ef:18:5f:5f:1d:58:fd:
         34:a9:5f:6c:11:c5:b8:b3:cc:a9:16:12:55:5a:22:70:c2:6c:
         4f:34:49:38:dd:00:85:0f:8a:86:3d:a3:ba:fe:1f:af:db:3d:
         14:51:99:f4:88:f4:0f:85:f0:68:a1:9b:45:5f:b5:21:2f:1e:
         9f:38:70:6c:e6:f3:65:35:d6:cf:e6:19:18:2a:67:7a:06:d5:
         0a:a4:fb:51:3c:43:d4:38:e8:34:ef:8c:2f:a1:e4:2f:b0:f8:
         da:38:a2:69:75:f4:14:c4:84:bb:97:9a:94:c0:e2:ae:94:dc:
         74:23:96:f6:94:8b:32:0c:be:55:97:66:b6:99:4c:56:8a:84:
         40:85:b7:d3:27:30:f6:47:f1:e7:bf:2c:1d:ca:91:1b:94:c5:
         10:cf:84:2a:5d:56:24:6e:67:52:aa:d6:d0:5b:3c:48:0a:bf:
         95:7d:d9:f3:43:94:30:33:03:21:53:71:8e:4c:4d:bd:6a:44:
         7e:17:da:13:03:47:1b:6c:65:8a:60:3d:d6:0b:32:e8:75:ce:
         8e:0a:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:12 2025 by rpki-client on console.sobornost.net