Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          eoN16aRwtwhjPP4rkeSBDbJPmlVbodZzrW8E6XknOKk=
Subject key identifier:   71:35:02:B0:25:9A:57:15:2A:AC:16:6C:A7:36:2E:57:E9:B6:A4:A6
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       51351BF910D9276B93C98B945834CFFB4BCFEC78
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:26:05 +0000
ROA not before:           Thu 18 Apr 2024 19:21:05 +0000
ROA not after:            Thu 17 Apr 2025 19:26:05 +0000
asID:                     53016
IP address blocks:        177.74.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 20:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:35:1b:f9:10:d9:27:6b:93:c9:8b:94:58:34:cf:fb:4b:cf:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:21:05 2024 GMT
            Not After : Apr 17 19:26:05 2025 GMT
        Subject: CN=713502B0259A57152AAC166CA7362E57E9B6A4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:fc:36:cb:01:4a:ca:5b:78:ef:d5:2c:c2:
                    31:77:90:0e:93:db:7b:34:62:30:02:b5:0f:65:d2:
                    65:f4:e9:1a:eb:58:0b:ef:4b:7a:a7:f7:c0:f1:0b:
                    1d:aa:c5:08:eb:6b:ba:35:d7:48:4c:f7:a7:d2:46:
                    d2:f0:aa:84:c1:a2:21:82:23:08:f2:4e:54:65:17:
                    8b:95:5e:9f:4f:fb:02:73:41:f8:1f:0b:40:6c:4b:
                    a5:a8:1b:97:62:87:08:81:26:bc:19:3d:4f:af:b3:
                    a4:57:58:57:43:2e:40:29:b9:b6:ea:93:95:1c:89:
                    79:fb:60:e1:b3:cf:82:3c:61:83:0a:b0:78:e6:73:
                    4a:30:01:00:6e:da:2d:aa:3e:ad:57:d3:64:0e:34:
                    f1:f6:fe:aa:ff:79:c6:6c:90:5e:dc:4c:bb:b1:6e:
                    a7:19:8e:19:24:11:26:06:be:37:2f:ec:1b:e7:7f:
                    d3:28:33:22:26:8e:8c:aa:bb:dc:30:e1:76:1a:18:
                    21:48:25:0d:46:c2:c3:5f:c2:76:d6:0a:f0:8e:56:
                    9d:f3:de:4d:0b:d8:94:93:6c:f0:a8:de:9d:7f:7a:
                    1f:e7:e2:72:33:f9:cd:c0:0e:c1:80:18:8c:9e:8a:
                    1c:76:b5:ab:a4:38:b4:16:8d:72:40:1f:53:4b:35:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:02:B0:25:9A:57:15:2A:AC:16:6C:A7:36:2E:57:E9:B6:A4:A6
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:8c:62:61:71:ac:a1:ec:41:03:59:13:3c:86:f4:12:5d:
         68:61:f3:07:fc:37:32:3b:48:3f:ea:d9:9d:e9:5d:71:17:26:
         e4:6b:be:d9:ad:f5:b2:53:a1:17:18:cc:95:5e:f1:c6:64:9a:
         10:a9:e4:24:43:f5:2b:bb:14:0f:b0:71:80:fe:dd:af:41:e3:
         eb:29:dd:0e:79:e2:01:8a:11:4a:b9:97:1f:00:7a:dd:b2:d8:
         87:5f:4c:a7:54:6c:88:b0:09:19:13:00:bb:f1:ca:58:c2:94:
         39:6a:59:89:c8:9f:20:4f:73:a5:3b:33:0b:28:34:e4:00:4b:
         1c:a4:6d:0a:94:10:00:b4:11:05:66:ff:f1:34:a4:e8:4c:b2:
         e0:09:81:3e:d2:4d:5f:4a:58:f1:49:15:17:7e:c7:a5:5c:f7:
         77:62:8c:c8:2a:7e:ee:b3:a6:b3:bd:74:41:39:66:39:d1:96:
         fb:56:4d:54:33:e6:69:a7:11:d4:04:31:f6:6b:66:45:32:5f:
         be:6f:98:c5:5e:7a:a5:09:92:bd:f4:57:21:9a:d0:c1:5d:fe:
         1e:db:58:20:37:5d:1d:3f:10:a7:6d:4f:d2:6e:8e:e6:8d:73:
         79:10:cc:99:80:b6:5b:16:e4:0a:88:a5:86:f4:ba:5f:c9:e2:
         71:c4:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:56 2025 by rpki-client