Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e31322e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e31322e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          dvg3I6Ya/i+hQqvjH7borCl1p9HOjQFcsU2bWrJClXw=
Subject key identifier:   FE:09:56:2A:71:EF:11:B5:99:15:EB:27:72:48:48:16:57:1E:03:A3
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       49930D214A075D0C227E313C4515D8B33DC8D2EA
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e31322e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:26:54 +0000
ROA not before:           Thu 18 Apr 2024 19:21:54 +0000
ROA not after:            Thu 17 Apr 2025 19:26:54 +0000
asID:                     53016
IP address blocks:        177.74.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:93:0d:21:4a:07:5d:0c:22:7e:31:3c:45:15:d8:b3:3d:c8:d2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:21:54 2024 GMT
            Not After : Apr 17 19:26:54 2025 GMT
        Subject: CN=FE09562A71EF11B59915EB2772484816571E03A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:d2:92:d1:81:1e:ca:7d:9b:51:87:bb:75:
                    56:44:3a:ea:8e:e4:66:af:4f:f2:f3:04:13:f0:d8:
                    fc:86:3b:10:90:bb:bd:65:d9:19:44:83:d9:0b:5a:
                    fd:9f:02:ae:fa:81:78:99:e4:ee:62:cb:96:ee:33:
                    6d:64:e9:79:12:44:14:c3:82:83:7b:4a:0c:83:61:
                    20:46:d8:03:9c:56:aa:91:7b:e8:d9:3e:6a:d2:f6:
                    76:4f:fb:a9:b7:21:25:33:c5:3c:a8:e0:56:98:cf:
                    cd:fc:8a:d7:b5:53:92:0e:5e:20:d4:e6:11:44:f5:
                    4f:a1:18:c5:cf:cf:a8:87:e9:02:10:a8:30:c3:7a:
                    01:2d:c9:1a:a7:46:b5:cb:4c:d0:b4:50:3f:80:19:
                    ad:6a:6d:df:75:a6:b9:df:76:9c:d3:ed:a3:13:51:
                    ff:2f:63:3f:da:61:d1:0c:36:2b:8c:cf:20:97:22:
                    73:1d:ab:10:99:f4:c0:81:34:6e:a3:84:fc:6e:57:
                    a9:42:a7:ff:31:17:70:51:af:2f:f8:d8:a8:da:1e:
                    3b:e0:dc:72:8b:63:b2:f7:64:e0:2a:e8:bd:f2:68:
                    75:cc:ff:cd:1a:e0:a5:3d:cc:05:a9:77:a5:69:d4:
                    45:7f:0e:b7:54:1f:18:45:9e:cc:28:9e:f2:2f:96:
                    fa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:56:2A:71:EF:11:B5:99:15:EB:27:72:48:48:16:57:1E:03:A3
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e31322e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:df:2e:d7:e8:96:8f:97:cd:c9:2f:7a:c5:10:75:10:d6:
         c3:9a:dd:86:16:6d:5d:fd:94:17:b5:d6:b0:a4:73:2f:3c:8a:
         ee:7b:3f:3d:a7:e4:14:d6:a5:d6:c8:70:83:22:03:0e:37:0c:
         3e:12:73:55:57:84:7a:d7:23:88:59:dc:ab:e3:f8:eb:8e:04:
         13:c7:9b:8e:8e:45:73:df:0e:5e:f9:bb:87:db:ab:9a:90:67:
         b9:a1:2c:8b:42:51:af:a6:86:ae:05:00:3c:e7:b7:9f:fa:35:
         85:fa:22:97:5c:76:23:28:06:70:39:ea:eb:ae:03:1c:95:37:
         ae:0f:ae:b8:14:16:81:49:df:51:a3:d1:c6:e4:90:db:07:98:
         d3:80:aa:af:cd:ef:e7:3f:ff:de:01:6e:75:7b:39:64:2d:23:
         21:13:d5:8b:ec:d1:37:27:37:12:56:59:11:b1:de:61:b9:1e:
         59:b1:bf:90:95:8c:8f:b0:29:0b:00:15:98:f2:b7:8d:a4:5f:
         c1:a1:96:af:9a:53:f4:bd:bd:5a:e1:c9:d3:24:b1:f3:e9:c8:
         fd:13:87:11:2c:d4:3e:48:01:22:14:8d:34:71:cd:ef:a8:88:
         94:d3:c7:a3:05:66:ef:da:b1:6a:ce:d6:5f:91:fe:d5:6f:31:
         4f:a4:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:15 2024 by rpki-client on console-fra.rpki-client.org