Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32302e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e32302e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          bvlSnVHm5RDE/mDYttl4zsUsbl+kz09mepo4vSOiYR0=
Subject key identifier:   C3:3B:C5:57:D4:E2:18:F2:11:E1:42:BD:4B:4F:16:8B:E7:1E:4B:BC
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       573C70565754DCA5A8AA87DD89B9C35FA2C91014
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32302e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:27:01 +0000
ROA not before:           Thu 18 Apr 2024 19:22:01 +0000
ROA not after:            Thu 17 Apr 2025 19:27:01 +0000
asID:                     53016
IP address blocks:        177.74.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:70:56:57:54:dc:a5:a8:aa:87:dd:89:b9:c3:5f:a2:c9:10:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:22:01 2024 GMT
            Not After : Apr 17 19:27:01 2025 GMT
        Subject: CN=C33BC557D4E218F211E142BD4B4F168BE71E4BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:30:a8:26:8e:5b:3d:0b:41:eb:e2:d1:ee:
                    95:18:fa:57:b9:54:25:df:74:d1:0c:be:38:8e:78:
                    68:ec:b6:56:1b:3b:b1:4b:b2:37:10:b0:ac:f8:a2:
                    59:ff:61:f7:af:25:95:1f:8a:79:59:3b:36:e3:2d:
                    c3:fb:aa:0c:a8:83:94:f1:65:66:8c:32:69:1f:df:
                    2c:fb:99:23:63:c8:21:d2:46:51:92:cd:bf:1e:e6:
                    c2:45:a8:60:e5:25:40:de:bf:da:8a:62:7f:14:79:
                    6d:2d:a0:ce:21:3a:ee:56:1b:17:47:be:a6:6a:e4:
                    c4:68:da:4f:cc:7c:b7:b1:fb:49:47:2c:60:5b:34:
                    f9:f8:5e:79:b0:a9:16:76:92:cc:b5:4a:4a:5c:74:
                    bc:99:40:a8:cf:8a:0c:84:1c:3c:a4:50:bf:53:03:
                    e7:10:05:9f:e8:dd:61:19:5e:27:c1:bc:ef:81:2b:
                    fa:b5:d2:d6:79:a4:a6:12:75:17:82:ac:9f:de:fc:
                    4e:60:34:3f:a0:ff:58:e4:47:2c:70:eb:14:37:26:
                    90:e3:44:9b:78:a7:d7:e3:44:c4:08:5c:2d:50:b7:
                    13:cb:3b:7b:92:2e:3a:a8:07:be:69:d8:f5:b1:b7:
                    04:23:c2:42:0e:6c:f4:e5:5e:8c:aa:da:81:29:a8:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:C5:57:D4:E2:18:F2:11:E1:42:BD:4B:4F:16:8B:E7:1E:4B:BC
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32302e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:fc:94:e2:51:99:f6:89:28:38:a2:1b:7c:3e:c4:95:29:
         da:c8:d0:7d:62:c3:96:7b:03:83:42:d9:81:ac:83:51:f7:b3:
         05:da:ff:08:57:98:c3:14:c7:39:7f:be:57:b6:96:e2:61:02:
         7b:61:a6:56:cc:b4:51:1f:99:ca:14:02:4e:2b:1d:9a:7c:70:
         5c:1c:b3:0e:52:d1:05:0c:a4:cc:c5:85:fa:e6:ad:cd:08:8c:
         cc:6d:1a:41:0e:ab:d2:3a:38:be:f0:ef:d7:93:68:d2:34:26:
         53:0d:e0:20:24:84:e5:b6:e6:09:70:24:d5:50:36:b8:00:54:
         1f:e7:ea:ee:e2:02:23:e2:7a:18:7c:fb:0b:cc:fa:b7:5d:c3:
         19:77:c6:12:f7:bb:53:cc:69:18:83:76:b2:10:8b:7f:30:e9:
         5f:23:4d:bf:95:6f:5b:a4:06:49:be:ca:24:d6:46:59:8b:ad:
         72:99:ad:cf:11:c8:e8:65:ed:b4:57:77:92:5f:c1:2d:10:a7:
         3b:76:f1:42:8c:9a:26:69:f5:cf:c4:9a:86:a5:06:0c:cb:33:
         df:81:ce:24:14:9e:75:ee:f6:6e:19:d4:77:d6:10:36:52:10:
         c6:99:5e:fd:80:79:60:c7:2d:59:f8:9a:fb:07:e1:4c:bc:0c:
         58:81:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:30 2024 by rpki-client on console-ams.rpki-client.org